Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/mazPj7cdRL1I04pr_YJNNETJccU.roa
File: mazPj7cdRL1I04pr_YJNNETJccU.roa (raw, json)
Hash identifier: 3OsJUxkMYMMTIuXPRezuzfI9FZxZPBdn1qkD0aOjzGs=
Subject key identifier: 99:AC:CF:8F:B7:1D:44:BD:48:D3:8A:6B:FD:82:4D:34:44:C9:71:C5
Certificate issuer: /CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e
Certificate serial: 0198D0DA4D2CB00B646243C2F8E20ED3DFF7
Authority key identifier: 73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/mazPj7cdRL1I04pr_YJNNETJccU.roa
Signing time: Fri 22 Aug 2025 08:17:04 +0000
ROA not before: Fri 22 Aug 2025 08:17:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214547
IP address blocks: 31.3.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d0:da:4d:2c:b0:0b:64:62:43:c2:f8:e2:0e:d3:df:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e
Validity
Not Before: Aug 22 08:17:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99accf8fb71d44bd48d38a6bfd824d3444c971c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c2:f7:30:34:99:24:c2:c1:2a:a8:a4:b4:fb:
fe:0d:d5:82:a2:76:69:c5:d3:19:6f:a5:e6:18:b2:
a3:21:64:12:6a:88:21:9f:f8:f4:14:59:4f:70:de:
94:46:95:ac:ba:51:71:91:6b:97:94:21:36:06:ac:
55:83:d6:6e:e8:5c:04:03:73:f7:2b:2f:dc:fe:88:
05:9b:ed:14:d5:8b:bd:9d:b0:c1:8e:28:17:05:c3:
e4:a2:12:e0:1a:9f:ae:d7:e3:71:a0:aa:2b:0c:22:
3a:ee:02:9b:e7:c2:6f:59:5f:40:95:a5:a4:cf:14:
a6:ab:7d:61:f0:51:9f:cc:7f:1c:c7:8b:65:65:55:
e1:5d:95:e1:cc:71:3d:73:d5:fb:b8:b5:6b:76:98:
e3:69:81:65:83:ea:4b:62:ca:26:a7:c6:50:4e:17:
9e:42:05:1c:2a:a9:e0:b9:79:94:35:47:66:11:70:
87:23:e3:c5:b8:62:e1:87:dd:89:6e:d6:1b:7b:01:
ff:30:be:39:29:70:b0:71:0e:98:20:f9:49:1a:1d:
e8:16:45:4f:c1:35:42:db:17:7f:69:0e:fa:f4:9c:
5f:c3:1a:0b:22:d1:b3:7d:cd:96:c7:60:38:e7:ed:
9b:ca:51:0c:56:a8:87:65:40:40:4f:37:f6:8f:02:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AC:CF:8F:B7:1D:44:BD:48:D3:8A:6B:FD:82:4D:34:44:C9:71:C5
X509v3 Authority Key Identifier:
keyid:73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/mazPj7cdRL1I04pr_YJNNETJccU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.222.0/24
Signature Algorithm: sha256WithRSAEncryption
37:0c:75:cc:59:ca:45:cf:f4:97:ab:69:83:c3:61:b6:08:9d:
ce:83:d2:1e:8e:4d:94:18:7c:db:9f:ec:7b:42:95:5a:a2:87:
2c:4b:b0:c4:cc:a3:0e:b7:f9:00:e0:fb:25:a8:15:6f:c7:69:
b4:c6:f8:11:fe:a2:0f:e0:b7:24:80:06:9e:ae:70:7e:f8:7e:
4f:9c:3d:2a:c9:30:76:fe:5c:f8:82:24:3c:4b:84:1b:16:d6:
42:22:b5:67:f4:e4:af:3e:68:4e:66:8e:20:41:f0:e0:93:6d:
d2:fa:27:30:98:15:12:ea:0d:ca:5c:3c:04:3f:ec:07:ac:41:
99:ce:5c:6a:42:4f:ef:a9:03:ce:72:c1:96:10:b2:20:e0:a5:
64:9b:19:31:03:a6:3c:a4:d0:8c:f3:25:18:2d:15:87:33:41:
30:c2:17:dc:89:76:5c:f3:d1:92:53:d8:d8:4b:7e:4a:83:c4:
62:65:d5:27:9c:6e:7f:e8:49:63:a7:b9:b0:2c:1d:04:e2:c1:
2c:7b:ea:bc:17:82:54:30:51:6c:b6:14:4f:b3:c0:e7:24:f5:
e7:a4:08:bf:39:58:bf:dc:46:3b:e5:c2:9f:7a:ad:13:b5:51:
0d:26:d6:46:00:c2:66:51:f4:24:29:4b:05:b0:06:77:00:0e:
82:72:83:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:37:05 2025 by rpki-client