Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Miz-oHY3FV9qh_fkRs2OV-HhN6I.roa
File: Miz-oHY3FV9qh_fkRs2OV-HhN6I.roa (raw, json)
Hash identifier: nHM6HkQt9qpi2YQeKCgyIhS090FSEYtRzeXCCOXYqqg=
Subject key identifier: 32:2C:FE:A0:76:37:15:5F:6A:87:F7:E4:46:CD:8E:57:E1:E1:37:A2
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019F7EFCA586FA287F08F3E860CB61EAA74B
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Miz-oHY3FV9qh_fkRs2OV-HhN6I.roa
Signing time: Mon 20 Jul 2026 10:05:14 +0000
ROA not before: Mon 20 Jul 2026 10:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209836
IP address blocks: 194.225.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:fc:a5:86:fa:28:7f:08:f3:e8:60:cb:61:ea:a7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jul 20 10:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=322cfea07637155f6a87f7e446cd8e57e1e137a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:21:95:1f:b6:29:c0:89:ee:da:27:67:26:e7:
5e:80:4f:49:6b:64:0b:93:a5:70:78:70:5a:dc:8d:
0d:df:58:bf:de:dc:2f:46:bf:f0:3a:b9:a9:c2:6a:
79:db:05:a0:ca:7e:5e:41:0e:9d:ed:09:80:b7:2d:
38:f2:f5:7a:0e:6c:30:de:5b:13:6f:8e:9f:46:9f:
71:43:d9:1e:2d:8e:c3:b2:c8:2a:3a:96:b1:9b:b3:
86:2f:58:35:08:8a:fa:f3:23:22:08:b3:19:78:ff:
cb:1d:c8:56:c9:17:ed:13:2e:4f:a6:b7:5c:5c:60:
75:53:84:b1:74:19:96:db:a2:1d:e6:1c:4f:c4:e9:
91:91:99:65:5d:f4:cb:57:c7:d1:9b:dd:c3:ef:8a:
e0:9a:92:a0:26:21:44:c4:fa:b8:c0:63:2b:ac:05:
93:51:0c:ec:2f:18:b9:4c:9e:0f:59:ea:f8:73:22:
45:64:7f:97:92:e8:60:aa:d3:b7:dd:24:d9:4c:af:
bc:18:30:c1:be:f1:b8:2e:5b:3a:c9:a4:4b:61:27:
06:8d:e2:17:80:b4:bc:6e:ee:2b:6e:51:9b:07:1c:
72:3c:79:62:5a:5b:f4:30:c1:1e:d3:c1:71:58:8a:
5f:5d:c8:77:de:65:27:c5:4e:40:8f:f0:b1:94:95:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2C:FE:A0:76:37:15:5F:6A:87:F7:E4:46:CD:8E:57:E1:E1:37:A2
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Miz-oHY3FV9qh_fkRs2OV-HhN6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.146.0/23
Signature Algorithm: sha256WithRSAEncryption
41:ba:94:ae:16:f0:fd:ad:66:35:38:e7:74:6f:c4:3a:db:e8:
ea:44:1c:50:61:d1:4f:1a:86:21:81:56:66:b6:bd:21:ca:e2:
e2:c2:cc:6e:29:6d:51:e9:49:ee:19:ef:83:45:27:9d:2b:df:
e1:61:6a:11:ed:14:27:58:fa:42:42:9b:ed:6d:f7:12:00:cb:
51:9d:5c:cf:b3:68:53:e6:4c:af:73:a5:50:a7:40:e5:88:cb:
51:4b:d9:48:4c:ae:64:60:b1:f2:87:ef:ec:2a:d4:68:ba:dd:
fa:67:6f:1e:86:c7:42:50:6d:c8:cf:90:25:26:98:a0:85:41:
f9:08:68:70:e2:f7:48:f1:2c:5f:7d:c1:ae:d1:6a:5b:cc:e5:
9b:cc:b2:19:f2:6b:dd:ee:4b:3b:e5:f5:8c:41:9c:31:3a:84:
da:0c:1c:f2:92:3b:b2:5c:a4:39:aa:cc:29:6b:4c:36:41:ae:
02:a3:08:de:7e:a9:44:ff:75:52:a1:11:4c:48:58:2d:e5:44:
49:29:b6:98:ec:20:13:6e:b9:c7:0c:17:d2:0b:04:dd:62:29:
ae:5e:70:dc:08:72:8e:2f:eb:b7:35:c7:ea:5b:25:50:4c:7a:
f0:b9:5a:76:c7:40:36:d3:df:a0:10:e4:88:91:f5:d0:93:e4:
a3:f1:02:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:03:06 2026 by rpki-client