Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/rMVByUHiw-CJF8yDvID9Hv00TsU.roa
File: rMVByUHiw-CJF8yDvID9Hv00TsU.roa (raw, json)
Hash identifier: W4FOiMzNAns/15Ks3q0b2X4cmgwlITeZp0cOOWz/tew=
Subject key identifier: AC:C5:41:C9:41:E2:C3:E0:89:17:CC:83:BC:80:FD:1E:FD:34:4E:C5
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 01993CDA7B580582DE59C5D841B89A8A5C84
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/rMVByUHiw-CJF8yDvID9Hv00TsU.roa
Signing time: Fri 12 Sep 2025 07:36:15 +0000
ROA not before: Fri 12 Sep 2025 07:36:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202204
IP address blocks: 85.113.72.0/21 maxlen: 24
109.72.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3c:da:7b:58:05:82:de:59:c5:d8:41:b8:9a:8a:5c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Sep 12 07:36:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acc541c941e2c3e08917cc83bc80fd1efd344ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cb:d1:b0:ba:2d:57:1a:00:b8:8f:dc:10:d3:
49:73:1f:ab:15:79:d8:3d:e8:57:b0:10:f3:51:6d:
2d:56:c7:67:ae:a9:c1:f7:02:09:f9:80:c5:e7:85:
cc:88:2c:3b:d6:c2:80:9a:c1:9d:34:59:ba:d8:a0:
f6:a6:c4:0e:22:ff:da:59:c0:b2:ee:ae:d3:8c:6c:
8b:f5:b8:55:5d:6d:4e:2a:de:8f:cb:39:f5:5f:2c:
4c:38:ae:7f:43:5e:cf:df:27:13:2f:ca:f8:09:3e:
ab:0a:d7:13:f1:bc:9d:4a:7d:01:ac:dd:81:55:c9:
e9:fd:0b:d6:a2:27:af:a1:4e:db:f4:52:c2:13:cb:
4b:2f:c5:13:69:8b:95:0b:87:1e:ba:4e:01:16:50:
35:ba:78:3e:a0:82:31:6b:a2:52:df:5a:45:6a:95:
b0:dc:56:ac:1e:b9:5f:c7:92:0e:e2:9b:21:38:5c:
29:c3:cb:e8:27:3b:67:d0:af:dc:2f:3c:61:4e:dc:
78:4a:f2:6f:a4:bf:fa:a7:9d:02:bb:95:d8:95:75:
d8:35:76:67:60:44:20:94:95:9d:83:77:60:3c:0c:
ce:5a:3e:c3:7a:7c:24:5b:15:04:67:33:4c:1f:0f:
0d:db:7f:9c:ff:ff:a4:00:c8:e5:80:66:5a:67:a0:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C5:41:C9:41:E2:C3:E0:89:17:CC:83:BC:80:FD:1E:FD:34:4E:C5
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/rMVByUHiw-CJF8yDvID9Hv00TsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.113.72.0/21
109.72.160.0/20
Signature Algorithm: sha256WithRSAEncryption
44:ef:aa:d5:fe:57:40:83:34:6b:5a:ad:f8:a9:9d:e1:31:40:
d2:55:18:f4:37:f0:9f:6d:98:78:2e:9d:66:65:b1:6d:1f:55:
3c:e7:f2:6d:71:78:da:3b:ed:b4:f2:d8:ea:ef:58:6a:cd:0d:
18:14:70:79:8f:b1:71:e4:a7:88:dc:27:f7:f6:24:02:7b:d0:
71:12:ae:5c:5e:e8:3a:70:14:41:03:6d:35:e3:9c:10:2d:62:
fa:1c:a3:02:c0:82:27:a6:16:c5:82:c3:b5:d8:aa:28:b2:3f:
32:44:f1:e5:b3:f9:ac:74:c1:f4:36:ad:bc:75:d1:76:08:ee:
e8:e7:17:7f:ea:32:a6:1b:ab:57:e7:42:33:20:d7:0b:f6:c9:
a9:c7:77:2a:4e:77:c6:ba:e6:e8:4e:21:d0:70:02:ba:1c:8d:
1d:70:7e:c5:09:98:7e:40:cd:c0:e9:5d:ed:2c:33:b6:f9:b7:
5e:53:4b:6e:92:34:f4:59:0a:36:82:14:4a:ac:76:14:6c:80:
e3:b4:0c:88:bf:3b:69:93:9a:49:13:b0:a4:91:d6:94:13:7c:
29:0d:a1:0a:7e:e7:e2:fb:ee:0b:31:7a:e9:28:07:a5:dd:ae:
a9:f0:03:cb:0e:a9:7d:e9:84:bd:a7:65:18:87:81:59:87:34:
48:91:6b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:36:11 2025 by rpki-client