Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/MncpHd9QqX2ka0is5mCmp6Ls4EE.roa
File: MncpHd9QqX2ka0is5mCmp6Ls4EE.roa (raw, json)
Hash identifier: rNntJON3CyCfJy9LGsF58CLKoNGRCBJyCvrP9s3kE9g=
Subject key identifier: 32:77:29:1D:DF:50:A9:7D:A4:6B:48:AC:E6:60:A6:A7:A2:EC:E0:41
Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial: 0199C5D471AE513DBF458111406AE959ED66
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/MncpHd9QqX2ka0is5mCmp6Ls4EE.roa
Signing time: Wed 08 Oct 2025 21:57:38 +0000
ROA not before: Wed 08 Oct 2025 21:57:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212454
IP address blocks: 194.92.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:d4:71:ae:51:3d:bf:45:81:11:40:6a:e9:59:ed:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Validity
Not Before: Oct 8 21:57:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3277291ddf50a97da46b48ace660a6a7a2ece041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:26:dc:41:7a:a1:dc:d6:75:db:65:6f:cd:
e2:ec:b2:0a:75:d7:5e:80:f6:be:cd:79:0a:c3:f1:
c3:a2:58:34:58:72:06:c9:c7:d9:88:10:9b:db:33:
db:e0:d9:96:18:15:ec:15:d2:62:7d:11:ef:74:5f:
58:67:2c:3f:4d:99:c3:ae:10:59:4c:f1:bb:c1:83:
aa:33:62:3d:07:d0:08:7a:f1:65:e0:42:df:6b:71:
2e:cb:b4:22:5f:74:ee:1a:d5:61:13:7d:d7:af:81:
64:60:4a:f5:bd:d5:1b:8b:db:40:5e:7a:62:77:e1:
3b:5c:7a:93:f1:4c:b5:f3:0a:4f:61:3f:cc:16:0a:
47:b1:71:84:09:22:63:8b:1d:97:29:64:17:cb:ae:
13:0d:03:c9:8d:86:2f:5a:07:2b:a4:2a:d9:f7:a0:
b3:c1:84:86:dc:58:39:fa:44:72:52:49:2e:23:5d:
2e:e3:88:4a:a1:7b:29:15:f7:6d:01:f2:12:a1:b1:
df:4e:a0:ac:7b:ae:56:14:f3:c5:e2:86:b7:57:0b:
a1:f7:3c:22:f9:e3:df:b1:e0:65:11:25:c2:e8:4d:
66:5a:a9:12:a5:85:e5:ee:83:74:27:56:e6:7a:02:
34:f3:a4:06:28:67:e9:40:75:27:82:a3:18:4c:e4:
ac:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:77:29:1D:DF:50:A9:7D:A4:6B:48:AC:E6:60:A6:A7:A2:EC:E0:41
X509v3 Authority Key Identifier:
keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/MncpHd9QqX2ka0is5mCmp6Ls4EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.92.100.0/24
Signature Algorithm: sha256WithRSAEncryption
91:05:4c:1b:5a:91:4c:91:9b:44:b7:94:ab:09:e1:31:53:ef:
bf:59:1c:b6:b8:a1:0b:46:1a:7f:d8:41:5a:b2:46:fa:ad:ce:
d1:d1:75:6f:7a:4d:5f:8e:e1:d8:d3:97:a7:ba:2e:fa:a4:75:
50:a3:7c:4c:0d:51:3b:60:53:db:fc:24:cf:e0:a0:4c:4e:e1:
ee:15:03:2a:ed:50:c6:32:8d:30:4f:9c:f2:0c:dc:60:14:0b:
be:da:e4:c9:ac:fc:ab:c3:f6:2e:49:db:ea:e1:83:ea:57:f6:
95:ae:6a:bf:0e:90:50:21:a3:41:3d:e2:dc:58:ab:90:14:dd:
3d:46:9c:d2:e9:63:9e:cf:41:c7:ee:ed:cd:0f:01:0c:0d:ed:
1c:82:3b:c8:88:eb:c0:62:3b:eb:49:0e:e0:df:58:4e:5c:93:
1b:6a:f7:d2:bd:ae:e7:4c:0b:fe:82:ac:2e:e7:c8:86:27:5c:
0d:94:7c:45:18:35:46:fd:46:a5:2a:8f:59:74:db:a9:28:91:
91:71:87:7f:2a:4a:30:b4:3a:44:e9:01:8d:19:5b:0d:8a:19:
b9:64:e6:41:9e:cd:43:c6:c2:b6:b4:85:c5:70:f2:35:ab:ec:
52:39:16:4d:2b:9b:cd:ba:1f:a7:28:bd:52:a9:6b:41:ee:7a:
2a:30:a1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:35 2025 by rpki-client