Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/MqKLCRU6qHco-aiXgHxMYY3EIRE.roa
File: MqKLCRU6qHco-aiXgHxMYY3EIRE.roa (raw, json)
Hash identifier: H27r8KGOSsDlSAiFBjBlkIjViM4Z2AjKZDp27Q2HyxY=
Subject key identifier: 32:A2:8B:09:15:3A:A8:77:28:F9:A8:97:80:7C:4C:61:8D:C4:21:11
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 0198C3FEFB5552E0592D2DD0E85AB9D7A40B
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/MqKLCRU6qHco-aiXgHxMYY3EIRE.roa
Signing time: Tue 19 Aug 2025 20:22:04 +0000
ROA not before: Tue 19 Aug 2025 20:22:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a0e:ffc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c3:fe:fb:55:52:e0:59:2d:2d:d0:e8:5a:b9:d7:a4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Aug 19 20:22:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32a28b09153aa87728f9a897807c4c618dc42111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:df:03:67:12:30:34:84:d0:9f:17:36:ac:77:
13:c6:1d:49:af:08:d4:17:f1:e6:95:df:12:72:97:
85:e5:18:5a:8e:ce:e5:e6:fe:09:8c:fb:0e:68:0e:
ef:25:92:89:29:91:da:d5:b3:e5:ba:ef:c7:7f:07:
b9:b9:b9:07:cf:4e:12:6e:8e:e4:30:4b:c0:f6:24:
ce:e9:e4:8c:6d:36:04:ec:f4:48:3e:00:32:5f:2a:
9b:13:e4:be:49:e3:72:6b:2e:b9:70:41:cd:a3:c4:
6e:87:13:18:4f:39:73:5b:8b:4e:31:6b:e9:d3:fe:
ec:44:79:8c:60:f6:8f:2a:35:93:a6:a9:8f:12:d5:
89:9e:33:7c:87:ce:cb:9b:c5:8f:74:16:88:b6:f1:
5b:48:a4:7c:b8:6a:40:20:dc:dc:67:f4:0f:24:3e:
06:cd:24:a6:5e:77:10:4a:96:31:9a:74:0d:70:e8:
55:e3:9f:d5:11:72:0f:a4:fa:46:84:ec:df:0a:37:
78:5f:4f:fd:0b:3c:c0:c0:cb:0a:7a:2f:2b:6e:b2:
cc:dc:ed:26:fc:d0:33:43:b5:46:3e:89:ad:b2:a4:
1b:86:5e:82:ae:af:ff:7f:be:a0:8b:e6:57:45:30:
a7:1c:6f:12:3e:50:6b:04:48:7b:a6:c3:ce:a8:f5:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A2:8B:09:15:3A:A8:77:28:F9:A8:97:80:7C:4C:61:8D:C4:21:11
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/MqKLCRU6qHco-aiXgHxMYY3EIRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:ffc0::/32
Signature Algorithm: sha256WithRSAEncryption
78:1c:8a:48:ec:13:62:b7:79:f9:e8:04:7a:10:ff:64:29:fe:
4c:4e:51:c6:d6:b8:6a:b8:31:29:40:bc:04:bf:30:f6:cf:d8:
8f:5f:12:05:c2:8f:07:5c:a5:74:37:e4:49:f6:ef:8e:22:df:
6e:08:ad:ed:b2:f7:b8:6a:60:ac:7c:e1:ad:a5:1f:f4:5c:78:
98:c8:40:f9:2c:b9:2d:18:25:df:4a:4b:83:a6:49:7d:87:f0:
ba:c6:7f:55:d2:ec:d5:c5:23:59:e6:49:fd:23:13:9e:4e:57:
e6:ee:76:1d:c5:ef:8b:6a:bf:0a:87:24:b6:4d:41:bb:3b:df:
ee:59:5d:05:8d:62:8e:92:62:b6:6d:79:18:96:ef:2c:a2:a9:
92:42:7f:d4:5e:5b:d1:d2:f5:a1:ea:89:54:4f:a8:5f:6c:43:
e8:0e:5f:24:16:fa:1a:a7:06:e3:66:ef:80:f6:64:e4:b9:67:
42:c7:b6:33:0b:dd:49:e8:20:0b:96:48:fc:8c:59:83:6c:9a:
2e:1a:85:75:25:d3:06:55:4e:c3:01:06:c3:75:30:2c:dc:bf:
5d:6f:08:b0:6a:ef:d9:45:4e:fa:ad:38:66:4f:88:ba:6f:a0:
62:01:23:2e:06:2b:c3:ff:45:83:b3:fc:83:df:7c:75:20:09:
be:55:99:f4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZjD/vtVUuBZLS3Q6Fq516QLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZDRkNDlkYTNlMTQ4NTVhN2I4ODM2MDNmZjE0OGMxYmIy
MWY2OTAwHhcNMjUwODE5MjAyMjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmEyOGIwOTE1M2FhODc3MjhmOWE4OTc4MDdjNGM2MThkYzQyMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN8DZxIwNITQnxc2rHcTxh1JrwjU
F/Hmld8ScpeF5Rhajs7l5v4JjPsOaA7vJZKJKZHa1bPluu/Hfwe5ubkHz04Sbo7k
MEvA9iTO6eSMbTYE7PRIPgAyXyqbE+S+SeNyay65cEHNo8RuhxMYTzlzW4tOMWvp
0/7sRHmMYPaPKjWTpqmPEtWJnjN8h87Lm8WPdBaItvFbSKR8uGpAINzcZ/QPJD4G
zSSmXncQSpYxmnQNcOhV45/VEXIPpPpGhOzfCjd4X0/9CzzAwMsKei8rbrLM3O0m
/NAzQ7VGPomtsqQbhl6Crq//f76gi+ZXRTCnHG8SPlBrBEh7psPOqPWjpQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDKiiwkVOqh3KPmol4B8TGGNxCERMB8GA1UdIwQY
MBaAFAXU1J2j4UhVp7iDYD/xSMG7IfaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQt
NThmMWNiZjNjYWMzLzEvTXFLTENSVTZxSGNvLWFpWGdIeE1ZWTNFSVJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQtNThmMWNiZjNjYWMz
LzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg7/wDAN
BgkqhkiG9w0BAQsFAAOCAQEAeByKSOwTYrd5+egEehD/ZCn+TE5Rxta4argxKUC8
BL8w9s/Yj18SBcKPB1yldDfkSfbvjiLfbgit7bL3uGpgrHzhraUf9Fx4mMhA+Sy5
LRgl30pLg6ZJfYfwusZ/VdLs1cUjWeZJ/SMTnk5X5u52HcXvi2q/Cocktk1Buzvf
7lldBY1ijpJitm15GJbvLKKpkkJ/1F5b0dL1oeqJVE+oX2xD6A5fJBb6GqcG42bv
gPZk5LlnQse2MwvdSeggC5ZI/IxZg2yaLhqFdSXTBlVOwwEGw3UwLNy/XW8IsGrv
2UVO+q04Zk+Ium+gYgEjLgYrw/9Fg7P8g998dSAJvlWZ9A==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:10 2025 by rpki-client