Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/mVQLg2vFtKhXYkiJgy9EzEclH78.roa
File: mVQLg2vFtKhXYkiJgy9EzEclH78.roa (raw, json)
Hash identifier: 8XlUZL+eJtMSbbcbuZH2lnnnxy7c34P4HzZYP3Ogx2U=
Subject key identifier: 99:54:0B:83:6B:C5:B4:A8:57:62:48:89:83:2F:44:CC:47:25:1F:BF
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 0197AC03D7DEFE0E8D3F8B1CC10E140768A6
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/mVQLg2vFtKhXYkiJgy9EzEclH78.roa
Signing time: Thu 26 Jun 2025 11:33:42 +0000
ROA not before: Thu 26 Jun 2025 11:33:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58285
IP address blocks: 2a12:6d00::/29 maxlen: 64
2a12:7c80::/29 maxlen: 64
2a12:b080::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:03:d7:de:fe:0e:8d:3f:8b:1c:c1:0e:14:07:68:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Jun 26 11:33:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99540b836bc5b4a857624889832f44cc47251fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:73:57:6f:56:b0:00:39:57:13:b1:10:6a:
e4:60:9d:b6:6c:dd:f1:ca:02:da:e0:36:21:8b:ac:
04:88:54:21:db:70:e2:1d:d0:64:ac:4b:29:ca:ce:
4f:49:23:55:e1:4b:c0:a1:6c:82:be:9d:47:0a:78:
04:bc:8b:07:c5:e1:46:2a:f6:94:f0:4f:51:b5:ae:
90:ee:83:14:38:d0:ca:2e:4f:1b:6c:df:f8:c8:43:
8d:1c:db:c7:9b:11:8e:d1:75:55:cb:30:04:e0:2d:
7a:cd:ac:a0:c1:db:b2:50:a5:78:cd:74:6f:82:97:
f6:08:8e:ce:b6:7b:19:61:cc:67:0d:6c:67:54:29:
ae:43:0e:b7:18:8c:a0:28:29:a9:40:ba:5a:1b:b9:
9a:2f:1d:d8:c9:32:00:c6:b4:00:66:81:c0:5b:8a:
ec:07:76:88:13:fb:5a:a2:94:a8:83:c6:07:b4:c9:
ee:62:9c:04:9f:c6:e8:e8:0a:b3:5a:9e:76:df:00:
89:fd:3c:24:f1:27:85:b8:49:d3:35:74:de:f1:af:
db:66:ef:36:31:2d:c3:2c:11:56:b3:f3:f2:aa:f2:
be:e6:a9:a5:dd:87:70:a0:b5:29:85:09:50:bd:87:
2a:82:aa:22:ee:e2:f8:6c:d0:67:bf:b8:da:20:d0:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:0B:83:6B:C5:B4:A8:57:62:48:89:83:2F:44:CC:47:25:1F:BF
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/mVQLg2vFtKhXYkiJgy9EzEclH78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6d00::/29
2a12:7c80::/29
2a12:b080::/29
Signature Algorithm: sha256WithRSAEncryption
af:b3:48:ce:80:5e:53:de:60:2c:9b:a6:44:6c:6c:22:f2:a2:
85:60:54:68:2a:b9:d0:f6:af:3a:8c:69:07:5a:1f:d9:5b:22:
34:0c:0c:c2:b1:e7:92:02:d2:59:25:3e:f0:01:a9:15:ab:e2:
1f:c6:05:39:76:13:9a:9c:35:01:d3:5c:e5:51:a5:69:1b:18:
b3:18:a6:c4:20:60:99:c2:7d:de:19:11:0f:3c:16:75:f3:37:
fe:00:a9:a7:cc:4c:a7:00:59:a9:5b:67:7b:76:81:dd:b7:bc:
ed:ff:80:80:42:92:0b:f4:91:87:25:79:7f:4f:06:b8:e7:80:
63:bc:e7:89:e9:51:9c:eb:a8:39:78:01:77:8c:b6:3d:4a:fa:
72:80:e8:12:db:4a:6b:12:60:31:61:30:11:77:76:39:37:ab:
76:92:cf:f7:9c:ac:27:35:b6:e2:d0:1b:46:f9:3e:5a:bb:88:
76:fc:13:1a:29:5c:e7:d5:3b:e0:0c:be:79:ab:23:a1:51:a4:
60:d7:1a:05:a5:af:c9:3f:ab:83:14:a9:ac:2f:92:ac:f4:96:
ef:e0:bc:bc:7b:4b:ef:f4:7b:1c:19:18:e8:b7:e1:cf:56:2f:
c4:2d:9b:3a:a1:e2:aa:b9:0b:0f:f8:1f:e4:a2:d7:cd:d0:62:
a1:e8:f7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:59:24 2025 by rpki-client