Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/mpcpZSVPqHluaz87WJ0uN-9FKN0.roa
File: mpcpZSVPqHluaz87WJ0uN-9FKN0.roa (raw, json)
Hash identifier: 7rifYSX6qCoq1SQ259BqQ0Nwhu4OmIky6bHMjTs3HBk=
Subject key identifier: 9A:97:29:65:25:4F:A8:79:6E:6B:3F:3B:58:9D:2E:37:EF:45:28:DD
Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial: 019A15DE52E6A20F59E452887869737FF131
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/mpcpZSVPqHluaz87WJ0uN-9FKN0.roa
Signing time: Fri 24 Oct 2025 10:58:03 +0000
ROA not before: Fri 24 Oct 2025 10:58:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215160
IP address blocks: 91.229.73.0/24 maxlen: 24
185.18.224.0/23 maxlen: 24
185.18.224.0/24 maxlen: 24
185.18.225.0/24 maxlen: 24
193.8.95.0/24 maxlen: 24
2a14:3540::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:de:52:e6:a2:0f:59:e4:52:88:78:69:73:7f:f1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Validity
Not Before: Oct 24 10:58:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a972965254fa8796e6b3f3b589d2e37ef4528dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:7f:82:a4:91:6c:40:ea:c4:9b:f2:65:5b:
34:9a:44:1c:a4:57:1f:e4:ab:93:55:60:b6:0f:94:
5e:4b:90:f7:a3:41:a0:71:32:42:64:23:23:f7:fc:
9a:c1:58:ee:3a:2e:d2:3e:d9:42:99:08:c7:e2:25:
f6:76:24:22:1b:e1:d8:6a:de:90:6e:0e:ab:68:d1:
a6:20:7d:93:af:56:0f:32:64:e3:b6:f5:96:85:2b:
6c:14:a4:48:f8:80:a9:23:a0:e7:59:87:2c:44:0f:
67:fd:35:0a:d7:7b:9d:ad:cb:21:f6:19:0b:04:37:
99:89:25:83:7b:e5:1e:18:10:aa:cb:05:65:33:5b:
cb:ce:32:dd:0b:69:99:e8:8b:82:fe:b4:67:1c:9d:
bb:04:10:1d:b3:88:dc:97:65:02:e9:b4:d4:55:5d:
34:04:79:91:43:23:26:17:6d:09:65:da:e1:0b:f6:
f7:8b:ce:dd:c6:76:86:fb:a6:30:d1:cf:e9:a0:39:
a4:6f:82:ba:a1:fc:bc:9b:5d:94:ba:fd:9a:c9:bb:
2b:08:bc:37:29:a7:20:e0:a8:3b:1b:91:81:12:51:
c4:2a:df:d0:eb:3f:ab:48:03:a7:40:03:32:bf:ef:
ae:7f:0d:38:a7:62:bc:c7:7a:66:97:15:1d:d5:a6:
8e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:97:29:65:25:4F:A8:79:6E:6B:3F:3B:58:9D:2E:37:EF:45:28:DD
X509v3 Authority Key Identifier:
keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/mpcpZSVPqHluaz87WJ0uN-9FKN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.73.0/24
185.18.224.0/23
193.8.95.0/24
IPv6:
2a14:3540::/32
Signature Algorithm: sha256WithRSAEncryption
0d:37:ad:f3:91:c9:14:d4:3a:bf:c4:5e:71:3f:b8:89:e9:4e:
bc:06:4d:a5:49:14:f2:fd:be:94:25:f4:c6:59:e0:1e:53:d8:
c8:8e:e7:ca:15:60:f4:70:ae:99:02:f1:c2:ef:8d:cd:70:e0:
4d:61:f4:9b:57:de:41:e2:be:ab:86:53:a9:00:9b:4c:aa:77:
39:ef:99:96:5e:48:5e:91:4d:00:01:21:73:6c:6c:69:d8:3b:
59:d7:6d:e1:01:87:b6:7a:14:6c:fb:09:05:8d:c4:d8:d6:2c:
9e:3b:5a:5d:95:5e:18:e0:94:f5:c1:b6:cc:82:db:7f:a3:5c:
cc:9b:fa:aa:75:59:42:5f:af:1b:03:e5:5a:4c:c9:96:a7:fc:
43:3f:cc:b3:46:99:9c:cb:2e:2e:aa:35:35:7c:39:6d:8d:0a:
18:f1:58:2f:88:a8:92:bf:81:af:d8:d5:1c:fa:ba:eb:ed:e6:
75:39:7a:91:7b:60:56:01:04:02:33:ce:61:36:0a:08:e1:dd:
1d:44:b4:14:ff:fb:d2:27:1c:53:ec:6b:c7:14:14:30:24:84:
ed:5d:f1:92:47:0a:83:22:32:7c:21:0c:3d:90:31:ab:67:27:
f9:24:c4:69:a3:97:a3:bd:21:75:1f:9c:c6:e3:1e:f3:05:a7:
96:3c:5b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:35:12 2025 by rpki-client