Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/_g-mbRccilTY3nTUOwN_eMWOWNM.roa
File: _g-mbRccilTY3nTUOwN_eMWOWNM.roa (raw, json)
Hash identifier: PFOjrpvcs36xAtEQUCcZ7UtM4lx/TlcWr0/AHB/QrO8=
Subject key identifier: FE:0F:A6:6D:17:1C:8A:54:D8:DE:74:D4:3B:03:7F:78:C5:8E:58:D3
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 01A1B1052C0AF238AC1DDF5D06DCA6E20394
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/_g-mbRccilTY3nTUOwN_eMWOWNM.roa
Signing time: Fri 06 Nov 2026 13:21:08 +0000
ROA not before: Fri 06 Nov 2026 13:21:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218721
IP address blocks: 141.0.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:05:2c:0a:f2:38:ac:1d:df:5d:06:dc:a6:e2:03:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Nov 6 13:21:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe0fa66d171c8a54d8de74d43b037f78c58e58d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:1f:8a:db:80:6d:a6:7d:43:1c:37:a5:b2:
b2:ff:df:4b:a3:02:84:35:d2:a5:a6:ff:19:b8:f0:
92:65:a3:1c:ed:5a:4e:a4:c8:86:68:fe:9f:f1:27:
4c:f6:72:80:33:72:e5:a5:b6:c5:e0:fb:33:2d:5e:
cf:b1:7c:2d:a7:84:54:fc:02:e9:cb:3d:23:73:32:
49:aa:80:cb:05:e5:80:fa:6c:83:99:49:38:f2:22:
d7:70:5a:68:66:fc:13:ad:68:69:49:52:1f:82:3b:
8d:50:1d:eb:5d:0d:e3:74:6b:f9:eb:f1:14:a6:f2:
9c:56:7d:eb:60:98:39:ea:b4:b5:da:a8:33:c8:73:
81:19:87:aa:4b:77:9d:85:4f:00:3f:b3:9e:a4:e5:
5a:77:4a:0b:16:24:2c:f8:67:a7:0e:f0:3c:6f:3a:
52:c4:d7:3a:68:3a:65:e8:ac:55:9d:fc:9f:fb:75:
c3:ea:75:2d:da:95:0e:0e:4b:fb:51:20:2a:13:37:
1b:9f:06:bb:ae:23:e2:cf:fd:aa:8e:62:c7:ff:80:
3e:d0:f4:8d:23:67:9c:36:20:57:89:97:ab:23:91:
af:93:f6:7f:63:26:f0:33:0e:d7:66:ca:df:90:30:
51:29:cf:43:6e:bf:ef:83:1a:a0:5f:3b:86:3d:65:
1e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0F:A6:6D:17:1C:8A:54:D8:DE:74:D4:3B:03:7F:78:C5:8E:58:D3
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/_g-mbRccilTY3nTUOwN_eMWOWNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ef:05:e7:51:83:c4:fe:0e:fe:a8:56:a8:01:ef:c4:c1:e6:
6b:93:f7:a3:08:96:0c:82:ef:7c:98:7b:43:e1:65:77:b3:fd:
42:e2:7a:2e:73:0c:74:63:83:e5:99:37:a3:4f:47:d2:7b:93:
89:f2:cb:58:bf:04:cc:01:5d:2c:39:a8:b0:81:f3:0d:54:e3:
65:73:bd:87:4e:8a:6c:cc:c6:51:5e:fd:3f:ae:3e:01:03:fd:
55:cb:5a:1c:de:95:2e:57:04:2c:e5:d4:ff:ff:b3:bb:3c:dd:
69:1e:c1:97:8d:d3:1e:a1:8b:60:4d:f7:7a:97:05:18:91:6d:
aa:3f:a3:9b:5d:ae:40:e0:9a:ab:66:a8:0e:bd:49:98:95:de:
19:24:f7:e0:6d:c4:e8:aa:e6:fb:8e:5a:0e:e3:36:ec:5b:40:
e6:f9:ec:e2:d1:10:d7:63:19:8d:4f:c9:34:57:3a:4e:18:6c:
63:de:f5:5d:a7:0e:d5:7c:4c:ca:05:58:07:0d:7b:9d:67:dc:
fd:4e:20:ec:3d:d0:74:9b:b0:87:a4:8f:85:b2:76:c0:91:70:
21:54:76:d0:aa:27:0e:c9:4e:f4:fc:97:5b:33:a2:fd:17:53:
99:b0:14:f7:b3:65:a0:6d:3c:42:00:91:05:09:70:4f:5f:4e:
7a:34:28:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:30:53 2026 by rpki-client