Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/Mm7HYiP_1vnYW3J82fX3wCESTvw.roa
File: Mm7HYiP_1vnYW3J82fX3wCESTvw.roa (raw, json)
Hash identifier: xaFYkDwgR40Vgrh0kc+VfgTZztWDJTezEXCbvse9oig=
Subject key identifier: 32:6E:C7:62:23:FF:D6:F9:D8:5B:72:7C:D9:F5:F7:C0:21:12:4E:FC
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 01993A35E9310F73843C8A9895115403F1A1
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/Mm7HYiP_1vnYW3J82fX3wCESTvw.roa
Signing time: Thu 11 Sep 2025 19:17:15 +0000
ROA not before: Thu 11 Sep 2025 19:17:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400587
IP address blocks: 2a07:e04::/36 maxlen: 36
2a07:e05::/36 maxlen: 36
2a07:e06::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:35:e9:31:0f:73:84:3c:8a:98:95:11:54:03:f1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Sep 11 19:17:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=326ec76223ffd6f9d85b727cd9f5f7c021124efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:b2:19:69:f3:71:aa:1e:81:16:6a:1c:5a:
b0:c2:2d:0d:98:3d:29:47:e1:0c:ef:16:17:e6:32:
ee:5e:32:7a:ad:a4:28:b3:c5:30:57:e0:3e:82:06:
c8:e3:00:ae:3c:2a:d1:ff:78:ee:28:42:a6:8c:fc:
20:d8:8e:91:77:de:c4:9f:67:f3:d8:e7:03:3d:cf:
8c:1d:d3:80:3b:ae:47:2d:e2:88:1c:1e:a5:98:13:
38:cd:59:f6:7e:07:54:4b:c4:a6:13:58:e0:82:9b:
e9:63:0a:3d:33:1f:8b:2b:ad:e8:b5:b0:6c:34:03:
89:6f:de:0e:ae:ca:bf:40:41:66:70:b6:a2:37:67:
f2:be:b7:e6:ea:37:12:ba:bb:fc:ed:e2:e7:05:17:
25:1b:34:e5:9e:8b:f5:80:68:93:fe:d6:b0:06:55:
4b:b1:3d:11:ab:e8:75:ec:e7:22:e6:bf:98:7e:5d:
91:56:97:54:b4:75:ba:77:c5:d2:e4:c2:00:d6:6d:
c1:b4:ed:92:88:f6:cc:d6:f7:c4:e8:dc:58:a5:e5:
bc:dd:47:e7:85:a0:93:cb:5e:9b:e4:06:02:33:a5:
1a:82:97:fb:91:31:79:28:05:54:fc:83:6a:2a:2c:
0d:28:ab:3f:07:a1:02:9d:20:86:00:f4:4f:a2:b6:
1c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6E:C7:62:23:FF:D6:F9:D8:5B:72:7C:D9:F5:F7:C0:21:12:4E:FC
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/Mm7HYiP_1vnYW3J82fX3wCESTvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e04::/36
2a07:e05::/36
2a07:e06::/36
Signature Algorithm: sha256WithRSAEncryption
8b:f3:45:e8:78:0f:da:16:54:41:4b:19:38:97:9c:a0:c4:ad:
0b:e0:01:da:57:05:d2:60:40:92:55:31:10:e0:e1:65:cd:5e:
af:61:b1:9d:dc:58:8c:7e:9b:b0:2b:69:ab:f2:f8:61:cd:a4:
55:8e:a7:40:97:3e:71:83:4f:12:14:dd:77:04:eb:fc:ff:cb:
f0:5e:c5:cb:c2:8f:83:e4:36:a0:6d:6c:dd:5d:cb:84:7b:31:
41:72:c4:d4:fc:99:0d:e7:60:fe:35:1d:a0:07:13:25:51:6b:
e6:35:3b:76:cd:1c:3b:d5:c9:6f:8f:08:9d:79:59:e8:8d:55:
b8:4f:9c:36:71:6c:61:3a:7f:08:1b:d6:9f:86:c0:b1:35:42:
8c:a1:e1:d9:3c:10:7a:74:bd:8b:44:7b:58:66:56:0f:88:3c:
a5:8a:b8:01:11:55:e2:56:14:c1:0c:7a:4d:9c:48:4d:55:44:
b9:f8:a1:8c:61:9c:25:4f:f6:e0:5f:6a:3d:6f:c7:ec:50:0b:
a8:b7:ee:e4:c7:19:f7:c3:01:91:4f:c4:59:9b:61:4b:89:02:
86:3a:65:f3:0f:fc:04:dc:a1:30:ce:ee:78:1d:55:81:30:ed:
9f:d1:f4:e1:c4:d5:09:26:1e:e0:0a:d2:c2:54:8d:7a:ad:78:
e2:62:38:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:47 2025 by rpki-client