Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/MkM0l7sW99XM0tvJpygUZFpGoRg.roa
File: MkM0l7sW99XM0tvJpygUZFpGoRg.roa (raw, json)
Hash identifier: vm2qvqSnTn/Ky+5Gl9u5Y/B4dkgPIjtu5aoWSXIQD8s=
Subject key identifier: 32:43:34:97:BB:16:F7:D5:CC:D2:DB:C9:A7:28:14:64:5A:46:A1:18
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019A5391EC4ED1C640811F3A40BA91D236EF
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/MkM0l7sW99XM0tvJpygUZFpGoRg.roa
Signing time: Wed 05 Nov 2025 10:31:03 +0000
ROA not before: Wed 05 Nov 2025 10:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209269
IP address blocks: 85.142.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:91:ec:4e:d1:c6:40:81:1f:3a:40:ba:91:d2:36:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Nov 5 10:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32433497bb16f7d5ccd2dbc9a72814645a46a118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:21:2c:e4:b8:e9:0c:a9:6a:cb:53:5f:67:51:
b7:6e:00:12:f7:b0:58:00:60:67:fe:db:83:ec:3f:
3e:46:fa:29:6c:51:c2:aa:68:d7:3d:f8:df:8f:9e:
32:b4:83:71:2b:5e:68:59:a1:74:bf:48:c2:47:43:
23:05:bb:f5:0c:01:e2:49:0a:25:bb:f4:53:55:d9:
32:26:25:e7:67:fd:57:c7:fc:8c:46:28:08:ea:a3:
67:34:ef:88:15:6e:a4:d9:08:51:73:61:64:a7:93:
5b:76:f3:f3:8f:08:28:2f:9e:69:ae:12:97:b7:cd:
6d:bc:0f:b8:56:93:3e:17:e0:c2:33:7a:f5:f0:b8:
f0:9b:dc:d9:83:f4:a0:3d:5e:97:9f:8f:92:a2:92:
29:c9:66:96:d0:52:1b:7a:4a:d1:8b:c8:28:47:db:
a3:1b:fa:57:91:3a:fc:cd:3c:da:bc:6d:32:a3:3e:
45:77:57:0d:3d:70:4b:a1:13:1e:8d:2c:ae:95:55:
1c:49:95:44:07:f3:ec:90:de:1b:19:64:6b:aa:c0:
74:87:94:0a:05:dd:99:a7:44:c5:ed:7b:aa:60:02:
3c:45:46:d1:75:c0:c4:08:84:79:50:1c:8d:de:74:
cf:e7:1a:f6:69:af:14:a3:d1:d5:50:7b:6a:d8:62:
2c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:43:34:97:BB:16:F7:D5:CC:D2:DB:C9:A7:28:14:64:5A:46:A1:18
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/MkM0l7sW99XM0tvJpygUZFpGoRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.146.0/24
Signature Algorithm: sha256WithRSAEncryption
40:46:02:1b:5e:31:42:17:33:05:e8:3e:af:a7:cf:3f:c5:48:
b8:b4:dd:39:c8:44:8b:7f:b9:c1:57:0c:70:6b:50:b8:29:2c:
6f:54:08:c1:5f:5b:75:40:88:bb:c7:1a:1d:6f:22:ca:80:25:
2b:2f:db:5f:dd:9f:7a:e2:df:c8:f3:5d:e5:47:97:98:d4:ef:
13:1e:5b:46:0b:9a:20:d9:1d:4b:ab:46:da:e8:05:7c:c9:fe:
fc:88:b9:4c:ff:8e:37:f4:05:e1:b7:d6:df:67:52:0e:6f:1c:
ce:50:a3:9a:ec:e5:7f:ff:d6:d6:d0:bd:2a:d9:3c:64:6f:b8:
62:c5:20:4f:63:62:9b:d9:de:53:d0:9e:34:71:bd:ff:c5:24:
21:27:9d:b9:18:16:0b:9a:30:1d:11:ec:dd:5a:48:3e:cf:5d:
99:5b:27:4f:85:c3:05:39:0b:b0:be:ef:f8:53:34:9b:ed:af:
b2:35:70:a6:c1:a8:33:ff:00:c2:64:d1:60:94:70:fb:a0:e6:
3d:59:c2:87:5d:72:c9:bb:05:50:e2:2d:51:0c:04:5c:97:90:
85:ad:9f:e0:0a:e5:d1:88:1c:30:f9:63:b0:66:ad:95:d4:39:
7e:86:9d:b3:88:a5:99:44:b9:b5:fa:49:09:1c:92:1a:ce:3c:
d5:c0:09:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:42:56 2025 by rpki-client