Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/mvKNPFMV6qBSG3SFSM4qWTU0PTM.roa
File: mvKNPFMV6qBSG3SFSM4qWTU0PTM.roa (raw, json)
Hash identifier: 0KVXMDqCW8pJ5nUQOv8p5VWslPhCTBVdym4Cj/bx29s=
Subject key identifier: 9A:F2:8D:3C:53:15:EA:A0:52:1B:74:85:48:CE:2A:59:35:34:3D:33
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 0199449F0230EA090BE902192B03AF9F3C8F
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/mvKNPFMV6qBSG3SFSM4qWTU0PTM.roa
Signing time: Sat 13 Sep 2025 19:48:15 +0000
ROA not before: Sat 13 Sep 2025 19:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 45.88.100.0/24 maxlen: 24
45.95.129.0/24 maxlen: 24
185.253.24.0/24 maxlen: 24
194.113.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:44:9f:02:30:ea:09:0b:e9:02:19:2b:03:af:9f:3c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Sep 13 19:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9af28d3c5315eaa0521b748548ce2a5935343d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a7:74:ca:58:b5:47:41:34:92:a9:45:26:b5:
7d:9c:ce:fa:aa:85:c8:fe:a7:26:d3:89:74:31:e6:
74:52:9a:5e:a6:2c:8b:22:b2:ce:8e:29:0c:bd:20:
c9:c6:85:ed:be:8f:00:15:da:a6:df:ae:22:c4:e0:
db:6c:db:b2:b9:c5:c3:f5:f5:df:82:ce:b8:64:21:
5e:b8:7a:99:4a:bf:c3:cb:1e:49:a3:e4:6c:c8:74:
84:47:b1:aa:13:24:f0:d1:3b:f7:6f:aa:e9:50:d5:
16:2c:86:7d:a7:56:a1:80:1b:e7:4a:f0:ec:4d:61:
0a:ee:ef:1b:1a:3b:8c:db:fa:39:0b:84:62:4b:92:
8b:63:5e:25:d6:4b:97:a2:06:c9:22:e0:01:12:b0:
23:78:73:a4:2e:d6:c3:d1:66:ff:8c:7e:d2:c5:40:
29:5e:93:5c:9b:f7:48:d0:22:8b:c3:85:ab:55:7d:
c5:cf:83:e6:b0:b7:e4:08:34:1c:d6:19:cc:45:f6:
4c:bd:a9:b0:43:e6:67:e1:1f:b5:de:5d:ea:c1:b8:
5a:b7:44:8f:7a:50:64:5f:24:8a:8c:38:78:09:0e:
04:8d:38:f0:05:c7:fe:d6:7a:6f:c8:37:9f:13:f9:
aa:60:40:5c:7a:e6:41:93:3a:d2:82:53:33:10:7f:
56:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F2:8D:3C:53:15:EA:A0:52:1B:74:85:48:CE:2A:59:35:34:3D:33
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/mvKNPFMV6qBSG3SFSM4qWTU0PTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.100.0/24
45.95.129.0/24
185.253.24.0/24
194.113.238.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3b:9b:b0:c0:01:53:65:6c:e3:f8:3b:66:ab:96:f1:04:3a:
6f:19:25:be:40:e3:3d:68:84:ce:49:f8:dd:48:cb:17:f6:0e:
7b:69:08:af:be:ba:a4:b8:b3:d4:80:be:2b:93:0f:81:47:8c:
ac:9b:cb:15:a2:89:68:05:cf:c8:9c:7c:e9:13:cb:90:0b:fb:
a4:a5:32:37:ab:30:bf:ba:a8:6b:a4:94:84:1f:26:ba:54:d9:
f5:85:52:f2:83:6a:55:bf:c4:ac:64:55:5a:b7:4d:ea:ad:00:
07:fb:61:93:6a:fa:90:e8:0b:d6:4b:45:96:7c:43:34:d6:6c:
88:cc:0e:1c:88:3b:ba:5f:6f:3d:7c:a1:74:65:e5:02:94:f9:
fa:3e:cc:e2:86:67:3b:33:86:4e:23:26:9f:ca:5b:ac:5e:a9:
20:c7:81:d8:fb:72:04:bf:15:dd:63:0b:e4:4c:83:9c:75:7f:
7f:e4:5c:5d:f6:34:59:b1:5e:47:a6:50:80:f2:ac:60:93:ae:
c2:d3:2c:b5:e5:e2:2e:e6:94:36:5d:48:ec:90:cc:0a:37:1c:
ad:c1:a5:19:ed:93:6c:bf:2e:f1:54:c6:28:bb:cf:cd:a9:b4:
5e:92:0c:88:02:2b:43:22:97:a5:3a:de:14:dd:55:a9:35:31:
64:74:2c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:43 2025 by rpki-client