Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/Mym9d5dVDoOmCDQV51AwB-FfpCc.roa
File: Mym9d5dVDoOmCDQV51AwB-FfpCc.roa (raw, json)
Hash identifier: w5OUNkmnrUSeDRW2ANklyuAzFVL6KyBf5AcPHxY8618=
Subject key identifier: 33:29:BD:77:97:55:0E:83:A6:08:34:15:E7:50:30:07:E1:5F:A4:27
Certificate issuer: /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial: 0197A7204920004370D353C6D5065CA2EB06
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/Mym9d5dVDoOmCDQV51AwB-FfpCc.roa
Signing time: Wed 25 Jun 2025 12:46:40 +0000
ROA not before: Wed 25 Jun 2025 12:46:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57584
IP address blocks: 91.233.68.0/24 maxlen: 24
195.254.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a7:20:49:20:00:43:70:d3:53:c6:d5:06:5c:a2:eb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Validity
Not Before: Jun 25 12:46:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3329bd7797550e83a6083415e7503007e15fa427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:3d:4a:ce:c0:f8:7e:ab:23:8c:e2:73:07:
3e:ba:73:3a:0e:ce:6f:ec:87:83:73:53:1e:ad:68:
67:16:72:31:05:b8:f1:ef:15:8b:1b:7c:3d:7d:28:
f2:15:3e:4d:9b:3b:4d:4b:0a:05:f9:d2:99:a7:d8:
46:af:db:7c:29:24:f6:47:0c:44:31:9f:de:78:76:
ef:51:62:b2:c1:d8:9d:0c:7f:6a:04:05:d8:bb:fc:
8b:bd:fe:be:e3:fb:f3:7e:9c:fb:6b:cb:23:65:5d:
2f:49:ad:a3:92:dc:3a:e5:e3:70:e2:68:72:6a:a6:
1b:88:17:b5:3e:55:d7:81:2d:bf:02:01:21:25:b4:
34:36:90:51:f2:4c:99:f8:1a:76:7b:a2:76:0f:33:
98:3c:4e:73:b4:67:3b:4e:d5:8b:35:6b:a3:1b:05:
a1:f1:8b:87:f2:2b:dc:e9:9d:da:00:73:44:7c:18:
11:77:7a:94:84:35:fc:0d:7e:f1:f0:09:82:ab:16:
09:a0:eb:1d:cc:c0:75:c9:27:df:44:3f:7e:7f:2f:
f7:68:f6:4c:00:50:12:4d:98:e4:98:3e:ee:e9:69:
65:89:da:1c:84:0e:38:89:d7:28:df:0f:9c:4e:90:
4c:c7:9b:9a:76:21:28:90:cf:44:e7:b1:f6:02:01:
76:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:29:BD:77:97:55:0E:83:A6:08:34:15:E7:50:30:07:E1:5F:A4:27
X509v3 Authority Key Identifier:
keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/Mym9d5dVDoOmCDQV51AwB-FfpCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.68.0/24
195.254.130.0/23
Signature Algorithm: sha256WithRSAEncryption
94:5b:d9:d8:3d:12:c8:ab:c2:96:c0:5a:94:0b:9b:2b:6c:7b:
57:6d:bf:f6:84:e8:f9:26:c0:a0:d5:4e:2f:c0:dc:23:c8:81:
e9:c6:6b:f6:81:a1:e8:84:15:8c:c8:2f:5c:f5:88:c4:cb:32:
76:f3:fc:b0:ef:91:ea:15:85:a6:06:a1:65:53:22:61:74:ca:
c7:86:90:a5:d3:83:71:34:a4:ba:b1:dd:d8:67:5d:fe:44:3f:
4f:df:ee:5c:f8:23:43:27:4a:74:08:18:9e:e6:35:a5:cc:8d:
ee:ba:50:1b:39:a6:ef:da:d0:c5:15:99:8d:b2:9b:32:24:70:
cc:a1:06:2a:4c:4f:b8:cc:61:1b:0a:cd:6c:d7:9d:16:a1:34:
65:77:1c:d1:17:a9:36:f3:01:28:a8:27:a9:96:c1:31:08:97:
85:cc:5b:a5:0d:f1:a7:9e:58:2d:6f:09:05:7c:88:88:c1:7f:
d0:41:86:a6:7f:cb:49:11:db:8c:5b:fb:e9:b2:b6:e5:7e:e7:
4e:a8:5d:da:e2:8e:93:83:48:8c:89:f2:84:55:dc:8d:a1:fc:
df:ac:8f:73:26:c9:b5:c9:7b:e5:9e:94:87:41:fb:c1:d7:1a:
67:54:1c:ce:76:98:cb:cf:74:59:0a:6e:40:f0:49:d0:fd:d7:
6d:49:25:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:01:02 2025 by rpki-client