Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/Mh7Uh2yrZuE879DdxuGlIe2mllQ.roa
File: Mh7Uh2yrZuE879DdxuGlIe2mllQ.roa (raw, json)
Hash identifier: gtl/gNOgRhihO/g/958+G5u3E+/R03DdhrHrLkoU1QA=
Subject key identifier: 32:1E:D4:87:6C:AB:66:E1:3C:EF:D0:DD:C6:E1:A5:21:ED:A6:96:54
Certificate issuer: /CN=4194d9dde9b9d550ff3497e43683f6880d403323
Certificate serial: 019B7834C2126D3B8AA0267ED8EFFC0D9E59
Authority key identifier: 41:94:D9:DD:E9:B9:D5:50:FF:34:97:E4:36:83:F6:88:0D:40:33:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZTZ3em51VD_NJfkNoP2iA1AMyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/Mh7Uh2yrZuE879DdxuGlIe2mllQ.roa
Signing time: Thu 01 Jan 2026 06:18:02 +0000
ROA not before: Thu 01 Jan 2026 06:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62218
IP address blocks: 185.43.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZTZ3em51VD_NJfkNoP2iA1AMyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:c2:12:6d:3b:8a:a0:26:7e:d8:ef:fc:0d:9e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4194d9dde9b9d550ff3497e43683f6880d403323
Validity
Not Before: Jan 1 06:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=321ed4876cab66e13cefd0ddc6e1a521eda69654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:00:c3:70:ea:cf:bb:4e:59:56:93:fb:44:
f6:b3:de:6d:00:79:86:e3:30:8d:07:44:7a:ca:f8:
16:bf:5f:d1:fa:cc:7c:9a:1f:a9:52:d4:31:fd:d3:
8b:7d:79:93:ed:a1:45:d0:a1:f0:55:53:c0:7a:72:
18:89:3d:b6:dc:fb:9f:f6:60:5e:12:98:f8:09:0b:
48:85:35:46:37:5c:30:b1:b9:21:82:a1:12:bb:8a:
d0:2e:d6:56:be:65:df:16:a9:6c:5d:e0:0c:ef:59:
b4:2e:a7:40:c8:cb:ba:42:64:81:a0:8c:dd:48:cd:
29:1e:88:82:10:c2:f1:27:fe:4b:f0:1e:e9:0c:30:
b9:24:8e:e7:71:e8:1a:73:a8:32:00:58:f4:3f:d8:
3b:a2:74:0e:8d:ca:93:d8:13:b3:45:f1:e4:50:1a:
6f:f2:81:e2:2c:cc:c8:93:f0:9c:a3:a3:9b:3b:da:
2a:9f:1b:41:5a:7e:37:6d:e8:db:45:11:d1:35:25:
04:4f:63:63:4b:89:f3:be:9d:8e:8e:dd:d1:d4:b8:
1d:de:72:4b:a0:a3:fb:52:76:07:25:12:cc:63:4c:
8e:a9:4e:39:26:dc:04:25:94:60:6e:cd:a1:4a:a8:
e3:1b:10:3b:67:63:01:e7:f5:ba:e0:df:71:69:0b:
01:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1E:D4:87:6C:AB:66:E1:3C:EF:D0:DD:C6:E1:A5:21:ED:A6:96:54
X509v3 Authority Key Identifier:
keyid:41:94:D9:DD:E9:B9:D5:50:FF:34:97:E4:36:83:F6:88:0D:40:33:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZTZ3em51VD_NJfkNoP2iA1AMyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/Mh7Uh2yrZuE879DdxuGlIe2mllQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:73:e7:f9:7d:2e:c6:99:88:5f:a3:a8:7f:7d:4c:f5:c5:50:
2b:57:d1:34:28:6d:8b:04:8c:24:ab:24:58:72:f8:c9:61:47:
4c:0a:4d:fc:37:fb:17:b1:8c:76:bf:a4:b1:be:e3:c1:18:e3:
ef:1f:75:49:8f:05:37:5e:68:2f:0d:2a:b2:74:f8:6c:84:94:
65:75:f3:40:65:b5:3a:10:51:f6:fa:cb:32:0b:14:b9:09:27:
70:5f:18:33:87:13:b4:4e:5c:93:ac:f8:d0:e3:b5:51:ba:cc:
d7:30:6b:02:a3:ab:94:68:4d:e2:19:cf:61:26:a8:c2:73:4f:
86:56:61:bb:0f:70:ab:2b:c9:d2:9b:d4:9b:c5:f8:29:22:9f:
05:2c:dc:67:59:fe:58:51:bb:45:e8:fe:4c:49:c4:63:9a:4c:
9a:3d:48:52:d9:96:ad:ea:0b:41:8d:3b:de:4c:61:d4:51:70:
d2:19:f0:e8:50:07:fb:40:97:13:37:66:b8:ed:3b:77:f2:f3:
fe:bf:bb:ec:e9:9d:dc:3a:93:02:9a:ce:39:03:b3:77:f5:8b:
e9:fd:b8:17:ef:a3:48:ff:fc:c4:5e:85:c3:18:39:4b:d0:5b:
38:e5:c2:16:37:7d:e2:e2:61:9b:dd:4d:b2:ac:4a:45:f8:b9:
61:e7:33:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:24 2026 by rpki-client