Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/mFb4ImZ4JM6OoNTxHAkLWhtfrLY.roa
File: mFb4ImZ4JM6OoNTxHAkLWhtfrLY.roa (raw, json)
Hash identifier: qBhRAaHkCsZlWo9HIK89kWh5m3QpwUNyihNsADOIr5Y=
Subject key identifier: 98:56:F8:22:66:78:24:CE:8E:A0:D4:F1:1C:09:0B:5A:1B:5F:AC:B6
Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial: 019CCF80320C42943A22BACD017D59ABA9CD
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/mFb4ImZ4JM6OoNTxHAkLWhtfrLY.roa
Signing time: Sun 08 Mar 2026 22:10:10 +0000
ROA not before: Sun 08 Mar 2026 22:10:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51198
IP address blocks: 45.132.8.0/24 maxlen: 24
45.132.9.0/24 maxlen: 24
45.132.10.0/24 maxlen: 24
45.132.11.0/24 maxlen: 24
185.179.179.0/24 maxlen: 24
2a0e:6540::/29 maxlen: 29
2a0e:6542::/32 maxlen: 32
2a13:7d00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cf:80:32:0c:42:94:3a:22:ba:cd:01:7d:59:ab:a9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
Validity
Not Before: Mar 8 22:10:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9856f822667824ce8ea0d4f11c090b5a1b5facb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4e:a1:25:40:3e:ee:94:07:41:29:91:fa:41:
8c:4b:a7:7a:ce:5a:42:50:98:b7:72:4b:24:92:4a:
32:13:00:aa:85:8f:db:7f:7c:a0:71:e0:e8:8e:7d:
a0:5a:09:53:90:da:3d:7e:88:7a:d8:f1:06:cc:66:
81:1b:b9:45:d1:59:db:18:f8:cf:9f:38:bd:bb:e0:
c4:d4:48:0f:ee:b4:60:ef:cc:de:1c:9d:33:6f:75:
08:26:b9:ce:d0:7e:51:90:65:a5:58:4f:fe:0e:a9:
16:1d:d7:01:43:b0:77:a7:80:ac:86:8f:d7:91:c7:
fd:74:f6:b2:26:25:f3:50:c0:bb:4f:1f:46:20:98:
4e:ab:b8:c9:6e:d3:24:b5:1e:82:a3:0f:9d:fc:5e:
bd:ff:f8:dc:02:5e:83:fe:8a:9c:b0:0f:55:ef:c5:
26:dc:db:5f:dd:d5:7e:6b:6e:c3:1d:25:c1:87:b9:
3c:72:00:08:87:23:0b:a4:0f:9c:fe:c0:ae:ee:a7:
a6:48:39:d3:3a:1a:b2:7c:06:86:25:1a:72:96:2b:
f4:bf:d3:a5:11:d7:24:3b:a2:f8:43:8c:88:d9:bb:
72:74:a0:7d:56:ee:9a:73:2e:ec:cc:c2:5c:2b:68:
20:0c:da:85:6d:55:4d:4a:dc:84:dd:8b:c9:ef:36:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:56:F8:22:66:78:24:CE:8E:A0:D4:F1:1C:09:0B:5A:1B:5F:AC:B6
X509v3 Authority Key Identifier:
keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/mFb4ImZ4JM6OoNTxHAkLWhtfrLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.8.0/22
185.179.179.0/24
IPv6:
2a0e:6540::/29
2a13:7d00::/29
Signature Algorithm: sha256WithRSAEncryption
7f:5a:cf:a5:4b:b8:31:63:85:d9:f1:4c:00:1d:28:bb:77:5b:
85:06:dd:74:a6:b8:e5:39:8c:bf:8b:08:49:08:f5:50:3c:f6:
28:f1:6c:48:9b:79:0b:65:aa:72:91:a7:0a:8e:d7:04:ae:d0:
d1:15:36:7a:32:99:95:3d:8c:c5:86:c0:a5:6f:23:3e:e9:46:
0f:7f:0b:92:a0:5c:7f:a4:68:4f:cb:62:ad:e4:8d:4e:8c:28:
92:0b:ec:80:00:53:d4:9a:d2:37:0e:05:6a:df:1f:9a:dd:b2:
7b:3c:3a:b2:4c:57:ee:09:f4:89:fc:8c:15:af:a0:22:bb:62:
b8:db:28:b7:c2:33:be:91:d1:f7:93:80:3a:c9:11:8b:aa:ce:
cd:ed:35:50:36:e1:85:53:e7:b3:39:4c:3a:5a:28:e7:82:04:
22:76:a9:1e:ea:55:04:87:5f:4d:dc:45:37:7a:a8:92:30:a9:
12:32:84:72:5b:ad:ca:de:46:c7:76:76:1e:81:01:57:ca:1c:
65:e0:e0:dc:3b:7f:99:30:72:7f:16:21:f4:b3:d5:d0:8c:da:
c2:63:b7:04:42:e1:03:da:07:67:48:6d:68:ab:b9:1f:0b:c3:
bc:f9:fa:42:c2:d0:cc:44:dd:7f:bf:6b:9b:67:74:31:c2:df:
ee:a3:8e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:29:35 2026 by rpki-client