Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/mC9PlY-I_Iq2Rd9WtQsbARZOLZY.roa
File: mC9PlY-I_Iq2Rd9WtQsbARZOLZY.roa (raw, json)
Hash identifier: 9v7Y8PkVFmHD6mDpJycH6qfgI2cIsbWqEglvHtvCITA=
Subject key identifier: 98:2F:4F:95:8F:88:FC:8A:B6:45:DF:56:B5:0B:1B:01:16:4E:2D:96
Certificate issuer: /CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Certificate serial: 019F236834BA037559FDC18C67750749FD50
Authority key identifier: 5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/mC9PlY-I_Iq2Rd9WtQsbARZOLZY.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210135
IP address blocks: 185.221.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:34:ba:03:75:59:fd:c1:8c:67:75:07:49:fd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=982f4f958f88fc8ab645df56b50b1b01164e2d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:e2:57:89:d0:86:27:20:2b:74:2f:31:d4:
bc:15:31:e4:3f:d2:8e:60:cf:83:74:86:ce:10:6d:
99:28:57:f4:9c:ca:2f:c2:61:98:65:dd:cf:96:af:
33:bc:91:32:2f:c8:ee:a6:dd:5b:bd:cb:eb:7f:53:
5f:61:8b:34:83:3e:bd:48:5f:82:f1:36:10:d0:cc:
82:71:30:cf:37:1e:df:3a:ff:ee:ee:fb:05:5f:f0:
47:7b:41:61:6f:dc:b0:32:52:bc:a4:70:bf:6d:88:
81:92:b0:c5:b1:93:0c:ee:91:1c:f1:7c:6f:af:4a:
7f:da:75:90:b9:68:10:75:17:3a:d2:6a:a9:39:af:
f1:18:32:70:8c:f2:84:72:79:80:f5:8e:d0:9c:7a:
be:9a:f1:d1:89:5e:f7:b5:c4:d7:94:43:43:18:97:
02:7f:05:63:c2:27:1e:38:77:ef:4d:45:33:b2:b0:
2a:9d:26:2f:79:c4:88:be:35:2a:58:76:36:34:83:
33:bd:1f:7b:50:a5:d2:bb:0c:bb:e0:07:a6:bc:bb:
cb:72:52:f0:4f:c9:ed:bb:a7:6c:21:ed:b3:10:6f:
95:05:83:8a:46:4c:d5:ed:90:7f:f4:e7:58:39:54:
06:10:9f:f9:75:89:57:86:92:e7:00:6e:03:8a:bb:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2F:4F:95:8F:88:FC:8A:B6:45:DF:56:B5:0B:1B:01:16:4E:2D:96
X509v3 Authority Key Identifier:
keyid:5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/mC9PlY-I_Iq2Rd9WtQsbARZOLZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.44.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:11:3e:07:15:78:89:3a:0f:1d:8b:1e:e5:ef:24:13:e7:60:
a6:d6:c3:58:2f:ff:e0:ab:70:53:06:1e:f5:dc:93:b1:d8:e3:
70:e0:c7:1b:c9:38:50:ca:3f:29:62:03:75:c0:90:19:91:72:
a4:58:28:5b:88:83:72:17:c2:cc:00:64:49:e3:bd:8f:9e:b6:
cb:ed:ec:62:05:c1:d4:1c:ee:ce:fb:fc:50:e5:16:bd:c0:9f:
52:f8:97:47:f4:e4:9e:8e:f0:fb:55:d1:0e:3f:0d:df:ce:f0:
bb:d2:7a:1e:fd:88:e0:98:4b:75:79:2a:f1:07:50:54:df:0e:
e5:4c:2b:7b:3e:20:f9:63:c6:ef:1e:cb:da:c6:b4:be:c7:ec:
ef:b4:15:f7:63:e2:00:de:b5:c9:f0:58:6f:7f:47:e2:d5:0d:
ff:d0:38:4e:54:80:0e:ef:c5:89:83:55:d8:94:99:1e:53:0a:
43:2b:7a:be:6e:ca:f6:ad:24:36:1a:62:d3:35:dd:c1:b9:8e:
09:06:0c:2e:fb:0f:40:95:8a:a3:58:15:fb:3b:0b:7d:f6:d5:
1c:3a:f4:12:cb:5e:e6:de:5e:af:3c:db:1e:8d:77:a6:21:0b:
36:ed:1a:47:e6:21:d2:a7:dc:2d:9a:2d:1b:f1:21:81:25:56:
21:99:01:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaDS6A3VZ/cGMZ3UHSf1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYzBlOTQ4OTU3NjU5OGNkODBjZmQxM2U4M2Q5ZmE3YWRj
ODc5MWYwHhcNMjYwNzAyMTUxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODJmNGY5NThmODhmYzhhYjY0NWRmNTZiNTBiMWIwMTE2NGUyZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv7iV4nQhicgK3QvMdS8FTHkP9KO
YM+DdIbOEG2ZKFf0nMovwmGYZd3Plq8zvJEyL8jupt1bvcvrf1NfYYs0gz69SF+C
8TYQ0MyCcTDPNx7fOv/u7vsFX/BHe0Fhb9ywMlK8pHC/bYiBkrDFsZMM7pEc8Xxv
r0p/2nWQuWgQdRc60mqpOa/xGDJwjPKEcnmA9Y7QnHq+mvHRiV73tcTXlENDGJcC
fwVjwiceOHfvTUUzsrAqnSYvecSIvjUqWHY2NIMzvR97UKXSuwy74AemvLvLclLw
T8ntu6dsIe2zEG+VBYOKRkzV7ZB/9OdYOVQGEJ/5dYlXhpLnAG4DirsbwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJgvT5WPiPyKtkXfVrULGwEWTi2WMB8GA1UdIwQY
MBaAFFvA6UiVdlmM2Az9E+g9n6etyHkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhEcFNKVjJXWXpZRFAwVDZEMmZwNjNJZVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt
ZjRjNWZjM2NhMmM0LzEvbUM5UGxZLUlfSXEyUmQ5V3RRc2JBUlpPTFpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0
LzEvVzhEcFNKVjJXWXpZRFAwVDZEMmZwNjNJZVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud0sMA0G
CSqGSIb3DQEBCwUAA4IBAQCcET4HFXiJOg8dix7l7yQT52Cm1sNYL//gq3BTBh71
3JOx2ONw4McbyThQyj8pYgN1wJAZkXKkWChbiINyF8LMAGRJ472PnrbL7exiBcHU
HO7O+/xQ5Ra9wJ9S+JdH9OSejvD7VdEOPw3fzvC70noe/YjgmEt1eSrxB1BU3w7l
TCt7PiD5Y8bvHsvaxrS+x+zvtBX3Y+IA3rXJ8Fhvf0fi1Q3/0DhOVIAO78WJg1XY
lJkeUwpDK3q+bsr2rSQ2GmLTNd3BuY4JBgwu+w9AlYqjWBX7Owt99tUcOvQSy17m
3l6vPNsejXemIQs27RpH5iHSp9wtmi0b8SGBJVYhmQEy
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:04:55 2026 by rpki-client