Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/mgPqsxG5CIseh5QbhAvUdeRv4RY.roa
File: mgPqsxG5CIseh5QbhAvUdeRv4RY.roa (raw, json)
Hash identifier: mtcaVz1Avyle5GnOLpiDx2GLALhMrVFtby9iSjwpNdY=
Subject key identifier: 9A:03:EA:B3:11:B9:08:8B:1E:87:94:1B:84:0B:D4:75:E4:6F:E1:16
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 01985AF1BE7F4A25D75661CBCDC74ECAEC6F
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/mgPqsxG5CIseh5QbhAvUdeRv4RY.roa
Signing time: Wed 30 Jul 2025 10:47:28 +0000
ROA not before: Wed 30 Jul 2025 10:47:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134450
IP address blocks: 45.82.40.0/23 maxlen: 23
45.82.40.0/24 maxlen: 24
45.82.41.0/24 maxlen: 24
45.130.66.0/23 maxlen: 23
45.130.66.0/24 maxlen: 24
45.130.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:f1:be:7f:4a:25:d7:56:61:cb:cd:c7:4e:ca:ec:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jul 30 10:47:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a03eab311b9088b1e87941b840bd475e46fe116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:2f:b9:5a:8c:8e:5f:7b:a3:5e:52:f2:21:
f7:ca:d7:27:4d:63:a7:63:fe:f9:b7:ae:62:41:f4:
e6:1d:07:af:4d:f7:47:5a:28:f3:9a:e4:20:96:a2:
e2:a1:83:16:f8:93:b4:da:1a:9c:dd:e6:ca:41:f3:
18:dc:28:1e:3f:12:a7:b3:d8:26:b4:18:46:50:e4:
d7:41:2c:d8:29:0e:c5:0a:91:09:d6:57:fa:28:e2:
9c:63:f9:02:a9:39:ef:d4:ca:4f:dc:96:12:11:f3:
4e:67:3c:a8:5a:fc:08:af:21:97:4b:a3:93:61:67:
80:39:0d:d6:75:83:ba:75:bc:e7:8b:6e:2e:cb:31:
39:5e:cb:2a:a4:6a:c3:95:69:13:e6:52:3f:c4:00:
c8:57:dd:1a:22:ab:61:29:fa:2b:41:ab:03:83:f8:
4d:2b:9e:45:c4:51:b5:17:02:67:59:4a:30:ef:e5:
23:d5:e6:62:1b:54:4f:3d:03:f3:b4:56:d2:33:96:
33:c3:9f:fe:dc:bd:00:7c:97:55:56:49:7f:31:51:
bf:32:31:2a:11:5c:f5:7d:3e:d9:d8:07:7b:20:b4:
0d:2b:51:79:17:0f:2f:6c:44:9e:05:3a:b9:3e:02:
cb:8d:51:37:35:8d:99:69:b5:e6:09:78:dc:98:23:
8f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:03:EA:B3:11:B9:08:8B:1E:87:94:1B:84:0B:D4:75:E4:6F:E1:16
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/mgPqsxG5CIseh5QbhAvUdeRv4RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.40.0/23
45.130.66.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:19:bd:c8:4b:87:80:d4:fd:0d:8f:9b:72:f1:d2:c0:24:96:
ef:31:5c:ad:98:ea:96:3b:3d:64:3a:ad:5f:a7:2c:bf:56:88:
5d:a4:06:7f:a7:51:7f:7c:ad:27:3f:14:7d:d6:37:14:de:6d:
31:be:d9:d1:94:2c:81:9c:a8:99:e8:89:4a:e6:8c:6d:70:5f:
4d:99:62:53:2f:f2:a9:bf:fd:7b:a4:0e:4b:f2:02:5c:d5:e9:
83:7e:91:f7:36:76:11:b0:15:ec:f8:0d:eb:c0:d4:04:f8:cd:
7f:63:2e:2c:24:d8:24:1c:31:7e:3d:34:5e:94:56:61:86:28:
9f:39:77:f6:c7:e1:10:6d:97:e4:f9:b8:97:a8:da:ec:60:22:
0e:33:c5:c4:36:48:f5:c3:5a:4e:ea:52:39:f3:8b:32:b6:6b:
8d:bb:b3:33:22:82:a4:79:a1:99:74:1b:7a:d5:57:18:9b:be:
34:83:e1:f5:c9:bd:0d:bf:53:c2:c6:4e:f5:9b:24:02:e5:23:
3e:08:79:94:de:98:24:cb:c4:27:91:2a:91:68:9a:34:97:82:
12:0b:16:56:07:dd:1b:13:e9:0f:2d:1e:3e:84:4a:b7:87:c5:
b9:fa:87:0b:ed:b1:cd:5b:08:84:3e:3f:cc:f8:12:ce:49:30:
f7:6c:e7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:41:32 2025 by rpki-client