Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/mLGnKqO6v6O1noVxpXvCIxFUsAI.roa
File: mLGnKqO6v6O1noVxpXvCIxFUsAI.roa (raw, json)
Hash identifier: eYFzp6km8ZVknUVUDwRvZQMvzac7kZXeuFOwR7d+Lr8=
Subject key identifier: 98:B1:A7:2A:A3:BA:BF:A3:B5:9E:85:71:A5:7B:C2:23:11:54:B0:02
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 01973F6D5006531A32AF6E70F47A4B2354A1
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/mLGnKqO6v6O1noVxpXvCIxFUsAI.roa
Signing time: Thu 05 Jun 2025 09:30:17 +0000
ROA not before: Thu 05 Jun 2025 09:30:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59437
IP address blocks: 85.234.64.0/24 maxlen: 24
85.234.84.0/24 maxlen: 24
85.234.86.0/24 maxlen: 24
92.38.143.0/24 maxlen: 24
93.119.168.0/24 maxlen: 24
93.119.169.0/24 maxlen: 24
109.61.121.0/24 maxlen: 24
2a03:90c0:680::/44 maxlen: 44
2a03:90c0:7b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:6d:50:06:53:1a:32:af:6e:70:f4:7a:4b:23:54:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Jun 5 09:30:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98b1a72aa3babfa3b59e8571a57bc2231154b002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:ab:f2:c9:fe:50:f0:ed:5b:fe:d5:ae:cd:
51:1d:9e:49:3c:59:d5:fb:11:a8:c8:34:93:24:45:
75:82:de:38:c1:0f:a4:6a:97:d6:67:cd:c6:f3:53:
46:cc:92:50:70:cb:96:17:60:10:a6:07:e2:58:07:
9f:6b:9e:91:6d:38:fe:a2:6c:d4:ea:0f:36:42:9d:
27:65:ae:f8:27:f8:5b:64:d3:75:86:1e:02:09:b1:
9b:de:06:e6:c3:35:b6:40:2c:4c:cb:07:35:de:08:
c1:33:68:ef:47:a8:44:02:00:96:71:d2:93:77:45:
d5:39:0d:dd:93:3a:c6:16:93:9a:1c:8b:80:4c:82:
1c:26:55:94:43:32:93:c8:64:ad:39:6c:a9:9f:51:
88:ee:46:24:59:4b:4c:c0:45:62:b4:c5:79:f2:87:
d8:20:f8:7f:35:0b:e7:2b:55:00:f2:01:4c:af:86:
a6:8c:49:9e:c0:47:61:f2:5d:dc:88:b4:a1:f1:e8:
38:f7:6a:9c:a0:c1:1e:29:02:47:27:55:cc:7e:57:
b4:22:e8:93:8c:e4:12:11:60:fb:85:ce:17:f0:9c:
42:c1:f0:1d:8a:de:e2:4d:e1:59:fb:66:3a:e5:b5:
d6:12:d9:52:01:c1:3f:34:a7:e1:ad:ed:49:87:44:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B1:A7:2A:A3:BA:BF:A3:B5:9E:85:71:A5:7B:C2:23:11:54:B0:02
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/mLGnKqO6v6O1noVxpXvCIxFUsAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.64.0/24
85.234.84.0/24
85.234.86.0/24
92.38.143.0/24
93.119.168.0/23
109.61.121.0/24
IPv6:
2a03:90c0:680::/44
2a03:90c0:7b0::/44
Signature Algorithm: sha256WithRSAEncryption
90:94:49:dc:2b:4c:e0:13:9b:e6:35:c8:da:06:6d:95:35:5b:
9a:6d:11:d5:c7:9c:53:73:60:b6:a3:ef:6c:6c:de:18:2b:5f:
c6:ab:ec:66:32:ce:d3:2a:0f:79:bd:11:d1:d8:be:ab:b6:15:
84:87:d4:a6:30:75:4f:02:ed:23:2c:15:2c:61:ef:50:e4:e5:
be:c4:75:0d:3c:f9:6e:c5:ed:1c:8b:68:15:61:28:8b:fb:5c:
37:0b:a6:93:b9:15:e1:c9:24:7b:ee:63:61:6c:b8:fa:aa:7e:
ed:d4:a1:cf:75:a1:ca:91:4b:fa:96:cb:3b:b7:ab:e9:31:3e:
a3:77:16:04:67:2e:22:83:ae:62:6d:15:6d:fb:45:fb:47:37:
c3:6e:4c:a0:f8:06:39:63:e3:24:28:06:1f:ef:a9:4b:93:3f:
33:87:34:fa:de:54:e1:ce:db:62:74:c7:8b:33:d0:61:4c:8c:
01:15:0c:47:53:a6:a0:69:69:34:a2:7b:86:db:bd:63:13:93:
54:66:ef:fb:6d:06:e4:8f:be:cc:f6:62:eb:cc:5d:b1:bf:4b:
13:fa:86:fe:5b:89:72:26:fe:b0:a1:ae:1e:95:75:39:af:4a:
e5:f8:0e:25:4d:1b:75:44:cd:cc:d2:d8:0b:ce:16:5d:ec:22:
02:2a:59:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:01:01 2025 by rpki-client