Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mo26zCOKBPj5aKWbJPxUXAWMnAY.roa
File: mo26zCOKBPj5aKWbJPxUXAWMnAY.roa (raw, json)
Hash identifier: ZGvtfN7cNRswnKJc1MGV72tFknD1ArhQBKO3c3Yw860=
Subject key identifier: 9A:8D:BA:CC:23:8A:04:F8:F9:68:A5:9B:24:FC:54:5C:05:8C:9C:06
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019864FF4B398A7E9C313D1A20440A5893AD
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mo26zCOKBPj5aKWbJPxUXAWMnAY.roa
Signing time: Fri 01 Aug 2025 09:38:29 +0000
ROA not before: Fri 01 Aug 2025 09:38:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
82.115.2.0/24 maxlen: 24
82.115.9.0/24 maxlen: 24
82.115.10.0/23 maxlen: 24
82.115.28.0/23 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
185.231.172.0/22 maxlen: 24
188.209.156.0/22 maxlen: 24
202.133.90.0/23 maxlen: 24
212.90.100.0/22 maxlen: 24
213.173.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:ff:4b:39:8a:7e:9c:31:3d:1a:20:44:0a:58:93:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 1 09:38:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a8dbacc238a04f8f968a59b24fc545c058c9c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:20:fd:dc:75:25:af:4a:c4:30:e2:ae:69:
00:6d:95:3d:10:d4:c1:1e:ef:5e:eb:54:ab:7a:6e:
06:d2:63:85:01:bc:44:21:57:72:9c:75:a9:7a:9f:
77:c3:74:cb:0e:50:85:db:7c:d3:61:26:d7:7d:6d:
40:f3:be:fd:cd:27:1d:96:62:71:37:63:46:90:5b:
fa:ee:86:90:be:4d:a4:d6:a9:4a:75:44:96:82:94:
a7:df:37:60:51:95:f4:fe:16:2d:8a:ab:62:16:47:
32:80:bc:67:68:04:ad:20:10:c2:12:ee:e4:d7:54:
13:0c:8e:c6:c8:77:bb:cb:94:bb:38:49:94:69:be:
76:4e:d1:d9:be:4b:40:28:60:e5:9c:91:63:7c:9d:
35:bc:34:c3:c2:c8:75:53:af:ba:eb:bb:db:95:ff:
51:0e:3d:13:f8:8f:a3:60:c9:03:f7:48:12:8f:a2:
a8:b2:89:cb:21:6a:9f:48:30:dd:dd:6b:07:69:8a:
02:d1:49:0f:f9:e6:11:1a:fb:8d:ba:cc:dd:04:18:
4d:12:b6:20:be:a2:8a:0a:e2:19:31:2f:b2:f9:ce:
c6:02:cd:bd:13:91:ae:20:8c:6a:64:24:b9:b7:b8:
92:2b:ae:d7:cc:3c:0d:05:ff:0a:2a:40:5c:d0:70:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8D:BA:CC:23:8A:04:F8:F9:68:A5:9B:24:FC:54:5C:05:8C:9C:06
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mo26zCOKBPj5aKWbJPxUXAWMnAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
82.115.2.0/24
82.115.9.0-82.115.11.255
82.115.28.0/23
159.255.32.0/21
185.231.172.0/22
188.209.156.0/22
202.133.90.0/23
212.90.100.0/22
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
64:8a:d1:67:33:20:ce:c3:7c:02:0d:d2:54:b1:8d:cb:b1:84:
3c:02:8f:af:a7:56:2e:56:49:d2:15:97:87:7a:84:6d:1e:be:
8c:26:43:5a:16:0d:03:49:5c:25:9a:a1:b7:51:9b:da:1a:0d:
e8:b9:65:b3:db:14:7d:b5:ce:e1:f6:ee:63:4b:59:25:47:76:
86:57:41:20:2a:5c:ca:e3:af:d3:b9:bf:a5:d2:25:5a:da:21:
0b:55:cf:98:ef:f9:3c:a6:f4:6d:2b:38:48:08:20:e9:47:7b:
38:00:8e:8f:18:42:54:02:d6:0d:d7:f5:b5:bd:8c:99:6a:31:
f8:d1:73:5c:24:80:1a:60:3a:60:97:75:45:e6:fb:8f:9d:42:
f0:79:c8:67:ae:4b:a5:72:ff:67:6e:59:21:c7:d6:23:5f:13:
cf:7f:d1:e1:2d:8f:05:65:ec:e8:42:2d:ae:9a:88:a6:f2:0f:
30:3b:60:9b:ff:b4:f0:c0:a5:00:d6:f3:55:3c:90:7f:29:68:
81:0f:d5:86:03:9c:b4:6f:db:1c:7d:63:30:45:a1:80:5e:86:
bf:cc:c8:1a:7f:54:fa:79:4b:dc:12:10:b0:0d:46:c5:b8:09:
eb:a2:f6:39:9c:5a:37:b8:aa:d2:4f:89:ea:04:ff:3e:a6:b3:
c4:5c:28:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:45:07 2025 by rpki-client