Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/MryKd3xNlNzxB05Cg7V7xQNSius.roa
File: MryKd3xNlNzxB05Cg7V7xQNSius.roa (raw, json)
Hash identifier: lveek657aF+1hkfo410IKZwE+EaVlK7fwW86o9p13DE=
Subject key identifier: 32:BC:8A:77:7C:4D:94:DC:F1:07:4E:42:83:B5:7B:C5:03:52:8A:EB
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0199CF8A190E9C8A6E65D4DAA0764CA84B47
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/MryKd3xNlNzxB05Cg7V7xQNSius.roa
Signing time: Fri 10 Oct 2025 19:12:38 +0000
ROA not before: Fri 10 Oct 2025 19:12:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 46.37.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cf:8a:19:0e:9c:8a:6e:65:d4:da:a0:76:4c:a8:4b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 10 19:12:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32bc8a777c4d94dcf1074e4283b57bc503528aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:8d:f7:08:a9:cc:87:91:ea:6c:27:e1:f0:
51:f7:44:1c:bd:e1:04:86:73:9f:6b:fc:d3:d4:13:
ef:d0:6c:1e:25:10:a2:49:33:8d:bd:95:0f:79:21:
6a:70:7f:fa:63:ea:70:f7:38:27:1a:db:10:1f:b3:
27:c4:b0:33:a7:4f:84:ce:3d:40:57:db:ee:49:a2:
b6:46:ee:aa:46:02:72:7b:17:15:ed:42:b5:19:0f:
3f:7f:90:57:d5:4d:b8:ae:8d:04:69:9b:79:7d:0a:
85:2f:69:c7:1c:8b:a7:b8:91:d6:04:02:6a:5f:e8:
94:4a:07:6a:49:13:52:9f:7a:5e:24:1d:e1:cf:e3:
49:54:39:df:cc:44:c1:6c:9b:59:67:c4:e2:a6:2e:
d2:41:33:3b:89:fc:90:60:3b:c2:2d:2b:a0:c4:84:
b7:54:3a:a5:ee:59:c8:0d:77:0e:f5:f4:a7:de:d5:
19:ec:bd:a4:a6:96:c8:d4:72:57:d7:55:b7:91:4b:
a4:f4:90:a1:f6:12:8b:f2:b5:d0:32:47:2e:96:af:
ed:9e:ec:be:86:02:05:4e:a0:fd:bb:0c:98:7a:fa:
0d:2a:0d:27:eb:42:98:bd:a9:1a:45:e6:61:55:e8:
32:1c:ff:8e:b1:a6:70:93:e2:ad:7c:e5:01:ce:e7:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BC:8A:77:7C:4D:94:DC:F1:07:4E:42:83:B5:7B:C5:03:52:8A:EB
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/MryKd3xNlNzxB05Cg7V7xQNSius.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.126.0/24
Signature Algorithm: sha256WithRSAEncryption
13:41:99:a5:1c:08:ad:0b:3c:11:7e:5c:b4:10:8d:1f:d1:62:
96:62:24:a6:6c:1f:8c:2b:eb:58:de:fc:14:af:7b:71:de:26:
a1:4e:d8:21:e2:2f:5e:bb:2c:8c:31:15:fe:86:5f:34:38:91:
60:13:17:71:65:77:d9:6f:ff:23:3f:78:3a:8b:08:c9:41:04:
13:65:37:f6:fd:d5:32:67:39:ad:55:7e:a7:b2:1c:ad:4f:a2:
a8:83:c9:8c:17:f0:cb:df:b1:e7:50:2d:ee:de:2f:4e:a8:3d:
d5:59:14:16:64:38:55:da:62:23:f7:71:9d:21:bd:8e:83:bd:
02:41:3d:c9:7c:ce:71:03:b2:fd:fa:08:e9:52:05:62:9a:7c:
e6:6f:ba:9e:92:4a:0e:a3:30:c6:68:12:21:07:17:e3:32:f5:
f6:63:60:d2:50:bb:26:cb:ab:35:e2:44:f8:2f:d7:43:b5:12:
96:a2:29:b3:6e:88:b4:9d:0f:55:4e:f4:f2:86:63:35:df:b2:
07:d9:ce:3c:d9:6f:a1:64:b4:dd:77:84:a5:a7:43:23:35:24:
13:12:e0:6a:45:e3:c9:0c:8e:20:3a:1f:ed:d4:83:d1:a3:73:
04:47:de:9c:48:b1:80:19:b7:06:a0:e8:d0:57:b2:a8:1b:b6:
38:f3:bf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:44 2025 by rpki-client