Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-MjPGa6a53IbnyZwW_IHAr61-zc.roa
File: 1-MjPGa6a53IbnyZwW_IHAr61-zc.roa (raw, json)
Hash identifier: kZzBRFBi/2P9qSc5Z6+RyZ3kz7bsXv3WNDSRuvOzN+g=
Subject key identifier: F8:C8:CF:19:AE:9A:E7:72:1B:9F:26:70:5B:F2:07:02:BE:B5:FB:37
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019E0EE2AD126B4FEA718329CD92E5FF725F
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-MjPGa6a53IbnyZwW_IHAr61-zc.roa
Signing time: Sat 09 May 2026 22:36:36 +0000
ROA not before: Sat 09 May 2026 22:36:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42910
IP address blocks: 185.86.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0e:e2:ad:12:6b:4f:ea:71:83:29:cd:92:e5:ff:72:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: May 9 22:36:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8c8cf19ae9ae7721b9f26705bf20702beb5fb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:72:33:7f:28:54:54:da:ae:ee:6b:37:6d:56:
5b:ca:f6:f2:1f:14:12:33:33:22:f6:7e:74:27:ab:
25:5d:34:b7:9d:9f:3b:85:75:0c:c9:fc:bc:e5:01:
08:e3:d6:a8:77:53:f1:2d:88:70:86:51:73:be:a8:
ca:b6:02:51:45:68:5a:70:24:04:d8:07:cc:5a:eb:
ed:f6:66:87:7a:84:2c:2c:e9:de:4e:6e:c8:96:d9:
9f:11:c6:36:66:7f:ca:e2:92:c8:69:dc:ac:c1:a2:
35:e6:4e:c8:1c:2a:71:fa:2c:dd:81:44:26:d7:4a:
6b:10:63:ea:af:8a:12:ee:61:e9:af:d7:03:f5:52:
e4:93:a6:27:ef:4b:57:54:e9:78:73:0e:8e:c1:37:
1b:b1:a7:52:7c:c6:9c:51:38:0e:bd:a9:6f:7e:eb:
1c:39:3f:a2:23:67:d1:05:8c:d6:03:9d:af:d9:78:
67:b5:a8:5b:8d:26:77:8c:0a:37:ee:6d:51:88:e4:
7c:04:52:e2:1f:3a:d2:01:83:98:5b:1d:ff:da:2b:
54:dc:12:ce:14:74:5c:03:7c:23:ba:7f:f1:2b:84:
84:12:76:d6:63:df:4b:d5:69:51:2a:17:2b:8b:49:
89:57:e9:ce:6d:11:98:69:dc:76:59:30:41:0c:06:
19:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C8:CF:19:AE:9A:E7:72:1B:9F:26:70:5B:F2:07:02:BE:B5:FB:37
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-MjPGa6a53IbnyZwW_IHAr61-zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.153.0/24
Signature Algorithm: sha256WithRSAEncryption
21:16:88:74:14:82:0f:59:69:5c:41:91:b9:88:54:ab:69:89:
24:81:11:41:4f:ce:b6:36:a9:5a:50:4f:dd:cc:41:c5:4a:8b:
58:e7:82:7d:19:0b:00:de:70:cb:5a:00:d4:c1:08:4b:6e:ba:
47:12:df:e5:e7:d9:40:ae:a3:5f:94:6c:0c:c4:4f:83:2c:34:
97:f8:46:eb:72:df:0e:7d:d8:74:09:83:db:db:fa:16:aa:30:
79:33:be:63:58:00:d3:05:be:98:e4:80:5c:34:36:a9:c2:d7:
80:04:a1:50:8a:fa:2d:96:4c:51:55:db:20:b3:94:2e:59:88:
e3:ba:c7:c7:af:00:ea:67:bb:31:0e:0b:d2:35:56:6f:b5:da:
e3:26:8d:66:8c:23:1b:24:48:8f:17:6e:c7:3b:bd:cd:0a:5e:
66:11:24:95:d6:78:33:2b:86:04:f8:ff:eb:3b:e5:c1:0b:49:
a1:5f:0e:54:95:83:e0:f4:92:02:a5:61:a8:ea:10:61:72:e4:
29:f6:62:79:9e:55:b6:f5:e7:69:81:c7:8d:5f:26:9e:22:6d:
f8:fe:fc:5a:cb:f7:85:74:5d:87:c2:8f:a9:59:9c:f0:bc:b6:
4e:61:c3:35:14:dc:24:9f:1d:d8:5b:08:c4:6b:dc:bb:d3:77:
97:ee:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:29 2026 by rpki-client