Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/mFDb7QhlFMpJcx21UYZqsSeYD7w.roa
File: mFDb7QhlFMpJcx21UYZqsSeYD7w.roa (raw, json)
Hash identifier: tW4kQqWznqKEJSkh3cW125W6koEqfnSDc+Z1EK7o2js=
Subject key identifier: 98:50:DB:ED:08:65:14:CA:49:73:1D:B5:51:86:6A:B1:27:98:0F:BC
Certificate issuer: /CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Certificate serial: 019F2368830EB4FC7E06D77F4209A6CB4A2C
Authority key identifier: 56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/mFDb7QhlFMpJcx21UYZqsSeYD7w.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5528
IP address blocks: 188.92.22.0/24 maxlen: 32
188.92.23.0/24 maxlen: 32
195.130.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:83:0e:b4:fc:7e:06:d7:7f:42:09:a6:cb:4a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9850dbed086514ca49731db551866ab127980fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:1e:59:41:9e:b9:db:24:68:9e:1c:b3:af:
53:c4:f5:43:01:40:f2:ef:43:b0:69:0a:60:59:dc:
53:f8:d6:57:a5:30:3c:0f:88:c9:01:ed:4a:fb:a6:
11:d2:44:7b:4e:dc:aa:cb:ad:71:ef:2a:a8:51:6a:
31:3f:91:ec:43:9e:15:d1:85:7c:be:52:de:80:75:
80:f0:84:8e:97:dd:cc:63:3a:9c:38:6f:63:de:f5:
91:b1:e2:ae:aa:72:3e:f7:a2:99:6a:fb:ba:ba:c3:
0b:69:df:eb:ce:18:84:e5:a9:8e:42:9b:b1:96:68:
ac:47:db:62:67:42:1b:f0:93:05:cd:ec:91:59:bd:
af:c0:17:5f:ab:16:06:7d:de:04:83:11:67:11:0b:
4b:41:09:f0:a2:2f:d4:f4:57:a6:c3:79:ad:a4:7d:
9a:e5:15:bc:0a:04:ee:18:3e:5f:be:81:71:0f:16:
3e:1c:ad:ec:f6:40:ad:6a:85:e2:f0:eb:06:4a:43:
de:2e:19:9a:5a:70:78:2c:ee:18:37:3f:b0:14:91:
15:76:27:c6:cb:54:c9:d8:17:09:12:8e:05:a0:99:
6f:a5:10:a7:fa:13:5d:ba:e7:e1:e0:2d:ff:97:b0:
f6:3a:d1:42:7c:db:bf:3a:35:af:88:c2:58:8b:ad:
bf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:50:DB:ED:08:65:14:CA:49:73:1D:B5:51:86:6A:B1:27:98:0F:BC
X509v3 Authority Key Identifier:
keyid:56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/mFDb7QhlFMpJcx21UYZqsSeYD7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.22.0/23
195.130.205.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e9:93:f0:0c:84:b3:57:fd:c6:9c:f6:04:a7:3f:9c:cf:a4:
2d:9d:3a:e6:2b:08:6d:c5:b6:d9:bc:e3:60:e5:f3:5b:cf:eb:
81:69:7f:55:e8:fb:f8:b4:6b:70:d0:14:9e:15:6f:2f:b7:31:
fb:61:eb:97:c1:08:17:a3:33:e8:da:26:ae:5d:b1:6b:77:f8:
81:cb:74:8c:0f:7e:48:fd:57:c5:65:98:6d:34:e3:ee:cf:b4:
ea:10:ec:3a:a1:53:12:ae:0c:b1:02:e8:f8:3d:55:92:21:81:
a7:95:63:5f:e2:41:eb:ef:0b:ba:d1:ee:26:09:92:2b:35:af:
82:35:d4:4f:82:e6:34:7b:a1:9a:bb:7c:83:83:46:38:4f:30:
1d:b2:37:c9:12:80:08:15:51:72:69:61:bd:77:c1:ac:74:d6:
a5:59:f5:6f:1a:4f:42:3b:9e:c5:f0:5a:d3:d1:b2:6d:41:e4:
07:78:27:63:7d:fc:77:fe:b6:55:2a:22:94:32:33:66:90:22:
41:97:fd:c9:12:b4:47:4e:ca:d7:4a:ec:25:65:c5:b7:50:81:
db:a0:03:ef:8f:2c:ba:95:3b:c3:1e:7c:14:bf:1d:84:4e:f5:
7a:f4:69:7d:d7:45:15:4d:3c:de:7f:f8:e8:d7:55:64:40:2f:
7f:42:19:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:02:34 2026 by rpki-client