Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/mcfk8AZWJCya46yWT4YFR-sBsBY.roa
File: mcfk8AZWJCya46yWT4YFR-sBsBY.roa (raw, json)
Hash identifier: DDVJwmENIX53nxHmEPzaa9E/O7ROXFrfozoXEjZkIC4=
Subject key identifier: 99:C7:E4:F0:06:56:24:2C:9A:E3:AC:96:4F:86:05:47:EB:01:B0:16
Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial: 0198C250AE7887151506AFBB63CC9DE4DBD5
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/mcfk8AZWJCya46yWT4YFR-sBsBY.roa
Signing time: Tue 19 Aug 2025 12:32:04 +0000
ROA not before: Tue 19 Aug 2025 12:32:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51826
IP address blocks: 185.222.60.0/24 maxlen: 24
2a13:a0c0::/32 maxlen: 32
2a13:a0c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c2:50:ae:78:87:15:15:06:af:bb:63:cc:9d:e4:db:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Validity
Not Before: Aug 19 12:32:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99c7e4f00656242c9ae3ac964f860547eb01b016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:5e:cc:5b:19:ea:b1:6d:b0:6f:b2:14:3c:
61:65:70:ef:2c:29:b1:aa:10:07:92:13:79:e1:1c:
ef:47:8b:04:37:4f:5e:13:1b:09:e7:d6:a3:1c:2f:
cd:51:38:61:a5:94:cf:34:3b:53:41:5c:7b:65:c2:
a0:d5:e6:88:99:81:d0:99:62:db:a1:89:d5:70:bb:
77:b1:eb:b8:68:3e:0a:11:a8:06:bf:6e:46:1f:2b:
95:06:6c:44:0a:2c:b5:72:8a:11:a0:97:98:ab:e1:
f5:20:90:62:1e:48:47:07:02:49:c0:ea:f7:9a:fb:
55:e8:fb:03:6d:43:09:6a:61:92:bd:72:80:12:0d:
60:9d:5d:f2:43:16:25:9b:02:ca:9c:1e:86:10:52:
a9:b0:28:5b:ec:45:77:4a:a0:16:53:18:20:c5:92:
b6:3d:15:e6:41:60:55:b8:a8:c7:1a:49:ee:c8:34:
e7:7c:ad:38:be:93:2e:89:50:9f:86:22:8f:e0:5e:
a9:8f:08:71:17:e8:a6:63:f8:28:82:8b:2c:b2:3f:
0f:2b:86:0c:28:93:33:aa:e6:55:ee:0f:c8:0f:eb:
99:9a:fe:26:82:9c:95:cb:c4:5a:aa:7c:5d:5b:f1:
f2:17:2f:e9:8b:95:9a:04:15:21:cb:77:97:71:eb:
9c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C7:E4:F0:06:56:24:2C:9A:E3:AC:96:4F:86:05:47:EB:01:B0:16
X509v3 Authority Key Identifier:
keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/mcfk8AZWJCya46yWT4YFR-sBsBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.60.0/24
IPv6:
2a13:a0c0::/32
2a13:a0c2::/32
Signature Algorithm: sha256WithRSAEncryption
7d:e0:3d:7c:1b:0f:be:6f:af:34:ed:8a:4b:39:87:58:0f:27:
0f:e6:51:9f:43:b5:30:4b:95:6a:9e:0e:b8:9f:99:a4:23:45:
65:7b:56:3c:1f:d2:a7:76:04:b6:c7:ce:c9:68:f6:d4:95:a3:
3d:d6:24:5b:50:48:ff:ff:bc:5e:2e:38:9a:ee:0d:ed:e0:12:
05:4a:0f:f0:e6:89:e6:0b:d1:28:b4:3a:e6:71:6b:fa:3f:5a:
38:d5:81:95:e9:4b:99:41:16:d8:eb:db:32:43:a1:7e:cb:e0:
aa:84:20:5b:cb:13:61:23:dd:ca:58:72:60:bc:45:b3:ed:24:
c9:9c:3d:5c:e8:38:44:0a:89:aa:33:ec:ea:d8:27:cd:22:67:
6d:52:4d:ec:b1:ff:bc:22:12:22:6b:8f:18:33:ea:ed:8b:8d:
e8:e9:f9:e6:a7:d2:ee:d5:2b:54:a3:87:e9:f2:4f:56:44:59:
b3:d7:06:71:e9:74:52:9e:ca:d1:30:5b:cc:ad:cb:8b:2c:b3:
4b:7d:5c:71:de:01:12:60:e5:14:df:48:a0:aa:3f:39:d1:52:
74:6a:01:93:b6:92:ba:dc:e2:4f:f0:ca:f0:76:21:28:0c:d1:
74:22:0d:c3:ae:6c:9a:a5:5a:97:b3:3e:87:91:ef:0e:34:bd:
45:73:1b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:15:56 2025 by rpki-client