Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/mrvN1q3z6mxLj5OwmYo4SI68-6w.roa
File: mrvN1q3z6mxLj5OwmYo4SI68-6w.roa (raw, json)
Hash identifier: FCwb+wuvGG1lKyfztmthIAYgGwpmTKUMJbN1dMopTWk=
Subject key identifier: 9A:BB:CD:D6:AD:F3:EA:6C:4B:8F:93:B0:99:8A:38:48:8E:BC:FB:AC
Certificate issuer: /CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Certificate serial: 01968C44F06A699FC863FB42CAD3C54B854E
Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/mrvN1q3z6mxLj5OwmYo4SI68-6w.roa
Signing time: Thu 01 May 2025 14:34:10 +0000
ROA not before: Thu 01 May 2025 14:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33837
IP address blocks: 88.80.16.0/20 maxlen: 20
2a00:16b0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:44:f0:6a:69:9f:c8:63:fb:42:ca:d3:c5:4b:85:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Validity
Not Before: May 1 14:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9abbcdd6adf3ea6c4b8f93b0998a38488ebcfbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:5b:c8:d4:dd:55:f7:36:3b:73:97:5d:34:
8a:40:ee:42:72:0c:9d:b5:24:cf:9a:fa:4a:a8:cf:
3f:00:26:f8:b4:0c:cd:05:64:43:f7:5b:c9:0c:57:
67:4c:24:bb:2d:21:9e:f8:43:0f:5e:a5:18:45:f2:
8f:e0:7c:70:5d:19:1e:e6:94:c3:83:67:1c:f9:c9:
0e:05:ef:17:4e:9d:8b:98:b3:4c:07:8a:79:86:69:
7f:f9:cd:9c:bd:31:63:1d:22:17:9c:0a:c6:0d:46:
01:3a:8b:be:78:3f:80:a8:98:d7:b9:a3:c3:0e:1a:
98:62:55:56:3f:27:45:78:96:6d:2d:e2:fd:81:6d:
8e:1f:11:a7:08:0a:1f:05:99:d8:b8:97:e7:7c:75:
44:35:8d:fd:3d:a7:31:bc:f5:22:24:a9:62:32:f0:
a1:c0:c1:34:f8:05:24:d6:ca:d9:a3:10:d5:bc:fa:
35:04:ab:01:f0:e7:ca:ed:b9:aa:03:40:7b:f4:9f:
c4:76:94:ed:c9:b7:8d:b1:50:9f:86:34:dc:1a:a6:
44:36:ba:27:8a:ea:1a:22:14:35:9a:75:fc:57:2a:
50:22:9e:de:18:a6:8d:c5:35:7b:ca:46:a9:e9:d1:
61:8c:cb:a2:c8:53:23:d6:fd:79:59:d3:1f:07:e6:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BB:CD:D6:AD:F3:EA:6C:4B:8F:93:B0:99:8A:38:48:8E:BC:FB:AC
X509v3 Authority Key Identifier:
keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/mrvN1q3z6mxLj5OwmYo4SI68-6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.16.0/20
IPv6:
2a00:16b0::/32
Signature Algorithm: sha256WithRSAEncryption
b5:ee:4a:05:e6:f5:40:d3:7e:3e:73:34:7f:9a:e5:fd:be:a1:
46:5d:89:aa:f9:26:2e:bf:16:54:10:e5:f0:e2:9c:f6:af:6f:
87:57:55:6c:b6:cf:e4:ea:c3:9d:33:2f:28:af:7d:ce:ae:6c:
b6:4f:c6:b2:5c:de:fe:34:d9:08:2e:8c:bf:1c:5e:b5:02:a5:
ad:1e:9e:c7:30:aa:bf:5f:40:0f:64:f0:af:e9:58:a6:0e:ef:
b1:32:bc:17:bd:2f:5d:1e:b6:f6:30:0e:99:cc:52:da:52:5e:
cf:6b:ac:9e:f2:54:49:08:99:c5:c5:d8:89:b0:5b:8c:be:81:
0d:b2:e1:ff:ab:57:be:22:9f:9c:85:7d:ab:21:76:14:13:21:
c7:be:1c:fa:28:8b:77:64:11:5d:3f:26:5b:92:b9:bc:6c:3d:
2a:9d:6d:31:01:3d:4b:c7:c4:a2:5d:31:47:b5:8e:37:19:25:
1e:0d:8f:5e:16:5f:c6:1a:01:8c:73:5d:6c:70:02:dd:79:2c:
7e:b6:d4:90:94:fd:80:fc:9e:ef:08:94:e7:d9:cc:8d:83:65:
dc:48:fe:8c:bb:57:58:e4:e2:76:96:c4:98:a6:fe:48:ca:c1:
5c:99:86:28:60:74:01:76:bc:96:df:56:5e:7e:51:7c:da:40:
7d:98:ca:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:50:28 2025 by rpki-client