Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MzAxwrOU3LpnrlgGrTXhBdgklio.roa
File: MzAxwrOU3LpnrlgGrTXhBdgklio.roa (raw, json)
Hash identifier: 7hMtoeBQBHwF6Qrn67C/7RW+mMMQ1bN62Ilt7BQcuUY=
Subject key identifier: 33:30:31:C2:B3:94:DC:BA:67:AE:58:06:AD:35:E1:05:D8:24:96:2A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0197A64282BB4ACDE768947D8B78A70737B0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MzAxwrOU3LpnrlgGrTXhBdgklio.roa
Signing time: Wed 25 Jun 2025 08:44:26 +0000
ROA not before: Wed 25 Jun 2025 08:44:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.222.30.0/24 maxlen: 24
185.230.65.0/24 maxlen: 24
185.230.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:42:82:bb:4a:cd:e7:68:94:7d:8b:78:a7:07:37:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 25 08:44:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=333031c2b394dcba67ae5806ad35e105d824962a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:db:7a:de:92:15:21:6a:b2:b5:34:08:0a:
74:fd:eb:1c:ce:4f:08:b3:90:09:42:f1:4a:41:6c:
2a:75:ed:51:ba:b3:cd:94:9f:cd:f9:3c:6f:fd:d6:
5b:24:4f:0f:fd:a3:d5:94:24:5e:39:fb:27:83:be:
66:ea:80:34:8f:e5:08:42:d7:c6:65:1a:83:3b:c5:
48:17:cd:1b:cc:c8:46:61:b7:6c:53:c1:84:2c:52:
70:2f:a8:ea:9d:c6:fd:89:5c:85:89:43:6d:bb:75:
8c:36:4a:e8:78:a0:3f:43:3d:de:c9:d3:35:12:7b:
1d:a5:da:68:a9:f4:28:d9:17:f2:85:b7:1a:dd:b8:
af:41:61:7a:53:c5:3f:5d:d3:8a:71:55:a8:f4:3a:
20:52:d8:af:d5:e6:8a:54:f1:aa:af:7b:a5:6a:35:
27:19:8c:87:ba:4a:52:86:c5:9c:08:37:af:0d:08:
b9:70:87:af:f4:b2:95:5c:de:8a:cc:e6:5e:4f:e2:
f6:bc:8e:79:ec:20:46:67:80:ec:e5:55:45:30:79:
a4:ea:99:38:83:5a:e9:2c:4b:2c:f0:63:45:52:57:
f8:56:00:0c:a9:0e:9f:1d:5c:a5:5a:5b:33:b5:15:
61:20:75:2e:2f:a3:63:b6:bf:f9:0c:5e:cb:59:ba:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:30:31:C2:B3:94:DC:BA:67:AE:58:06:AD:35:E1:05:D8:24:96:2A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MzAxwrOU3LpnrlgGrTXhBdgklio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.30.0/24
185.230.65.0-185.230.66.255
Signature Algorithm: sha256WithRSAEncryption
ae:25:dd:7f:0d:fe:fc:19:06:cc:23:52:d7:dd:0d:9e:35:8f:
78:df:0e:6d:2a:37:2d:90:55:e5:a5:08:ae:1b:56:1e:78:f3:
6d:5a:c4:ab:e3:c8:28:8d:68:80:25:99:95:0f:64:1f:bd:94:
e8:81:da:8f:02:1b:60:31:1e:be:93:2b:12:6f:71:bc:87:36:
5c:6d:34:99:66:6b:91:72:5f:67:d3:92:0d:1e:84:79:d3:d5:
42:0b:48:3f:3f:e1:f5:95:3b:92:f2:1d:e8:38:a9:2f:4d:56:
a5:a9:04:a1:8b:aa:04:9c:10:66:7f:12:40:27:1a:a4:8e:96:
0d:33:ab:f4:a7:d4:b1:12:9b:ea:e4:73:9c:df:97:f7:95:c9:
57:ea:f8:53:1e:93:81:c4:5a:c6:5d:8b:42:14:08:05:54:f6:
2c:e2:a1:91:a9:ac:04:f9:d1:80:d2:24:56:69:cc:cd:51:c7:
48:69:7b:d2:a8:b0:cc:60:05:b9:e1:7a:9c:4b:f2:da:d4:1b:
a7:6a:41:5c:de:05:30:97:90:98:bd:d4:4f:22:b1:6e:09:43:
51:e4:c1:04:b0:bd:5e:d2:5e:a1:ee:06:57:c6:3a:1e:5a:22:
ad:02:e5:56:7f:c8:3a:c6:81:10:c5:f0:4b:ae:e7:c1:80:91:
a5:5e:1f:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:28:20 2025 by rpki-client