Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Mmu8auAfwM0mjwOiyIc9Do83Na8.roa
File: Mmu8auAfwM0mjwOiyIc9Do83Na8.roa (raw, json)
Hash identifier: kURdqfy7USGmApJHQmQyhZCpikVwX4Z7lgZtlcGRuU0=
Subject key identifier: 32:6B:BC:6A:E0:1F:C0:CD:26:8F:03:A2:C8:87:3D:0E:8F:37:35:AF
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A1200A1F93458ACC04F4CCF1D5F87D72C6
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Mmu8auAfwM0mjwOiyIc9Do83Na8.roa
Signing time: Fri 09 Oct 2026 09:41:36 +0000
ROA not before: Fri 09 Oct 2026 09:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 62.105.218.0/24 maxlen: 24
194.77.2.0/24 maxlen: 24
194.77.228.0/24 maxlen: 24
195.21.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:0a:1f:93:45:8a:cc:04:f4:cc:f1:d5:f8:7d:72:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 9 09:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=326bbc6ae01fc0cd268f03a2c8873d0e8f3735af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:de:94:58:38:88:c1:54:81:69:c0:a4:f6:
7b:b0:17:df:2a:9a:eb:3b:ec:1d:56:f2:6a:3e:7e:
4e:bc:e7:4a:4d:b0:43:45:f1:e9:d8:26:2a:fb:15:
c7:17:2a:2a:50:82:21:bf:2f:35:86:74:90:53:6a:
da:4d:23:e1:38:54:21:55:1d:c7:ca:bb:df:86:a3:
4b:8e:30:e7:b4:a1:41:17:36:c1:a3:e3:ce:93:55:
a6:99:81:37:5d:06:d0:81:45:fe:79:5a:db:a8:42:
f5:33:46:b9:28:d2:eb:21:eb:e9:b8:82:10:74:e4:
6c:aa:a5:16:e6:a6:bc:74:8e:b6:e9:cf:8e:de:a4:
3f:d8:d8:40:16:f4:ba:32:80:d8:37:de:79:d3:57:
0a:82:5a:55:50:a0:18:74:97:d0:a2:98:6a:bc:7a:
1e:92:01:9b:ba:01:38:6b:e7:a2:5a:10:a5:f3:de:
de:2e:4b:75:3b:33:04:d3:d4:d6:eb:be:98:78:f5:
4e:f2:1e:f8:c9:e7:b3:96:a6:64:a3:96:7a:ef:02:
6c:bd:6f:5d:78:19:fe:81:34:87:43:57:d1:a6:49:
6b:90:fb:12:74:71:4e:23:97:41:8e:17:a6:a4:86:
76:87:e8:f4:70:e5:71:58:a5:bc:d3:23:f4:06:d0:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6B:BC:6A:E0:1F:C0:CD:26:8F:03:A2:C8:87:3D:0E:8F:37:35:AF
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Mmu8auAfwM0mjwOiyIc9Do83Na8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.218.0/24
194.77.2.0/24
194.77.228.0/24
195.21.134.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:31:e3:1a:c3:db:2c:e6:1c:a1:c3:5d:12:6b:42:8b:b3:23:
23:d8:6c:79:67:71:a1:93:de:ac:83:ea:e8:d2:b5:a4:e4:6b:
90:b5:e8:11:59:b7:94:5b:0e:79:f0:9b:42:1a:dc:57:d3:87:
b0:8a:79:b5:31:b3:f8:6f:8d:e7:f4:70:4d:b8:e4:2c:69:89:
67:1b:81:95:d0:9b:73:b6:ed:53:9a:e1:cb:8e:31:f3:18:88:
76:f1:7e:1f:17:88:96:8e:86:43:a5:b8:64:8f:a0:87:0e:e4:
70:55:15:42:18:0c:1d:c3:32:2e:5b:25:c3:7a:b0:cf:53:9c:
86:2c:37:60:4f:9b:5b:32:c7:ed:c7:1c:f9:b2:00:45:c6:07:
2d:9f:e2:1d:14:28:c0:58:e9:d5:7c:b3:55:b9:05:e8:75:b7:
d0:3c:33:37:62:e5:cb:a0:3d:95:cc:e3:df:80:12:43:72:53:
9a:f6:45:98:e7:59:71:76:71:2e:56:87:34:d4:32:55:39:5d:
27:19:9b:b8:6e:fa:d2:1b:b9:85:12:2b:3e:ca:4a:81:71:a3:
68:0b:08:f0:0d:cc:bc:65:1d:6c:70:68:fe:c1:db:4f:e6:f9:
9d:7b:22:27:a4:5d:4c:8f:1a:2a:01:a7:f6:ac:aa:e7:b2:51:
e5:aa:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:01:02 2026 by rpki-client