Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/MHRuqT3ZxWiNPWjx1hFceo5038Q.roa
File: MHRuqT3ZxWiNPWjx1hFceo5038Q.roa (raw, json)
Hash identifier: duJLSAn68SgAgFK46x9nz8RGT1uXEmPsEIzG1iEF5y4=
Subject key identifier: 30:74:6E:A9:3D:D9:C5:68:8D:3D:68:F1:D6:11:5C:7A:8E:74:DF:C4
Certificate issuer: /CN=536c9852a9f44ca9f847bba1b8c6d0b15cc52662
Certificate serial: 019F23687F0BBA606A30B379B1BA51FE3B51
Authority key identifier: 53:6C:98:52:A9:F4:4C:A9:F8:47:BB:A1:B8:C6:D0:B1:5C:C5:26:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/MHRuqT3ZxWiNPWjx1hFceo5038Q.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200654
IP address blocks: 185.100.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7f:0b:ba:60:6a:30:b3:79:b1:ba:51:fe:3b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c9852a9f44ca9f847bba1b8c6d0b15cc52662
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30746ea93dd9c5688d3d68f1d6115c7a8e74dfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:91:3e:02:90:e2:f0:2f:92:13:ae:b4:6a:
12:4c:5a:a1:b5:ea:c6:60:aa:53:95:08:38:02:9f:
be:27:80:30:58:ef:84:4d:df:c0:5c:65:a0:48:45:
27:81:9a:d5:25:73:4b:2b:8b:78:76:5d:51:12:ab:
64:8a:2a:d2:72:f7:a9:4d:3d:04:8c:f6:c7:80:48:
0e:bd:ff:4f:b3:ad:f7:88:13:be:ae:ce:6e:f9:36:
eb:ac:06:cf:6d:46:51:ff:c3:12:a5:ab:0b:6a:19:
bf:07:51:85:9a:01:ef:b0:3c:38:7c:6f:4d:c0:87:
e7:10:45:bf:75:d1:34:a8:9f:61:97:61:ac:14:94:
47:a4:b7:23:7b:b6:d9:71:f6:eb:65:cc:ef:bd:e5:
72:67:93:ee:07:0a:00:63:43:34:c1:f1:d8:2b:94:
dc:cd:b9:da:85:c7:6c:f8:d4:bb:f7:b9:2d:12:b2:
8b:d1:9d:38:f8:9e:9b:e7:16:49:bb:3a:5c:c1:d7:
a8:b0:77:2d:0c:d3:76:95:7a:89:c0:7b:34:30:47:
9d:ad:18:8a:94:be:c4:d1:19:1c:47:34:c8:e7:ae:
38:db:70:74:53:6e:e5:67:89:98:11:91:e2:b8:89:
2f:89:90:6c:11:5e:62:2c:0b:4c:aa:bc:6a:89:88:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:74:6E:A9:3D:D9:C5:68:8D:3D:68:F1:D6:11:5C:7A:8E:74:DF:C4
X509v3 Authority Key Identifier:
keyid:53:6C:98:52:A9:F4:4C:A9:F8:47:BB:A1:B8:C6:D0:B1:5C:C5:26:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/MHRuqT3ZxWiNPWjx1hFceo5038Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9b:1e:75:09:42:83:51:d4:5d:ef:99:d7:27:37:eb:54:b1:
fc:29:79:07:ac:66:4a:33:14:c5:51:e2:d5:d5:a0:4c:94:b8:
3d:d0:4b:db:7d:a2:10:e9:33:c8:0f:28:56:1a:48:bc:ca:34:
34:49:bb:a3:6a:5d:e5:3c:29:bd:26:5b:69:b9:9f:51:c0:00:
12:36:33:24:d7:13:58:f2:68:ac:1a:e1:e5:8c:55:94:52:3a:
cc:a8:26:11:bc:01:31:2a:fd:d9:37:10:c7:66:95:aa:8f:e7:
87:9f:c3:dd:7e:35:27:02:64:56:28:04:49:df:90:eb:b8:86:
a1:7a:80:c7:1e:d3:6e:d7:8b:e8:1d:9a:61:de:0a:69:72:06:
c6:2b:48:09:8f:08:5b:db:f8:88:76:d7:73:7b:6f:b3:ab:84:
c2:ca:d4:04:0d:66:f8:a7:d0:75:96:47:27:09:b5:74:d0:3b:
c5:f5:ca:30:42:c1:db:83:4d:ba:65:4b:6f:55:4d:1d:26:b2:
ae:5d:0a:5d:84:e0:82:22:04:0f:0f:2f:48:12:48:9c:40:99:
c0:70:ba:cd:d9:80:f6:78:40:31:82:53:41:22:a1:34:d0:15:
51:79:2d:64:30:35:ae:20:57:92:d7:f2:20:8b:af:5e:f0:bb:
1c:9c:ba:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:58 2026 by rpki-client