Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MogubhTYUOs0AZdOXjEu0M7LSiE.roa
File: MogubhTYUOs0AZdOXjEu0M7LSiE.roa (raw, json)
Hash identifier: A9eutUfLO26hcvOkSIf/0SxUC7qD0BEBEqOqCtXoZVs=
Subject key identifier: 32:88:2E:6E:14:D8:50:EB:34:01:97:4E:5E:31:2E:D0:CE:CB:4A:21
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0198C8A182CC6E34D7466D7FD940D7FACD46
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MogubhTYUOs0AZdOXjEu0M7LSiE.roa
Signing time: Wed 20 Aug 2025 17:58:04 +0000
ROA not before: Wed 20 Aug 2025 17:58:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 140.225.192.0/21 maxlen: 21
140.225.200.0/21 maxlen: 21
140.225.208.0/21 maxlen: 21
140.225.216.0/21 maxlen: 21
206.245.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c8:a1:82:cc:6e:34:d7:46:6d:7f:d9:40:d7:fa:cd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 20 17:58:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32882e6e14d850eb3401974e5e312ed0cecb4a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1d:0f:f2:b8:6e:72:5c:51:73:66:e7:e9:48:
7c:0e:4c:9b:43:6b:35:ad:f5:31:fd:b8:32:a9:a9:
38:a4:c4:ab:52:84:ad:5d:c8:71:c8:49:7b:48:ce:
12:6c:ae:9a:be:09:07:25:5b:49:c5:8b:88:49:64:
f8:be:c0:71:c7:3c:3c:3e:c3:11:38:1b:6d:84:49:
83:d8:2b:e4:9d:77:2d:9c:7f:1b:29:63:4f:c7:a6:
c8:8b:83:5f:bd:e2:1f:e8:05:9f:8f:7d:dc:59:39:
36:34:e0:b5:06:0b:37:3c:a5:e2:5c:f4:a4:e1:99:
39:13:0a:6c:c6:1c:0d:4a:24:a7:dd:68:ea:90:ff:
17:58:c8:5c:8e:6c:0e:61:fb:9d:1c:af:bf:f6:9d:
41:e4:a8:0e:bb:5a:a6:ab:f0:68:58:7a:f3:97:b9:
ea:c6:59:2a:1e:52:04:83:ee:e7:e9:43:65:b2:44:
ac:32:23:f3:34:91:35:a4:ee:f2:e4:da:5f:e0:6b:
3e:bd:d2:0c:13:69:c4:6d:03:ea:e1:9b:4f:ee:7a:
29:c5:d3:fa:92:98:78:c2:f1:4a:eb:5b:35:d8:4f:
a8:5b:6f:ab:21:47:90:d7:28:be:8d:a2:a8:e2:4e:
f3:7f:ab:af:af:0b:65:77:75:fd:57:b1:dc:d9:6f:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:88:2E:6E:14:D8:50:EB:34:01:97:4E:5E:31:2E:D0:CE:CB:4A:21
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MogubhTYUOs0AZdOXjEu0M7LSiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.225.192.0/19
206.245.136.0/21
Signature Algorithm: sha256WithRSAEncryption
07:53:23:1b:be:e8:b8:cb:1b:a0:b0:f6:03:af:7f:d2:3e:0f:
e1:83:ae:1d:f2:4a:03:22:70:7c:9f:87:87:6f:8c:96:d9:64:
ca:c7:83:25:b9:f5:c9:72:6c:38:b6:6e:b7:12:ea:7a:d0:74:
89:5b:cf:81:0f:fe:0d:c8:7e:65:4a:fb:c6:df:32:8c:c5:e1:
22:8e:2e:96:19:46:44:64:8a:1f:6c:df:82:85:b7:73:3d:0e:
bc:59:b6:75:36:d5:4c:e1:15:c2:e4:30:71:1c:3b:8a:43:20:
c3:6a:dc:35:12:78:88:65:7c:27:5d:2c:3f:f0:f7:92:d2:c1:
cc:84:f2:f8:ab:52:59:e8:0f:bf:76:b0:ae:cd:3d:82:18:5e:
8c:3e:55:9e:3a:23:fa:46:ff:8d:2a:72:1f:3d:d0:ad:e7:21:
e5:48:1a:f9:9c:18:07:51:f1:4b:ca:27:24:f7:72:c4:81:9f:
24:4f:56:21:6e:44:6a:1a:b2:fb:2a:83:ed:bc:f1:56:f9:c1:
f0:b8:2a:67:ec:75:01:f3:ed:8f:47:7f:cf:6b:20:85:cc:20:
0f:20:7d:c5:bc:9c:a8:6d:d7:12:f3:41:00:30:b2:31:f6:27:
4c:c7:2b:60:6d:45:5f:3b:30:bd:af:6c:f0:33:c8:66:58:30:
54:33:cd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:21:51 2025 by rpki-client