Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/mwnslxanlyapMrSdoQ959onOJDo.roa
File: mwnslxanlyapMrSdoQ959onOJDo.roa (raw, json)
Hash identifier: 5V4ABzOc/BOKT+0CLM0NPcH5YpVerld75dduR0xdwO8=
Subject key identifier: 9B:09:EC:97:16:A7:97:26:A9:32:B4:9D:A1:0F:79:F6:89:CE:24:3A
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 01A06DDBDCEB6663AE18EE6EA5B097DDA2FD
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/mwnslxanlyapMrSdoQ959onOJDo.roa
Signing time: Fri 04 Sep 2026 19:18:40 +0000
ROA not before: Fri 04 Sep 2026 19:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 212.102.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:db:dc:eb:66:63:ae:18:ee:6e:a5:b0:97:dd:a2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Sep 4 19:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b09ec9716a79726a932b49da10f79f689ce243a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:58:22:f8:04:de:62:06:56:f3:2e:6d:a0:
e4:36:95:ef:e0:7b:2d:4c:e8:ec:3d:e6:59:74:99:
c5:54:ba:1f:6c:10:ac:63:ee:68:11:da:e2:25:7b:
09:dc:be:6a:6e:8f:86:c7:54:cd:70:73:95:68:8a:
a1:b1:96:69:42:52:5c:51:95:7c:ee:8d:72:ae:fa:
8d:3a:72:d2:49:6d:da:ac:ab:da:d1:d5:fa:ab:82:
bf:ca:4a:2c:27:15:38:00:8b:d9:83:1b:04:ef:11:
31:09:b7:e2:e0:61:86:fe:3d:60:c5:50:db:43:b9:
c4:f6:37:f1:7d:7f:ea:28:df:67:bb:c8:6d:74:d2:
ee:0c:06:88:42:e2:15:9b:dd:5a:61:be:56:10:de:
a6:b3:fa:fb:a3:96:c1:da:07:0d:5f:64:de:f0:74:
3b:89:24:f4:0d:b4:b6:28:b9:2d:90:a7:e1:6a:18:
d2:04:97:9e:67:8a:17:48:57:a0:74:9f:01:a6:bf:
82:15:40:93:5c:9e:16:5b:de:dc:0b:62:17:5a:e5:
72:ba:ee:5c:be:b3:22:c9:10:bc:b2:3b:4c:2b:6e:
1d:14:06:e9:3e:95:8f:84:a3:d8:fb:b0:c9:31:2a:
b4:82:93:3a:92:8a:41:e7:78:d0:70:d5:b7:f6:28:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:09:EC:97:16:A7:97:26:A9:32:B4:9D:A1:0F:79:F6:89:CE:24:3A
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/mwnslxanlyapMrSdoQ959onOJDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.251.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a2:28:0a:a0:5f:d3:21:45:b7:ad:92:73:a1:a4:38:b5:3f:
45:8a:a0:b5:c7:b2:03:be:1f:a7:21:91:5a:76:c6:54:fe:c5:
2c:22:bc:43:e6:4b:19:07:c0:d6:14:42:68:29:c8:01:e3:a6:
ae:7c:67:60:02:89:07:e3:e6:9c:e8:fc:7e:06:82:fc:92:7d:
42:ac:6b:bb:74:09:89:7d:0f:ea:4c:66:bb:50:0f:41:20:db:
e6:35:7a:cd:fc:ad:e3:f4:2f:99:0b:3b:c7:5b:5b:31:b2:80:
ef:e0:97:8c:5e:8c:d9:cc:ac:69:63:0e:d8:07:a0:59:a4:39:
90:22:53:b2:ce:46:d6:10:40:4e:d7:62:c4:e9:6a:10:2f:0c:
de:fd:63:4c:04:3b:a2:98:93:94:71:6a:35:33:76:c0:22:1c:
57:81:53:a3:17:db:ec:8e:1d:1b:53:8a:1c:46:9b:6a:8f:c5:
a1:91:03:c8:c2:42:98:dc:fb:d6:ae:e4:46:10:8b:d9:5a:f3:
9b:ba:8b:57:ac:ed:86:78:32:3a:02:bc:1b:99:ff:ba:f9:44:
63:0d:87:88:9c:6f:2a:db:9f:c2:e2:90:98:d8:d3:f3:ef:61:
a5:16:c6:64:be:44:d0:e0:3e:af:6e:09:5b:24:17:c9:41:bf:
5b:95:4b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:34:31 2026 by rpki-client