Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mMG6ncNARV4VLBd8olOJj6_Hi18.roa
File: mMG6ncNARV4VLBd8olOJj6_Hi18.roa (raw, json)
Hash identifier: csxTzAreHUiOryu52S4pdlZAGOmlZlY4ktj16LiJgRg=
Subject key identifier: 98:C1:BA:9D:C3:40:45:5E:15:2C:17:7C:A2:53:89:8F:AF:C7:8B:5F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DF762F40E2EB91E047B9EB315C55F75A3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mMG6ncNARV4VLBd8olOJj6_Hi18.roa
Signing time: Tue 05 May 2026 09:05:50 +0000
ROA not before: Tue 05 May 2026 09:05:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154408
IP address blocks: 213.210.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:62:f4:0e:2e:b9:1e:04:7b:9e:b3:15:c5:5f:75:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 5 09:05:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98c1ba9dc340455e152c177ca253898fafc78b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:ce:0c:03:51:04:e7:72:f0:df:42:3c:30:
ce:1d:52:ff:a5:ee:d8:93:44:26:86:c1:7d:c3:3e:
59:e5:d6:ea:5d:ff:bc:e8:e9:62:2e:e5:8e:56:de:
8d:b9:75:9e:5c:16:05:c1:6e:36:ab:11:21:b4:9c:
86:ca:5b:d6:51:d2:ea:f8:b4:20:0a:6f:05:f6:59:
a9:95:0d:8d:9e:18:b3:1d:cb:91:ab:0e:30:31:20:
86:39:1b:31:11:1c:89:6e:7a:82:76:01:37:7f:cb:
ca:b5:25:14:d1:ab:ae:fe:19:bb:f9:7e:a3:d2:5d:
24:f8:e2:63:51:99:25:d1:7d:b3:1c:7a:6d:30:b3:
2b:cf:c3:5e:f0:d0:9f:46:87:f4:79:30:a9:38:a7:
42:48:2e:42:66:3a:6b:a3:76:10:0a:50:11:54:92:
44:48:10:b8:8f:af:9c:49:87:1c:95:37:eb:ad:cd:
22:d1:72:76:1c:9a:97:63:e1:b1:5a:ae:78:6f:d0:
a8:13:bf:48:42:33:87:03:f4:04:0b:8f:b2:9c:8c:
70:8a:84:be:67:61:b2:d8:30:91:2d:20:b1:39:02:
bd:73:24:de:36:13:2f:65:13:5a:bc:40:e1:c0:ae:
45:0b:e5:4e:9d:6b:bc:51:12:e2:c7:c9:d3:79:e4:
11:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C1:BA:9D:C3:40:45:5E:15:2C:17:7C:A2:53:89:8F:AF:C7:8B:5F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mMG6ncNARV4VLBd8olOJj6_Hi18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:38:5a:48:e9:a4:e1:d4:a0:03:b6:99:05:e0:d4:f0:15:40:
d8:94:49:24:e1:13:93:d3:b6:81:07:03:83:a6:40:e1:eb:82:
80:3f:3d:d8:ed:ad:3b:20:91:1d:c9:5f:42:c0:7c:c5:69:09:
a3:1d:0e:d8:53:42:84:2e:e3:e3:54:b0:6d:a8:f8:ea:94:e3:
a4:47:82:1d:90:51:3a:1d:13:4b:c9:e8:8f:24:f5:1e:ab:85:
a7:84:a5:ea:55:b2:a0:eb:0a:00:13:50:fc:fe:7f:11:bc:8d:
eb:ce:37:70:74:5d:2c:8a:04:d4:b2:90:9c:00:82:ff:0a:55:
fc:fc:c6:51:5d:cd:3b:67:0c:79:cf:44:8f:fd:5f:22:64:87:
f6:29:fb:ea:f9:92:51:57:76:81:7b:5a:32:9a:28:f1:2c:51:
c4:6b:6a:5c:82:58:35:10:bd:5a:8d:bc:57:b3:4b:43:04:49:
83:ad:cc:aa:5d:80:1a:5d:d7:e6:de:05:b5:3b:b1:f2:a2:8d:
4d:59:aa:1f:7b:3f:de:fd:0f:ad:ed:4d:41:9a:c8:bb:4d:bb:
93:34:4e:8e:06:20:ed:1e:2e:2b:0a:72:b9:20:a2:28:94:2a:
c1:fd:e8:1c:8b:44:da:ad:b5:d7:ab:12:53:1f:63:d5:4e:42:
52:8f:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:58 2026 by rpki-client