Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/mWHZWvt3p5MCg5LBUwow2A8Kk6M.roa
File: mWHZWvt3p5MCg5LBUwow2A8Kk6M.roa (raw, json)
Hash identifier: rbpJ3fLj4o2mcv3jMC9K4zfYj/SC5m2zNP1X60zbbmc=
Subject key identifier: 99:61:D9:5A:FB:77:A7:93:02:83:92:C1:53:0A:30:D8:0F:0A:93:A3
Certificate issuer: /CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Certificate serial: 019856978BF90BACF5C00E0F229E680BAC9B
Authority key identifier: E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/mWHZWvt3p5MCg5LBUwow2A8Kk6M.roa
Signing time: Tue 29 Jul 2025 14:30:29 +0000
ROA not before: Tue 29 Jul 2025 14:30:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213804
IP address blocks: 89.186.23.0/24 maxlen: 24
89.186.28.0/23 maxlen: 24
89.186.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:97:8b:f9:0b:ac:f5:c0:0e:0f:22:9e:68:0b:ac:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91bc4c42c503da0b7f8af16f7ee4b5471ff0e01
Validity
Not Before: Jul 29 14:30:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9961d95afb77a793028392c1530a30d80f0a93a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:5b:51:72:2f:26:af:5c:fa:2e:fe:c8:d7:
2a:b4:79:52:57:0e:7e:ce:82:e2:47:5c:f5:67:a6:
cc:d3:87:db:d1:ce:72:42:63:ef:91:e3:3e:04:35:
e1:ff:f6:4d:9c:e6:73:32:36:9c:ba:4a:1a:6a:db:
aa:c3:dc:b4:cf:23:7f:71:e6:38:b0:c9:2a:7d:45:
9f:16:0b:0e:5a:56:2b:cf:d1:e6:a0:db:69:55:37:
f1:e9:32:41:24:72:a2:a7:8c:83:10:13:38:85:b0:
b1:99:18:ad:21:cb:d9:29:b7:79:48:b4:68:d3:d7:
20:b2:25:f5:8e:3f:11:ff:42:b2:c5:81:7a:78:1f:
b9:fc:86:14:c8:fc:df:b2:c7:1b:1b:dd:c8:99:b6:
a9:8c:ea:87:86:79:40:f8:c1:9e:8b:4c:45:f5:03:
06:1d:4b:bf:41:1f:2f:9d:42:8d:0e:94:44:63:7c:
2a:49:fa:1c:ef:0d:b4:85:91:f6:2e:7d:16:5e:89:
89:e6:2b:f0:62:20:2f:91:d5:e9:4e:c4:bd:a8:d6:
fb:ef:4b:9f:18:86:ec:ea:bd:6f:54:c0:f9:f0:00:
4c:24:20:56:34:bb:35:8a:b6:5e:08:3c:a7:a3:95:
d6:72:31:e6:f8:14:3a:2d:bc:16:3b:27:69:b8:33:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:61:D9:5A:FB:77:A7:93:02:83:92:C1:53:0A:30:D8:0F:0A:93:A3
X509v3 Authority Key Identifier:
keyid:E9:1B:C4:C4:2C:50:3D:A0:B7:F8:AF:16:F7:EE:4B:54:71:FF:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RvExCxQPaC3-K8W9-5LVHH_DgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/mWHZWvt3p5MCg5LBUwow2A8Kk6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a34b68-5dcf-4a81-bc08-d1c3f288799c/1/6RvExCxQPaC3-K8W9-5LVHH_DgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.186.23.0/24
89.186.28.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:8a:0e:f8:71:d0:11:a2:aa:db:af:62:da:f5:47:25:a4:a2:
08:02:4d:68:4e:d2:87:99:1e:06:ab:73:9d:50:de:49:30:ef:
76:3d:e3:4d:aa:41:26:8a:49:63:be:35:89:55:0b:8a:17:ba:
6e:09:1b:03:2d:26:f3:4d:f0:02:42:27:c9:d3:94:50:d5:a4:
e0:19:cc:89:fb:6c:99:e7:73:94:d3:fb:ef:70:66:62:92:7d:
e9:86:84:83:7a:e0:ed:fa:53:82:db:e7:e5:b4:f4:02:2f:fb:
b8:14:6d:30:fe:c7:93:13:8f:70:bd:91:d7:ec:a7:19:31:0b:
80:f0:0d:08:0f:4f:8e:b2:0c:dd:bf:dd:70:aa:32:19:15:39:
87:9c:ea:d0:54:7b:b8:a1:09:1d:0f:25:e3:86:6f:23:68:e5:
5d:cc:7d:c7:59:ed:7d:bc:2a:38:c7:09:38:61:bc:bf:54:1d:
dc:d5:2d:48:a3:fe:5d:5b:51:2d:e9:65:d2:7f:b8:d7:0f:94:
13:fb:ca:62:fb:0d:a9:15:b2:e1:00:53:cf:e5:46:6b:1c:b3:
59:46:4e:96:ae:03:97:ed:1b:b7:80:98:f6:fc:71:88:77:c6:
00:af:a0:95:14:62:d9:10:ae:2d:66:ce:7e:b0:d5:b5:07:41:
67:9c:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:46:10 2025 by rpki-client