Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/mU7XyF7L0DmrF8731YYYro6-uEg.roa
File: mU7XyF7L0DmrF8731YYYro6-uEg.roa (raw, json)
Hash identifier: gcneQESt75PGToGMlKl2Chs6hxc818rF/uTrFSCFX+M=
Subject key identifier: 99:4E:D7:C8:5E:CB:D0:39:AB:17:CE:F7:D5:86:18:AE:8E:BE:B8:48
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019F8EC3F390B2935BF65DBB312B11C982C6
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/mU7XyF7L0DmrF8731YYYro6-uEg.roa
Signing time: Thu 23 Jul 2026 11:37:14 +0000
ROA not before: Thu 23 Jul 2026 11:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199304
IP address blocks: 91.243.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:c3:f3:90:b2:93:5b:f6:5d:bb:31:2b:11:c9:82:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Jul 23 11:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=994ed7c85ecbd039ab17cef7d58618ae8ebeb848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:eb:8e:3d:14:01:e9:d1:14:4c:bd:92:95:
00:85:e6:7a:4b:17:84:67:be:e8:4c:9c:3b:fd:82:
52:9b:04:09:ca:91:17:f0:c2:f1:de:88:52:5a:42:
ac:2b:b3:2f:c2:77:8f:a6:8c:ce:96:fa:80:bc:79:
6f:ce:26:80:5d:8e:2d:78:8c:1d:2f:0d:09:bc:e1:
04:f0:ff:2c:85:6d:37:69:76:52:60:69:dc:b6:99:
d1:6e:dd:79:0b:a8:31:0f:8c:10:3b:8f:22:ee:ec:
17:98:25:a4:ce:a1:ec:00:96:37:f8:ea:28:62:c4:
ae:63:b0:34:14:24:31:8e:b7:54:1e:16:fc:fb:a1:
9e:5f:7a:82:f6:6b:c2:c4:a5:8c:63:62:c4:2f:38:
13:e5:df:3c:50:12:45:70:d4:44:8c:b1:9c:22:35:
d3:1e:d2:2d:1b:8a:0b:c7:61:a9:cb:83:8d:29:ac:
48:2d:e1:c8:38:96:fb:4b:41:d2:31:5c:74:9b:66:
88:8e:a7:bd:54:fa:60:34:12:6a:3a:68:7c:66:d6:
cc:2f:40:2b:d0:20:d4:f5:3d:fe:2b:69:ac:ea:54:
53:56:d8:c0:3a:ea:97:34:d0:41:c6:c8:de:04:c0:
f5:a1:55:ec:0b:bd:a6:44:85:3e:05:9a:61:f7:48:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4E:D7:C8:5E:CB:D0:39:AB:17:CE:F7:D5:86:18:AE:8E:BE:B8:48
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/mU7XyF7L0DmrF8731YYYro6-uEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.189.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:39:a9:d4:af:2d:06:07:4f:cf:99:2e:94:bc:48:83:87:9c:
a5:22:e4:64:b7:43:35:86:a2:1a:27:f4:ea:e5:46:d8:71:86:
0f:c1:34:dd:17:e5:22:cc:dc:c8:68:1e:fb:7f:f0:a2:39:a6:
5b:fe:d2:23:bd:f1:04:18:4d:9d:d7:fc:f6:f3:c8:07:36:bf:
76:de:c2:35:b0:58:98:b4:19:27:77:28:ca:7d:7b:d1:df:e4:
07:aa:b3:f8:f6:df:02:90:8b:eb:eb:16:f9:b4:6f:e8:0f:07:
ff:6f:f9:a7:af:f2:42:ce:69:51:31:32:3c:0d:84:1a:b4:a6:
f6:c1:18:6e:52:66:28:9d:1d:ba:cb:93:5c:60:ac:c8:36:51:
7b:c4:94:fa:04:ed:00:c3:03:1d:e5:f3:3f:8d:2a:79:bc:88:
c4:36:8a:58:6e:7a:23:f2:1f:26:df:ee:f9:95:c6:1f:8f:2d:
3f:f9:cc:ee:51:f4:bd:0d:e1:37:bb:d7:1b:8a:1e:f0:25:ab:
68:e4:60:ac:4a:fa:a3:00:86:fe:a5:d4:c0:5b:c9:82:36:2c:
aa:c1:b4:08:9e:5d:7e:6f:0b:d9:a2:59:55:86:6e:8e:64:6a:
7e:c6:45:b1:3b:70:23:86:b6:57:0c:dd:31:aa:e0:88:bf:ef:
61:46:7b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:03 2026 by rpki-client