Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/amv-696wBdt_QKun8p7XRRFXqU4.roa
File: amv-696wBdt_QKun8p7XRRFXqU4.roa (raw, json)
Hash identifier: bYmc1FDq2rT+11x0JTkkZhN6/zVzcCRLsddYEZtQBbM=
Subject key identifier: 6A:6B:FE:EB:DE:B0:05:DB:7F:40:AB:A7:F2:9E:D7:45:11:57:A9:4E
Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Certificate serial: 0198CC926A407A2DE3E4538561B01D6969BE
Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/amv-696wBdt_QKun8p7XRRFXqU4.roa
Signing time: Thu 21 Aug 2025 12:20:04 +0000
ROA not before: Thu 21 Aug 2025 12:20:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 146.19.80.0/24 maxlen: 24
185.65.105.0/24 maxlen: 24
185.248.144.0/24 maxlen: 24
2a12:6500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:92:6a:40:7a:2d:e3:e4:53:85:61:b0:1d:69:69:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Validity
Not Before: Aug 21 12:20:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a6bfeebdeb005db7f40aba7f29ed7451157a94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:cf:ea:0b:91:d5:0d:c5:0c:e4:b3:10:23:
49:50:f7:c2:5a:58:bd:ab:5a:af:fd:34:35:04:68:
99:07:d1:a2:a2:9f:9b:0d:f9:c1:5e:8f:c3:18:56:
4e:f5:57:8b:35:59:2c:b3:a0:39:ff:73:ed:7e:32:
4a:a7:2b:98:3d:1e:de:5b:df:e6:9e:1c:c0:38:2e:
ee:e6:61:db:f5:f3:34:d3:99:6f:81:00:fd:1d:71:
40:97:fd:e7:ab:0b:30:f5:51:4c:65:e8:35:28:d7:
05:27:ce:4d:a2:d7:bf:f9:75:a8:a2:c6:3b:26:27:
86:8b:02:0e:f6:60:50:cf:af:2a:fa:b9:9a:7b:b0:
a9:06:0d:f7:54:79:af:34:3b:61:9e:98:70:42:74:
92:cc:2b:3d:bd:aa:2b:ca:40:9c:69:4b:54:9a:b9:
18:9f:cf:f2:c5:aa:33:dc:b0:07:ae:15:00:9e:10:
42:e7:d5:21:ac:ee:51:96:ab:8c:39:9d:e6:4c:f8:
ee:d2:71:46:d7:b4:0c:eb:eb:4f:81:47:d4:89:fe:
16:2a:54:57:af:78:e8:18:e8:a0:72:d6:d4:54:b8:
d3:0b:98:c5:e9:74:f1:c2:df:74:5c:e5:c5:30:fa:
aa:0a:31:8d:d4:af:10:9f:ef:52:02:44:a0:b3:4c:
eb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6B:FE:EB:DE:B0:05:DB:7F:40:AB:A7:F2:9E:D7:45:11:57:A9:4E
X509v3 Authority Key Identifier:
keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/amv-696wBdt_QKun8p7XRRFXqU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.80.0/24
185.65.105.0/24
185.248.144.0/24
IPv6:
2a12:6500::/32
Signature Algorithm: sha256WithRSAEncryption
78:ab:fa:e3:2c:b7:29:f2:c3:8a:ed:35:69:38:d7:38:cf:ad:
c6:23:ff:71:7c:1f:23:c6:7f:f0:48:b7:b0:28:bb:e6:c4:ac:
ff:3b:ba:02:30:99:a0:a9:02:3d:24:cf:75:8b:ef:85:3d:7e:
cf:0e:c6:8b:ae:a9:16:fa:11:0f:6c:b0:0b:51:fb:98:a0:32:
48:b1:74:0e:15:98:6a:b3:77:40:48:28:d3:6f:c1:74:43:fe:
d7:79:33:53:45:3d:37:58:58:ee:34:60:55:db:e4:dd:a6:74:
e4:27:57:d6:7a:cc:18:4e:1c:36:a4:12:bf:1e:58:5c:14:9f:
fd:58:92:22:a0:70:9d:67:5f:22:ac:77:d5:8a:8f:24:e9:bd:
47:88:ea:4d:53:f2:27:f7:90:4c:f9:ca:3a:d4:73:97:0d:e6:
5e:72:89:33:cf:92:05:f8:4c:ef:3f:d0:3a:27:3f:35:44:ed:
e5:14:cf:48:e3:83:9f:0d:1e:a1:bd:52:38:05:5c:0c:0f:25:
62:d2:91:e6:1d:12:01:64:d8:f8:96:0f:4a:31:f7:4c:29:37:
d1:84:a2:51:09:a8:96:df:79:b4:5c:ba:1f:38:fe:35:37:35:
de:6b:9a:30:c7:e0:ad:e9:c7:32:ea:ab:11:e6:27:de:02:1d:
04:12:d0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:09 2025 by rpki-client