
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/Mlu5_dJNN_0613h2Y5SWGYo2plc.roa
File: Mlu5_dJNN_0613h2Y5SWGYo2plc.roa (raw, json)
Hash identifier: CAvVd5I+5Zi7+C5cOmRMcgsTbGExGWGR0EvjDIL6HmA=
Subject key identifier: 32:5B:B9:FD:D2:4D:37:FD:3A:D7:78:76:63:94:96:19:8A:36:A6:57
Certificate issuer: /CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
Certificate serial: 0199594C969BCB041014DC3C7CC11369C5ED
Authority key identifier: 10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/Mlu5_dJNN_0613h2Y5SWGYo2plc.roa
Signing time: Wed 17 Sep 2025 20:10:15 +0000
ROA not before: Wed 17 Sep 2025 20:10:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51873
IP address blocks: 5.104.88.0/21 maxlen: 21
46.22.16.0/20 maxlen: 20
185.69.40.0/22 maxlen: 22
2a02:1368::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:59:4c:96:9b:cb:04:10:14:dc:3c:7c:c1:13:69:c5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
Validity
Not Before: Sep 17 20:10:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=325bb9fdd24d37fd3ad77876639496198a36a657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:f8:b2:f0:21:2b:7b:9f:5c:0e:f5:19:81:
46:f9:2d:92:a9:be:b8:ef:52:ae:f9:28:9d:14:b9:
0a:f9:6c:08:55:95:e9:39:43:1e:59:33:a2:7e:05:
66:87:39:41:8b:cb:ed:64:d9:4d:15:0f:07:9a:de:
7c:ac:10:af:e1:2f:b2:76:ef:44:ce:e4:d3:ec:5b:
94:b5:7b:2e:37:b9:82:5e:99:a4:a3:94:76:1c:e1:
6f:ab:d0:64:40:d8:a2:8c:d2:04:32:b2:cc:0f:c6:
a9:32:b3:23:74:bd:4a:fd:35:e5:c0:3d:dd:24:d9:
05:8b:0e:67:08:28:9b:9b:c3:d7:aa:a0:c7:c6:28:
97:e8:ad:c7:86:4a:1e:1e:9e:83:92:dc:2a:a4:2e:
37:6c:d1:1a:98:55:84:a6:bb:29:03:54:db:1e:6c:
53:b9:5b:6a:7d:29:e4:ae:8c:d7:2c:20:66:fa:29:
b8:a3:41:88:63:be:3e:5e:da:16:cb:5f:bb:84:36:
65:3f:73:ac:8f:e8:19:60:54:e0:34:90:fa:56:45:
08:e9:21:9b:10:7f:7d:ef:be:e5:de:ff:37:5f:af:
10:79:05:d3:04:ba:85:0e:0e:f6:de:dd:33:ca:31:
be:b7:fb:20:2d:23:8d:7f:47:2d:1e:8f:23:ef:4f:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5B:B9:FD:D2:4D:37:FD:3A:D7:78:76:63:94:96:19:8A:36:A6:57
X509v3 Authority Key Identifier:
keyid:10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/Mlu5_dJNN_0613h2Y5SWGYo2plc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.88.0/21
46.22.16.0/20
185.69.40.0/22
IPv6:
2a02:1368::/32
Signature Algorithm: sha256WithRSAEncryption
1b:b6:70:dd:5c:6b:f2:37:07:dc:3b:e8:36:db:e3:12:81:ce:
a6:96:16:33:64:3a:dc:9d:61:7f:47:e4:8b:4c:85:c3:e9:c0:
ce:a1:f6:b1:4a:86:d7:4a:c1:9e:83:0e:c5:da:74:cc:3f:e6:
f2:41:80:70:ce:3f:f8:31:01:26:b6:f5:3c:51:32:60:f5:b6:
0f:44:4b:f1:39:2d:21:39:4c:88:bd:40:b8:c1:03:0a:88:bf:
04:da:31:f9:42:b3:88:75:cd:48:47:f3:d3:23:4d:78:82:57:
75:0c:28:4a:70:30:c5:33:fb:8b:70:2f:e6:54:d1:b8:be:88:
83:97:8b:ed:4f:99:36:5d:c2:d8:43:75:64:e4:74:4e:56:2b:
6c:1b:d3:4b:f9:fb:3b:b7:26:6a:5a:47:f6:b1:83:62:60:6b:
16:1d:a1:14:32:8a:31:59:a6:72:80:4c:b0:45:9f:bf:b8:c2:
88:29:16:1b:75:24:ff:96:1e:71:37:8c:ea:9d:a5:35:f6:20:
48:7b:69:d4:c7:f9:75:c1:7a:03:55:5e:1c:e2:e5:19:e7:be:
8b:94:59:dc:b2:58:d5:4c:c6:cd:60:27:3d:03:c5:06:b2:c4:
3b:a0:b9:78:23:90:f7:3e:b9:8a:f0:76:49:0e:cc:86:9e:2c:
0e:5b:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:07 2025 by rpki-client