Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/mIMZrEW18-_5KGhaxhfyAse2jaU.roa
File: mIMZrEW18-_5KGhaxhfyAse2jaU.roa (raw, json)
Hash identifier: 6Qvzu2ngRsyEUpj0qpA3Dkp0CWaU4iSnWXbsJngfWw4=
Subject key identifier: 98:83:19:AC:45:B5:F3:EF:F9:28:68:5A:C6:17:F2:02:C7:B6:8D:A5
Certificate issuer: /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Certificate serial: 019899716E03C9D701884756D9364B0D1315
Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/mIMZrEW18-_5KGhaxhfyAse2jaU.roa
Signing time: Mon 11 Aug 2025 14:03:24 +0000
ROA not before: Mon 11 Aug 2025 14:03:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41966
IP address blocks: 193.176.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:71:6e:03:c9:d7:01:88:47:56:d9:36:4b:0d:13:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Validity
Not Before: Aug 11 14:03:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=988319ac45b5f3eff928685ac617f202c7b68da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:b4:14:c2:23:2b:98:1d:3b:96:ff:3f:36:
14:3d:f5:a2:03:a4:5d:7e:6f:63:3b:b4:a6:9e:18:
6e:32:f8:5d:ee:a7:07:6c:cd:ae:36:44:1b:1b:e5:
a1:ae:aa:85:8c:c5:2e:58:29:0b:a1:2e:c6:7c:ac:
d9:4b:5c:f9:55:50:cd:15:4d:59:90:1b:56:e4:d6:
e8:8e:34:0a:ad:29:8d:2a:14:8c:12:78:0d:75:9f:
57:b6:70:b1:e3:1a:45:52:72:98:94:04:5d:6f:47:
b3:fb:ea:77:d3:a9:05:ca:77:d1:33:13:a0:a3:d1:
2f:08:dc:c0:ce:8d:1e:b1:9a:7a:b5:b5:42:c5:f8:
d0:4e:34:17:29:58:03:c8:75:49:38:28:3d:71:1a:
74:ce:43:82:38:87:b1:2b:c8:ab:8a:f1:d9:c6:d4:
87:41:3d:1e:c1:b9:12:f3:83:fe:92:ec:21:2b:1a:
65:6e:e6:5a:b9:dd:48:1e:50:cc:58:19:f1:6f:36:
6d:9b:51:ae:55:78:3c:3b:30:a2:fb:10:26:aa:9e:
f2:c4:e8:56:4a:c9:c0:ae:a5:0e:05:3d:f6:38:7a:
d7:bd:39:2e:7b:b0:d8:10:71:cd:76:a1:47:ac:58:
7d:93:08:95:b0:29:2b:1f:70:2b:0c:7e:62:5c:3e:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:83:19:AC:45:B5:F3:EF:F9:28:68:5A:C6:17:F2:02:C7:B6:8D:A5
X509v3 Authority Key Identifier:
keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/mIMZrEW18-_5KGhaxhfyAse2jaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.39.0/24
Signature Algorithm: sha256WithRSAEncryption
21:35:db:db:ad:fd:b0:8a:6e:fc:39:03:cd:56:76:a8:e3:e6:
8a:e9:72:09:93:d3:f0:1e:bb:90:97:be:07:08:cd:4f:9d:73:
61:80:a9:f1:11:83:93:65:d3:c5:b4:94:ba:db:3a:f0:d8:65:
dd:07:4d:9c:5b:bb:d6:1c:46:02:64:a2:2e:7e:9e:68:94:42:
47:bb:c7:3e:9e:5f:8e:86:7b:a3:9f:6a:f1:16:7c:dc:dd:e7:
13:84:bb:e5:8d:c9:13:c4:c2:ac:bd:8e:c4:fd:79:2a:73:1e:
99:4e:c8:5e:8a:00:c7:1d:ea:9b:70:35:b0:9b:63:ac:2f:37:
4b:60:bc:64:fb:a3:96:e5:be:11:11:a9:32:99:95:4e:61:5e:
bc:51:65:45:d9:2e:f7:45:79:0c:f0:28:2b:ab:5a:84:e4:1e:
41:c4:bb:a7:54:6b:c3:dd:57:f9:e5:e4:aa:0c:21:d7:35:2b:
cf:4a:08:5d:49:2e:55:13:24:54:d6:6d:28:b3:e4:ed:7b:d3:
91:02:db:17:b6:91:8a:92:ae:73:37:d3:d9:a4:28:f1:33:9a:
e3:b9:c2:0b:d1:5f:c5:ae:99:4b:7f:7b:83:c3:3d:b8:2e:5b:
d7:35:d9:28:74:5c:d1:57:af:b5:75:39:39:92:ec:46:9e:0a:
03:28:bd:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiZcW4DydcBiEdW2TZLDRMVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDk0M2Y5ZDVjNzViMWY1MDU2NGYyZDFkZDA1MTE3ODhl
YjBhZmMwHhcNMjUwODExMTQwMzI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODgzMTlhYzQ1YjVmM2VmZjkyODY4NWFjNjE3ZjIwMmM3YjY4ZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxG0FMIjK5gdO5b/PzYUPfWiA6Rd
fm9jO7SmnhhuMvhd7qcHbM2uNkQbG+WhrqqFjMUuWCkLoS7GfKzZS1z5VVDNFU1Z
kBtW5NbojjQKrSmNKhSMEngNdZ9XtnCx4xpFUnKYlARdb0ez++p306kFynfRMxOg
o9EvCNzAzo0esZp6tbVCxfjQTjQXKVgDyHVJOCg9cRp0zkOCOIexK8irivHZxtSH
QT0ewbkS84P+kuwhKxplbuZaud1IHlDMWBnxbzZtm1GuVXg8OzCi+xAmqp7yxOhW
SsnArqUOBT32OHrXvTkue7DYEHHNdqFHrFh9kwiVsCkrH3ArDH5iXD4JowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJiDGaxFtfPv+ShoWsYX8gLHto2lMB8GA1UdIwQY
MBaAFAnZQ/nVx1sfUFZPLR3QUReI6wr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWIt
ZTc5MmNjMmZkMDdlLzEvbUlNWnJFVzE4LV81S0doYXhoZnlBc2UyamFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWItZTc5MmNjMmZkMDdl
LzEvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbAnMA0G
CSqGSIb3DQEBCwUAA4IBAQAhNdvbrf2wim78OQPNVnao4+aK6XIJk9PwHruQl74H
CM1PnXNhgKnxEYOTZdPFtJS62zrw2GXdB02cW7vWHEYCZKIufp5olEJHu8c+nl+O
hnujn2rxFnzc3ecThLvljckTxMKsvY7E/Xkqcx6ZTsheigDHHeqbcDWwm2OsLzdL
YLxk+6OW5b4REakymZVOYV68UWVF2S73RXkM8Cgrq1qE5B5BxLunVGvD3Vf55eSq
DCHXNSvPSghdSS5VEyRU1m0os+Tte9ORAtsXtpGKkq5zN9PZpCjxM5rjucIL0V/F
rplLf3uDwz24LlvXNdkodFzRV6+1dTk5kuxGngoDKL36
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:12 2025 by rpki-client