Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/mNwNraKcfEUxzHriqiEiMMdeSvg.roa
File: mNwNraKcfEUxzHriqiEiMMdeSvg.roa (raw, json)
Hash identifier: 45vqanB1XUwWsya+Cl4oWx6YrUwCokRSX6fmcXt/QTE=
Subject key identifier: 98:DC:0D:AD:A2:9C:7C:45:31:CC:7A:E2:AA:21:22:30:C7:5E:4A:F8
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 0199A03BE0B463E4A956B4AB5DCCA84A2749
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/mNwNraKcfEUxzHriqiEiMMdeSvg.roa
Signing time: Wed 01 Oct 2025 14:45:02 +0000
ROA not before: Wed 01 Oct 2025 14:45:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196618
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a0:3b:e0:b4:63:e4:a9:56:b4:ab:5d:cc:a8:4a:27:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Oct 1 14:45:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98dc0dada29c7c4531cc7ae2aa212230c75e4af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:7c:41:c9:b3:92:b1:2c:92:60:eb:29:85:
99:a6:01:48:0d:0e:6d:73:1d:b6:df:dc:ea:1f:be:
da:9d:3a:67:d2:78:ed:00:d7:34:19:7c:18:b4:51:
83:74:ee:99:44:96:5d:c9:2c:f2:7f:2f:e8:77:98:
23:1a:06:35:d6:b1:53:82:d1:16:f8:ff:de:5a:e4:
60:2f:f9:1e:d4:bb:b5:44:52:29:6f:ff:c2:23:6f:
29:a5:56:5e:84:29:36:3b:a3:b5:a3:c2:45:fe:1e:
ca:7f:3e:04:fb:f4:91:6e:50:eb:17:4b:ab:4e:9a:
57:1b:47:38:96:d9:7e:73:83:fd:f3:a1:ce:b9:b1:
bb:5e:ea:21:c2:a0:ba:b2:ca:7e:e9:d1:c8:a0:e7:
74:b5:f8:06:4e:cb:cb:bf:2a:31:02:f9:34:42:04:
78:de:32:99:ae:60:b1:10:92:5a:40:a3:b7:96:55:
25:88:51:40:38:20:6e:c4:2f:94:05:f0:8c:91:0c:
39:7c:04:61:1b:cf:d8:cf:cb:4a:4b:6e:47:ff:58:
e5:96:ed:a2:3b:31:c9:da:79:36:86:c4:e2:a1:e1:
3c:ab:82:ea:22:4d:b4:6a:60:4f:12:0d:dd:87:e2:
7e:7d:f0:7b:d5:2c:8f:1e:e8:54:c3:35:cd:53:47:
b6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DC:0D:AD:A2:9C:7C:45:31:CC:7A:E2:AA:21:22:30:C7:5E:4A:F8
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/mNwNraKcfEUxzHriqiEiMMdeSvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ad:15:93:e0:17:b2:a9:6e:63:4b:68:d3:45:a6:9d:52:6d:
55:25:96:e9:4a:04:cd:d6:49:9c:a7:92:40:72:de:f9:13:78:
fa:55:8d:ac:4b:92:c9:1c:03:cb:dd:49:c8:13:09:07:b8:3f:
d7:eb:ac:fc:da:41:e9:0d:c3:fb:42:8d:7b:88:7c:5a:ce:11:
22:1e:9c:60:26:5e:04:a9:bd:cf:cf:e4:24:e1:22:ca:b8:8e:
ed:8a:a9:e3:85:8d:63:40:fc:ae:45:48:82:d8:df:51:06:df:
34:9f:4d:3e:27:99:0e:d4:13:cf:a7:1a:10:e1:53:b6:40:c7:
87:f0:95:ee:2a:9f:a1:03:f5:60:26:62:a6:43:65:23:ea:b8:
1a:b4:74:41:b7:83:34:7c:67:7b:d1:8c:d2:97:34:a0:68:64:
23:7f:c6:be:dd:b4:66:1f:5e:91:0e:86:53:3f:b7:b1:7b:45:
fd:29:a3:b2:76:f4:4d:59:ef:56:a4:42:66:77:66:44:ab:f0:
1f:19:0d:23:8e:e1:4f:88:03:d0:df:bd:c8:d9:37:95:c3:43:
c6:18:45:fc:d3:b1:2c:f1:66:c2:ff:aa:d6:3d:0c:af:ac:0a:
9d:a4:c1:3b:4d:d0:26:9f:28:22:01:fd:29:c2:93:73:b3:67:
07:af:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:00 2025 by rpki-client