Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mFcRFpMU0TBTUT7i-lShcKRfjkE.roa
File: mFcRFpMU0TBTUT7i-lShcKRfjkE.roa (raw, json)
Hash identifier: Uki0YLjeE7TZcbjUrpLIKhcFkWUabV/bkXqFCi+2iyU=
Subject key identifier: 98:57:11:16:93:14:D1:30:53:51:3E:E2:FA:54:A1:70:A4:5F:8E:41
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0198744B02E6E96044EAD7FA8F8E6924E6C2
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mFcRFpMU0TBTUT7i-lShcKRfjkE.roa
Signing time: Mon 04 Aug 2025 08:55:29 +0000
ROA not before: Mon 04 Aug 2025 08:55:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202678
IP address blocks: 188.132.214.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.218.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4b:02:e6:e9:60:44:ea:d7:fa:8f:8e:69:24:e6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 4 08:55:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=985711169314d13053513ee2fa54a170a45f8e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:a8:69:61:ca:db:d7:fb:53:e0:27:72:ed:
94:4b:b9:73:85:03:c1:02:ff:bc:b6:f7:cd:20:1d:
03:1f:e0:e6:8a:eb:13:40:38:81:1d:4a:ae:94:57:
fa:47:8d:0d:ce:50:df:54:85:d0:b7:bb:09:a8:ee:
37:cc:92:4e:52:78:1e:a4:ab:e3:61:57:24:3b:f6:
6b:e6:8d:3f:87:c9:96:d2:cc:d2:77:29:88:b8:45:
6e:43:00:da:b1:db:14:ad:8b:f5:63:d7:ca:44:a4:
1d:d3:7d:41:15:01:c3:f4:11:b8:9e:3b:f0:a8:b8:
76:29:f3:fa:56:cb:fe:66:8c:ee:66:75:44:08:c7:
d6:7a:fd:7e:df:51:61:64:a2:34:68:d3:60:82:71:
95:ad:12:d9:dc:f8:82:8a:49:cb:3b:7d:90:a4:30:
c2:1e:c6:a3:21:42:87:54:01:26:b2:40:0a:82:0b:
72:27:a0:19:67:66:65:0e:42:24:5d:b8:22:51:7b:
a7:e9:39:a0:fd:73:01:57:f9:f2:18:ec:6e:10:9e:
c8:28:1c:bc:c6:5f:a5:09:f7:c2:6d:4c:8e:70:ad:
43:17:40:a6:0f:98:08:c0:40:3f:1b:56:56:23:f5:
84:4b:9d:b7:7e:1f:b2:c9:81:01:a5:5b:0c:7a:8f:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:57:11:16:93:14:D1:30:53:51:3E:E2:FA:54:A1:70:A4:5F:8E:41
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mFcRFpMU0TBTUT7i-lShcKRfjkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.214.0/23
188.132.218.0/24
188.132.228.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:62:fb:af:89:77:a8:ad:56:b3:dd:1c:21:e6:7a:af:e2:30:
cb:b1:e1:40:0b:b5:c1:5c:c3:86:10:4d:04:22:61:9f:31:d7:
80:0e:f1:26:51:87:a7:d3:54:a5:b8:42:2c:94:67:2a:f3:27:
ed:42:0a:7f:a7:78:14:65:a3:06:b9:d2:5e:28:7d:02:4e:0a:
7a:93:8c:6c:29:fb:81:df:35:9e:76:3b:82:69:3c:56:b8:7f:
f5:c3:2c:99:65:1b:0a:26:b4:8b:04:20:5b:7a:2b:51:e1:24:
ca:c1:4c:07:a3:c2:af:7b:fa:86:d5:bd:69:0f:aa:40:4e:16:
31:56:6b:69:7c:fe:50:f9:78:fb:2b:3e:9c:9a:cf:6e:36:73:
73:6e:e6:4d:43:4d:32:96:ba:26:fc:91:f1:0d:98:44:a0:60:
f9:7b:1a:0b:ca:82:54:cb:7b:ac:6a:81:77:0f:d5:ab:a2:5a:
aa:8a:d7:3e:6b:72:67:21:6d:37:89:6b:e2:ad:d4:55:fc:16:
0f:79:6c:72:18:ab:97:f2:d6:7c:8b:37:ce:74:de:a4:e6:d7:
16:72:8a:5d:85:ee:0e:bb:4a:f3:26:d8:78:90:b5:61:70:50:
16:85:2b:54:14:72:f5:f8:78:26:48:f9:43:49:28:e2:7b:b1:
fd:3e:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:20:34 2025 by rpki-client