Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/mgSfpYYXhzx-YzhWkHnATXB2kdM.roa
File: mgSfpYYXhzx-YzhWkHnATXB2kdM.roa (raw, json)
Hash identifier: jRZKuHYyv7qD4dtktC7M7U3X1Ig58/uIyWzJPwsvUJw=
Subject key identifier: 9A:04:9F:A5:86:17:87:3C:7E:63:38:56:90:79:C0:4D:70:76:91:D3
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 0199138407FD8478B7887B653D946EEF20CC
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/mgSfpYYXhzx-YzhWkHnATXB2kdM.roa
Signing time: Thu 04 Sep 2025 06:57:23 +0000
ROA not before: Thu 04 Sep 2025 06:57:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 194.113.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:13:84:07:fd:84:78:b7:88:7b:65:3d:94:6e:ef:20:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Sep 4 06:57:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a049fa58617873c7e6338569079c04d707691d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:2b:1f:92:5b:c8:65:2c:1b:0b:d9:5d:4a:
62:c9:6f:7c:04:fe:48:27:cf:43:e2:e5:a8:71:c2:
2c:32:32:2d:e8:19:a3:de:19:7e:1c:60:d5:84:bd:
21:9a:47:e9:10:1f:09:02:d0:59:8f:3d:4a:03:63:
ab:44:2b:f3:95:2e:b5:e0:05:04:68:92:c7:06:de:
69:4c:88:93:7e:03:cd:fd:e7:ad:ce:6b:a7:de:5e:
c7:a8:62:c3:ca:54:1f:bb:0a:37:51:cd:17:f9:ef:
a2:be:f6:b5:a7:1c:82:ce:64:27:45:e7:46:a3:c5:
f9:e8:99:d6:c7:25:4e:2d:83:7a:b8:ea:ef:fc:c8:
04:55:8f:38:0d:82:a1:9b:98:9d:1d:64:34:1d:1c:
24:25:c4:cc:fe:9b:8c:b5:08:1f:6d:19:df:b1:36:
b7:e8:c3:2c:72:68:ee:d6:2a:06:b0:78:6b:15:fd:
57:0c:1a:59:ba:60:a4:e8:b0:f3:c2:59:4b:fb:21:
cf:2f:f5:7f:47:f3:f7:b3:32:f7:6f:1d:c6:cd:84:
3e:3a:27:65:fb:1c:c2:21:90:e4:f6:8b:1c:ab:d8:
4b:23:d5:5e:ac:1b:43:24:6d:5b:06:5e:14:23:da:
df:2b:ea:03:4d:7b:4f:fb:f2:53:18:23:76:94:9b:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:04:9F:A5:86:17:87:3C:7E:63:38:56:90:79:C0:4D:70:76:91:D3
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/mgSfpYYXhzx-YzhWkHnATXB2kdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.20.0/23
Signature Algorithm: sha256WithRSAEncryption
69:6b:f2:20:6d:19:2e:0b:24:aa:5d:d2:c1:8b:d7:a5:2f:cf:
85:c0:46:75:23:2a:a2:e3:7e:e0:52:01:df:fa:6d:4c:19:c8:
4f:b7:c1:f8:d6:8d:af:91:62:d5:ed:18:c8:cb:7c:c4:06:6f:
0e:4c:55:2a:f2:c6:cd:29:f6:71:1b:6b:5b:18:f3:d3:df:66:
06:0e:c5:c3:4b:64:d3:9d:f9:7b:9d:30:12:22:8f:2a:14:89:
6f:ee:b6:eb:b9:a0:12:0e:84:c4:85:31:f5:87:6b:b2:36:01:
88:ff:e1:e2:05:46:03:cf:06:20:4c:5b:e9:87:0d:81:cd:87:
2b:74:5f:f2:b3:6c:2b:83:f8:34:33:09:ea:fa:0b:14:75:53:
67:89:0e:39:58:00:8c:07:5c:d2:92:39:30:ed:91:55:89:5e:
ad:2d:f1:cb:b6:9c:32:f5:c2:1b:85:2b:92:9d:ad:96:61:44:
59:47:db:21:1b:bb:df:56:a5:13:0a:67:df:22:80:b8:13:ad:
39:9b:f2:86:2a:76:85:a6:85:91:79:8b:af:4c:f7:9e:7f:a2:
79:76:92:36:db:ed:ed:0b:29:44:1c:78:24:18:4e:ae:48:c7:
8b:b6:ef:30:3f:14:53:50:9d:f6:75:88:6f:db:19:ae:24:db:
28:74:11:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:09 2025 by rpki-client