Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/mhn7brM6t-mSQ1rxrVEfwhcGrGE.roa
File: mhn7brM6t-mSQ1rxrVEfwhcGrGE.roa (raw, json)
Hash identifier: ZTw3J4y7h7NzBD9oruWOwkUWKJLWkMvF5dJCuygt9W8=
Subject key identifier: 9A:19:FB:6E:B3:3A:B7:E9:92:43:5A:F1:AD:51:1F:C2:17:06:AC:61
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 019F48ACFA9FD63DA890183AC154BA66EA8D
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/mhn7brM6t-mSQ1rxrVEfwhcGrGE.roa
Signing time: Thu 09 Jul 2026 20:58:43 +0000
ROA not before: Thu 09 Jul 2026 20:58:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200482
IP address blocks: 45.89.142.0/24 maxlen: 24
193.187.255.0/24 maxlen: 24
2a12:3e80::/40 maxlen: 48
2a12:3e80:401::/48 maxlen: 48
2a12:3e80:403::/48 maxlen: 48
2a12:3e80:404::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:ac:fa:9f:d6:3d:a8:90:18:3a:c1:54:ba:66:ea:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Jul 9 20:58:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a19fb6eb33ab7e992435af1ad511fc21706ac61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:19:57:5f:58:86:1e:0e:23:4a:68:e9:3d:
39:77:43:e7:d5:3a:25:d2:24:98:b3:16:6f:2d:c1:
30:44:b8:17:6f:89:bd:1f:3c:35:da:49:78:e1:a5:
5e:d8:47:ce:7b:96:40:10:85:aa:66:55:8d:88:1b:
a2:89:8b:9c:3b:a3:81:64:ea:be:bf:73:ab:d4:23:
c8:e9:79:40:05:12:e4:4a:20:b9:10:fe:4c:df:da:
28:60:3a:63:8d:57:ff:fd:04:ef:72:44:8d:fb:90:
51:3e:ad:86:59:a8:c0:e8:2d:86:a6:b9:e7:8c:42:
79:14:4d:27:a0:07:8d:d7:9e:1b:20:21:51:6e:3c:
02:a9:80:fe:5d:95:cd:9e:a2:3a:5f:7b:18:62:68:
23:a7:3c:f6:65:40:f8:86:b8:6f:72:6e:b5:92:05:
94:05:ff:aa:b3:b9:11:3e:8c:d3:bd:85:1e:0e:a6:
ab:0a:03:09:05:82:51:e2:7e:ae:59:9a:ea:cf:50:
96:e0:ee:5d:77:35:16:79:19:a2:ae:dd:86:c6:7a:
2d:88:8f:d7:fd:fb:54:11:f6:66:31:86:ed:d7:e8:
e4:0e:f7:aa:cd:24:24:9a:9d:ae:76:c9:12:65:1c:
63:1a:27:dc:12:7b:7d:0a:6a:0a:e5:e3:9d:19:0a:
d8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:19:FB:6E:B3:3A:B7:E9:92:43:5A:F1:AD:51:1F:C2:17:06:AC:61
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/mhn7brM6t-mSQ1rxrVEfwhcGrGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.142.0/24
193.187.255.0/24
IPv6:
2a12:3e80::/40
2a12:3e80:401::/48
2a12:3e80:403::-2a12:3e80:404:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
04:51:63:f3:1e:e2:50:3f:3b:1e:2a:4a:1b:0e:f4:9c:02:12:
de:77:a7:79:7f:a0:df:01:6c:0a:4b:db:10:da:a2:df:be:db:
c9:e6:0d:c5:75:ba:3a:1b:85:08:7a:52:5d:dd:fb:13:e2:a2:
03:6a:a3:e2:ff:d1:e9:ce:54:a0:a7:5d:0b:2b:87:96:f7:1f:
f9:71:9a:0c:9e:b0:c9:a1:7a:25:1c:65:c0:a2:09:5d:67:bf:
18:08:33:4c:52:2c:8e:e7:01:b2:2b:4f:0f:6c:e3:94:7d:e5:
69:09:ae:9d:1d:d5:5a:0f:d6:bc:52:da:b3:bf:ca:a2:b8:15:
44:40:c8:60:c3:42:2d:7a:dd:b9:5a:9a:44:7e:1a:f6:c3:5a:
ac:cb:ac:85:92:3d:19:90:4f:f1:73:fe:b6:e9:dc:ea:66:cd:
e7:dc:cd:b2:ae:96:2d:51:46:d3:9b:dd:a0:fd:57:8c:ca:8d:
88:04:a3:23:ee:fc:6c:a3:c6:f6:18:a8:d4:b2:89:cd:81:45:
b1:dc:a6:ca:2c:35:56:6b:87:d9:d2:ff:fb:77:b1:f2:1f:fe:
f7:ea:8a:1b:5a:98:52:d2:25:97:5e:6d:ae:3b:bc:c2:1f:7f:
b9:9b:1b:ce:a3:32:23:fa:49:13:4c:9b:01:e8:84:1e:77:7b:
4d:31:80:eb
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZ9IrPqf1j2okBg6wVS6ZuqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YWY0MzM5NzRkZjM3M2I3MGFiZDc2YjEzZTFjNzBjNzc1
ZjU1NGIwHhcNMjYwNzA5MjA1ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTE5ZmI2ZWIzM2FiN2U5OTI0MzVhZjFhZDUxMWZjMjE3MDZhYzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXsZV19Yhh4OI0po6T05d0Pn1Tol
0iSYsxZvLcEwRLgXb4m9Hzw12kl44aVe2EfOe5ZAEIWqZlWNiBuiiYucO6OBZOq+
v3Or1CPI6XlABRLkSiC5EP5M39ooYDpjjVf//QTvckSN+5BRPq2GWajA6C2Gprnn
jEJ5FE0noAeN154bICFRbjwCqYD+XZXNnqI6X3sYYmgjpzz2ZUD4hrhvcm61kgWU
Bf+qs7kRPozTvYUeDqarCgMJBYJR4n6uWZrqz1CW4O5ddzUWeRmirt2GxnotiI/X
/ftUEfZmMYbt1+jkDveqzSQkmp2udskSZRxjGifcEnt9CmoK5eOdGQrY1wIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFJoZ+26zOrfpkkNa8a1RH8IXBqxhMB8GA1UdIwQY
MBaAFPavQzl03zc7cKvXaxPhxwx3X1VLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2It
YTI2YmM2NTNiMDZiLzEvbWhuN2JyTTZ0LW1TUTFyeHJWRWZ3aGNHckdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2ItYTI2YmM2NTNiMDZi
LzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTASBAIAATAMAwQALVmOAwQA
wbv/MCsEAgACMCUDBgAqEj6AAAMHACoSPoAEATASAwcAKhI+gAQDAwcAKhI+gAQE
MA0GCSqGSIb3DQEBCwUAA4IBAQAEUWPzHuJQPzseKkobDvScAhLed6d5f6DfAWwK
S9sQ2qLfvtvJ5g3Fdbo6G4UIelJd3fsT4qIDaqPi/9HpzlSgp10LK4eW9x/5cZoM
nrDJoXolHGXAogldZ78YCDNMUiyO5wGyK08PbOOUfeVpCa6dHdVaD9a8Utqzv8qi
uBVEQMhgw0Itet25WppEfhr2w1qsy6yFkj0ZkE/xc/626dzqZs3n3M2yrpYtUUbT
m92g/VeMyo2IBKMj7vxso8b2GKjUsonNgUWx3KbKLDVWa4fZ0v/7d7HyH/736oob
WphS0iWXXm2uO7zCH3+5mxvOozIj+kkTTJsB6IQed3tNMYDr
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:19:32 2026 by rpki-client