Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Mm8UUGoRXP_w-dGBQmpJAWxEFTM.roa
File: Mm8UUGoRXP_w-dGBQmpJAWxEFTM.roa (raw, json)
Hash identifier: o2QPIy5ytbKwYHPPwMFVS4SwxJmPo2zDhiJMWRz2HK4=
Subject key identifier: 32:6F:14:50:6A:11:5C:FF:F0:F9:D1:81:42:6A:49:01:6C:44:15:33
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01978D071E781190A092140E4D43F9977329
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Mm8UUGoRXP_w-dGBQmpJAWxEFTM.roa
Signing time: Fri 20 Jun 2025 11:09:03 +0000
ROA not before: Fri 20 Jun 2025 11:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 194.41.114.0/24 maxlen: 24
2a12:3a80::/32 maxlen: 32
2a12:3a81::/32 maxlen: 32
2a12:3a82::/32 maxlen: 32
2a12:3a83::/32 maxlen: 32
2a12:3a84::/32 maxlen: 32
2a12:3a85::/32 maxlen: 32
2a12:3a86::/32 maxlen: 32
2a12:3a87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8d:07:1e:78:11:90:a0:92:14:0e:4d:43:f9:97:73:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jun 20 11:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=326f14506a115cfff0f9d181426a49016c441533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5e:0e:11:a2:c9:38:f4:3b:f0:a9:93:0a:b4:
39:6e:ae:6c:d0:52:bc:a2:c7:0d:be:ca:00:6d:5d:
17:39:16:df:73:db:55:83:7c:f3:09:9d:84:26:97:
0d:2d:de:b8:a7:74:c2:fa:60:d2:23:bc:49:8a:c5:
ea:dc:85:19:c1:8f:02:13:c8:03:75:29:92:c6:b1:
de:b8:fc:5b:43:82:3e:7d:66:47:9e:70:16:e7:f8:
3f:1f:bb:dd:89:dc:be:2a:3c:ec:3d:95:9e:2f:63:
30:7d:4b:17:d7:3d:ca:ac:d3:46:a4:e5:e9:79:3c:
a6:ed:f7:50:f9:67:b8:04:d8:86:38:7f:48:92:bd:
75:68:ac:87:0d:49:52:d7:fa:d3:72:3c:6c:7d:a3:
0c:97:4a:a4:bd:d5:34:19:58:dc:40:a4:66:35:fc:
81:27:dd:88:76:e2:88:ca:d9:ed:dc:2f:34:bd:2c:
9e:93:6d:69:2d:10:2f:29:cd:26:0a:dc:b2:04:67:
21:1e:ab:e7:41:31:01:7a:9c:4b:9e:1d:09:c5:b8:
ea:e0:17:a7:04:65:ad:d8:d2:31:d7:80:d6:a1:a3:
1a:88:43:a7:5c:4f:01:63:06:40:d8:69:cb:bd:bd:
ed:74:e8:dd:3d:7a:4d:bf:d3:e8:44:b9:b3:17:f6:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6F:14:50:6A:11:5C:FF:F0:F9:D1:81:42:6A:49:01:6C:44:15:33
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Mm8UUGoRXP_w-dGBQmpJAWxEFTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.114.0/24
IPv6:
2a12:3a80::/29
Signature Algorithm: sha256WithRSAEncryption
6d:88:9b:e4:75:ca:ee:c1:ab:d3:2d:2f:b1:11:bb:e4:eb:e3:
f6:07:aa:0c:9f:11:1e:3e:b9:9b:ed:0e:dc:11:d8:10:1e:63:
7f:ec:3b:8c:49:2c:1e:51:8b:4d:4f:dc:4c:0b:58:38:fa:80:
cb:06:ea:4f:87:41:f2:e7:c4:6e:41:e3:00:03:5a:91:19:c8:
0d:71:66:10:22:2c:0d:92:e1:4c:c2:2a:f6:6c:0d:c3:07:04:
cb:73:94:0b:9d:b6:f9:57:8d:8c:e6:90:ff:65:58:59:c2:4a:
63:b4:0c:1d:5f:8c:69:6c:71:98:52:28:50:04:61:50:5d:55:
d5:2a:27:8c:4f:56:7f:9b:4b:c7:a2:cb:1a:ce:f7:51:23:bf:
c7:f8:98:48:cf:9a:43:11:f2:c6:e1:48:1c:e8:62:dc:9f:e6:
4c:f8:e2:1a:9e:90:70:90:9c:bf:03:36:5d:eb:eb:2e:f4:be:
4f:31:c6:b9:d5:44:5c:7e:58:43:34:7e:ab:04:69:aa:93:75:
e6:66:92:02:15:65:52:05:c6:9b:93:73:95:ab:cd:f1:30:ef:
45:45:ac:4a:61:2b:e6:7b:17:8e:95:c4:e9:83:54:82:08:ab:
9e:e4:7e:5e:3a:a9:20:cd:86:d2:be:97:63:fe:77:9c:b3:e3:
d5:6e:0e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:38:30 2025 by rpki-client