Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/MKa-85upj9xtri1vvJWFoRmUYFk.roa
File: MKa-85upj9xtri1vvJWFoRmUYFk.roa (raw, json)
Hash identifier: G2a/VZ9pEbQXrALbAEzUvxbkOceVBAez0e7wb0nzEQE=
Subject key identifier: 30:A6:BE:F3:9B:A9:8F:DC:6D:AE:2D:6F:BC:95:85:A1:19:94:60:59
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0199D35C8D7290C0C5B48E13C6BFC7280BE7
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/MKa-85upj9xtri1vvJWFoRmUYFk.roa
Signing time: Sat 11 Oct 2025 13:01:22 +0000
ROA not before: Sat 11 Oct 2025 13:01:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213999
IP address blocks: 185.161.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d3:5c:8d:72:90:c0:c5:b4:8e:13:c6:bf:c7:28:0b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 11 13:01:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30a6bef39ba98fdc6dae2d6fbc9585a119946059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:8c:32:9b:23:b5:67:e4:cf:4c:34:ab:1b:
c8:5f:5c:81:62:2e:fc:17:1d:2c:9e:2f:bf:96:7e:
74:06:98:e4:db:b9:df:04:ab:e1:64:08:ab:37:a4:
08:f2:07:65:06:3d:13:cb:b1:a5:e7:a4:f3:6c:dd:
24:c1:97:2e:90:86:dd:fd:bc:a3:52:ed:6e:e8:78:
13:c0:44:94:38:fd:d8:6d:fa:26:d3:c7:a1:82:a2:
4a:40:46:cb:04:fd:09:19:6c:ba:1c:7e:2f:e4:d7:
3b:78:e4:42:50:f6:c7:87:51:7d:78:02:e3:90:2f:
5b:1a:12:71:a1:3f:84:e7:6c:3a:1d:9b:f6:7d:d2:
6f:a1:17:67:b9:58:49:a3:14:25:c3:f0:57:f9:5d:
0a:b8:da:69:23:8b:08:7c:a0:bb:ca:90:3e:bc:4d:
dd:8b:c5:ca:0b:4a:40:c4:cc:94:ba:eb:b9:c9:fa:
b3:c2:2c:6d:04:7b:2d:00:22:74:5b:04:00:68:55:
22:ab:8c:e0:b9:e4:40:08:5d:2f:11:b1:95:75:30:
7d:e4:a0:f7:db:2b:08:60:f5:93:ac:a0:5f:c4:63:
6f:fd:ac:53:cd:43:0c:de:3c:ed:c2:39:ab:cf:6b:
80:b4:ac:39:26:80:2c:41:73:56:ad:8e:2f:09:df:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A6:BE:F3:9B:A9:8F:DC:6D:AE:2D:6F:BC:95:85:A1:19:94:60:59
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/MKa-85upj9xtri1vvJWFoRmUYFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:95:ca:ff:ab:08:81:f9:eb:64:7c:79:71:f8:cc:bf:7c:80:
31:bc:a3:c7:ef:c9:c4:fb:de:20:87:3c:bc:db:8d:d9:46:ef:
d1:35:44:43:f6:40:ed:90:56:d5:00:3e:70:db:71:50:70:35:
fc:af:f1:55:65:f9:3a:c7:03:a7:c2:47:a4:ab:46:72:28:18:
f7:1e:77:23:45:b6:2e:e4:63:c7:1d:70:a5:54:70:9b:2e:d6:
56:a8:aa:07:84:c6:93:a2:66:f3:3a:a7:82:9f:16:66:ad:e0:
de:0b:5a:df:c6:f9:9e:3c:44:2c:2f:b8:34:2b:37:cf:97:73:
51:bf:45:06:72:4d:4a:f1:7b:4e:37:2f:bd:05:a9:e3:40:34:
84:5f:b1:9b:92:cf:bf:6a:03:63:7c:97:11:ec:d5:c1:e9:4f:
08:7d:b7:6d:3a:33:1d:94:28:59:58:c0:db:52:cb:12:c6:ec:
c3:01:94:ff:9b:0e:5a:6a:ef:19:50:a6:c1:06:f7:9b:61:46:
38:26:eb:f9:a5:66:f7:81:ee:ee:eb:1d:ed:2b:3d:bf:75:af:
20:03:09:c6:a0:26:52:57:18:e5:77:c2:ad:4d:64:96:42:1e:
1a:12:70:61:ef:23:ba:85:66:da:6b:c2:8a:2a:ec:63:09:bb:
47:b3:3b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:21 2025 by rpki-client