Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mKSahxToUzDpMK2Vb6BU2SHEMK0.roa
File: mKSahxToUzDpMK2Vb6BU2SHEMK0.roa (raw, json)
Hash identifier: 3RRp2ZAu1h0TORk1UaVdQxhxj7Mz8AuI3QajRyqAluE=
Subject key identifier: 98:A4:9A:87:14:E8:53:30:E9:30:AD:95:6F:A0:54:D9:21:C4:30:AD
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0CB91D7FB114E85BE375DAEAD5DF3FD19
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mKSahxToUzDpMK2Vb6BU2SHEMK0.roa
Signing time: Wed 23 Sep 2026 00:02:07 +0000
ROA not before: Wed 23 Sep 2026 00:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 87.83.80.0/22 maxlen: 24
212.74.16.0/22 maxlen: 24
212.212.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:91:d7:fb:11:4e:85:be:37:5d:ae:ad:5d:f3:fd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 23 00:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98a49a8714e85330e930ad956fa054d921c430ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:8d:ba:02:1d:4c:99:34:bb:b7:d9:6d:04:
df:d0:75:69:b8:75:d0:31:b3:6f:3f:71:fa:de:a1:
11:8a:f8:61:d0:65:29:26:e5:53:a8:c5:0f:f2:df:
d5:38:4f:b8:ce:b0:5f:c0:5f:68:c9:62:14:9f:86:
11:80:eb:05:f2:ed:96:de:a5:15:14:50:08:28:f1:
7b:07:97:47:a3:53:f9:5e:22:01:19:9e:31:69:e7:
05:b4:99:ae:9e:21:c3:e1:50:54:76:2e:0c:06:09:
b0:c5:5f:12:49:e2:15:99:5b:9e:37:24:7f:c5:fa:
44:78:25:ff:98:19:12:a7:1c:d3:b7:46:3a:98:29:
ed:c5:2a:5c:cf:fe:bb:7c:26:90:47:f0:b1:0d:55:
73:2e:21:91:d3:33:3f:99:b3:60:42:28:88:8a:b8:
37:f1:b2:69:4d:ff:d3:fa:8f:5e:59:2c:da:e7:12:
00:db:b1:aa:fc:07:29:b6:15:0f:94:db:54:2a:3f:
4f:64:2f:6b:17:d8:5d:8d:b4:77:2a:d5:9e:29:8d:
31:9e:4d:db:6c:d9:99:5a:a0:c4:4d:39:00:28:dd:
b2:1d:4b:6d:38:49:fd:6b:65:2d:c2:f7:2c:70:e4:
57:f2:ce:bc:d4:5e:4b:8a:eb:f5:3c:0a:53:ed:f0:
d8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A4:9A:87:14:E8:53:30:E9:30:AD:95:6F:A0:54:D9:21:C4:30:AD
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mKSahxToUzDpMK2Vb6BU2SHEMK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.80.0/22
212.74.16.0/22
212.212.28.0/22
Signature Algorithm: sha256WithRSAEncryption
45:c8:d5:7a:56:c0:c1:18:3b:3d:e5:8f:01:ba:b4:4f:ed:c9:
06:70:ec:4a:eb:8e:51:f3:1f:5d:a2:ca:e1:93:d1:e7:9b:b8:
b2:4b:68:06:70:7f:c2:b5:b2:48:29:34:50:5b:79:bf:29:6e:
37:cc:b8:ac:f1:57:e4:48:3e:ed:95:f3:9d:c3:58:4d:8e:d8:
e3:2c:7a:77:0d:4c:ff:29:44:94:d6:31:5b:b6:bc:59:88:65:
1a:cb:7d:6c:0b:fe:d9:8a:89:4a:11:cf:6f:6d:9e:1c:aa:bd:
21:59:0e:34:0c:89:da:9a:41:4d:2d:c9:0e:32:ea:ac:a9:7f:
6e:08:79:23:01:17:2a:5d:fe:9a:d5:3b:c8:e8:e6:5d:9e:d6:
6a:2e:67:8f:b0:78:a6:24:dc:44:99:6b:87:c3:82:ed:c3:c4:
fc:97:0b:0e:dd:ce:b5:6a:15:91:d3:99:f2:68:21:53:36:71:
5b:26:d4:e0:53:ad:a2:65:7d:be:40:7c:0f:56:d9:e9:2a:7b:
cc:82:05:e9:01:b9:67:dd:f9:83:61:f3:76:43:08:01:18:dd:
ec:cb:71:91:6f:cb:e8:4b:16:fb:9f:41:72:58:e1:0a:26:61:
d0:c8:41:5a:c9:0f:18:46:1e:b5:61:be:ad:14:08:72:36:b0:
7d:9c:cc:98
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDLkdf7EU6Fvjddrq1d8/0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTIzMDAwMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGE0OWE4NzE0ZTg1MzMwZTkzMGFkOTU2ZmEwNTRkOTIxYzQzMGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7CNugIdTJk0u7fZbQTf0HVpuHXQ
MbNvP3H63qERivhh0GUpJuVTqMUP8t/VOE+4zrBfwF9oyWIUn4YRgOsF8u2W3qUV
FFAIKPF7B5dHo1P5XiIBGZ4xaecFtJmuniHD4VBUdi4MBgmwxV8SSeIVmVueNyR/
xfpEeCX/mBkSpxzTt0Y6mCntxSpcz/67fCaQR/CxDVVzLiGR0zM/mbNgQiiIirg3
8bJpTf/T+o9eWSza5xIA27Gq/AcpthUPlNtUKj9PZC9rF9hdjbR3KtWeKY0xnk3b
bNmZWqDETTkAKN2yHUttOEn9a2UtwvcscORX8s681F5Liuv1PApT7fDYawIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJikmocU6FMw6TCtlW+gVNkhxDCtMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvbUtTYWh4VG9VekRwTUsyVmI2QlUyU0hFTUswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCV1NQAwQC
1EoQAwQC1NQcMA0GCSqGSIb3DQEBCwUAA4IBAQBFyNV6VsDBGDs95Y8BurRP7ckG
cOxK645R8x9dosrhk9Hnm7iyS2gGcH/CtbJIKTRQW3m/KW43zLis8VfkSD7tlfOd
w1hNjtjjLHp3DUz/KUSU1jFbtrxZiGUay31sC/7ZiolKEc9vbZ4cqr0hWQ40DIna
mkFNLckOMuqsqX9uCHkjARcqXf6a1TvI6OZdntZqLmePsHimJNxEmWuHw4Ltw8T8
lwsO3c61ahWR05nyaCFTNnFbJtTgU62iZX2+QHwPVtnpKnvMggXpAbln3fmDYfN2
QwgBGN3sy3GRb8voSxb7n0FyWOEKJmHQyEFayQ8YRh61Yb6tFAhyNrB9nMyY
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:33:55 2026 by rpki-client