Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/mMP3R6Y_E5t6fees10l8AYe8F8o.roa
File: mMP3R6Y_E5t6fees10l8AYe8F8o.roa (raw, json)
Hash identifier: GVxHnVRZ4k3nHcgJKtEX5VgjvPdVGaTcdXcLRvNp8IM=
Subject key identifier: 98:C3:F7:47:A6:3F:13:9B:7A:7D:E7:AC:D7:49:7C:01:87:BC:17:CA
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 0198374C521763361781255F04FCBABE8EDC
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/mMP3R6Y_E5t6fees10l8AYe8F8o.roa
Signing time: Wed 23 Jul 2025 12:40:05 +0000
ROA not before: Wed 23 Jul 2025 12:40:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214865
IP address blocks: 62.169.139.0/24 maxlen: 24
2a14:5140::/32 maxlen: 32
2a14:5140::/40 maxlen: 40
2a14:5140:100::/40 maxlen: 40
2a14:5140:200::/40 maxlen: 40
2a14:5140:300::/40 maxlen: 40
2a14:5140:400::/40 maxlen: 40
2a14:5140:500::/40 maxlen: 40
2a14:5140:600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:4c:52:17:63:36:17:81:25:5f:04:fc:ba:be:8e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Jul 23 12:40:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98c3f747a63f139b7a7de7acd7497c0187bc17ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:46:bb:01:81:31:28:09:b7:56:28:44:79:58:
b1:ee:a4:fa:7e:26:7b:f5:bb:10:91:e0:e9:62:8b:
22:65:42:b6:04:67:3d:25:8e:30:29:bc:08:23:92:
ef:46:48:a0:17:92:d1:12:d5:68:78:cf:99:a4:1c:
a7:52:fc:be:cf:ad:9e:3c:3c:85:00:bd:b3:5f:ff:
2e:34:dd:32:39:64:41:5b:5b:e0:4b:c8:e6:d3:17:
47:e5:c4:c4:13:2e:2c:67:6b:40:2d:40:18:83:3d:
63:68:37:29:d0:28:b4:5e:40:13:53:b7:51:f6:d1:
32:cc:5d:ed:06:73:c2:2f:6a:18:14:df:ac:1c:e5:
8f:c4:fd:ce:72:e4:b6:8e:55:4b:8b:d6:f6:91:02:
ce:23:f8:4e:50:32:27:f4:97:77:09:0d:2b:c0:71:
03:de:f8:f0:b9:72:43:c9:92:2c:5e:c7:e1:dc:e9:
2e:2c:67:a3:e1:cc:d1:09:65:11:3f:37:6e:f4:ce:
9a:56:e7:a1:59:98:cf:c0:f9:db:14:97:c6:0f:a9:
76:4a:e9:33:d3:10:78:17:b8:cf:fd:bc:6e:90:1b:
9e:e2:4d:a3:a6:d1:68:e0:45:a2:29:74:3c:91:d2:
49:0e:40:86:11:cb:5a:58:bb:4f:ee:03:d3:af:43:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C3:F7:47:A6:3F:13:9B:7A:7D:E7:AC:D7:49:7C:01:87:BC:17:CA
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/mMP3R6Y_E5t6fees10l8AYe8F8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.139.0/24
IPv6:
2a14:5140::/32
Signature Algorithm: sha256WithRSAEncryption
4d:b5:b9:62:50:7e:8d:50:07:76:d1:4f:ed:0b:54:ab:38:32:
30:69:47:84:52:0e:7d:9a:1d:2e:55:68:f5:a4:ba:1d:b8:21:
6c:92:ae:80:c5:13:ab:a9:81:16:df:1e:b3:2b:de:cf:d1:f1:
e4:82:b0:ff:04:9c:18:dc:85:de:69:db:52:37:c4:e7:d8:a2:
e0:dd:dc:e8:5c:fa:39:e3:e4:62:fc:b8:75:f7:9e:f7:49:4a:
23:bd:7f:0d:81:bf:81:a6:64:cd:14:74:d4:ee:03:f5:8d:ef:
ed:32:a7:cb:e3:7d:2b:cc:c0:ba:43:6e:54:04:cb:e0:3d:b5:
e2:4b:83:8e:ac:16:67:ed:08:e9:1e:38:e2:e4:d3:ee:fd:6e:
04:75:63:5c:df:31:53:45:f3:e0:93:b8:f5:31:ba:46:e9:54:
b0:4d:8f:11:0c:f6:e1:8d:56:cd:ed:a7:9b:4d:c4:9a:93:1c:
23:96:61:4f:0c:8a:4b:b6:60:fe:c2:91:f2:44:fd:5a:40:2a:
e7:a8:4c:8b:cc:0f:ce:95:22:3e:97:5c:24:da:ff:3e:2e:b0:
35:2b:9f:ce:dd:83:e8:ac:00:3d:af:50:14:dc:d8:40:09:43:
f1:80:14:1f:74:91:30:58:cb:3a:fb:b5:16:8c:22:14:97:64:
a5:32:5c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 15:41:06 2025 by rpki-client