Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/mXn0MKmHDy1aT83WYfadFmq0_G4.roa
File: mXn0MKmHDy1aT83WYfadFmq0_G4.roa (raw, json)
Hash identifier: R2FDSVyHViAgLea0vkfodWf9cM1uOy5XpY9Z9jCfAgQ=
Subject key identifier: 99:79:F4:30:A9:87:0F:2D:5A:4F:CD:D6:61:F6:9D:16:6A:B4:FC:6E
Certificate issuer: /CN=560615dea70d80b6e5100137f0744217b787a29c
Certificate serial: 019CD6FDA04A494806913B015A2FA9C68523
Authority key identifier: 56:06:15:DE:A7:0D:80:B6:E5:10:01:37:F0:74:42:17:B7:87:A2:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgYV3qcNgLblEAE38HRCF7eHopw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/mXn0MKmHDy1aT83WYfadFmq0_G4.roa
Signing time: Tue 10 Mar 2026 09:04:31 +0000
ROA not before: Tue 10 Mar 2026 09:04:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50477
IP address blocks: 185.188.96.0/22 maxlen: 22
185.188.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VgYV3qcNgLblEAE38HRCF7eHopw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d6:fd:a0:4a:49:48:06:91:3b:01:5a:2f:a9:c6:85:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560615dea70d80b6e5100137f0744217b787a29c
Validity
Not Before: Mar 10 09:04:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9979f430a9870f2d5a4fcdd661f69d166ab4fc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:b7:3a:95:da:95:1d:c9:2e:62:38:5d:1c:
3b:10:60:b4:ca:54:33:51:2f:33:cc:35:06:69:36:
47:57:03:b3:68:81:eb:83:72:36:11:34:37:28:81:
4a:a5:c1:22:5c:b2:3d:f4:d9:15:48:53:ff:cc:5f:
ec:dd:b6:f9:c8:d8:9a:0f:87:9a:80:d1:b0:80:29:
b7:e9:f3:92:fa:98:cf:45:69:38:a8:a9:1b:55:ef:
e0:f7:9a:59:ae:8a:6f:6b:ca:82:82:79:33:c1:1d:
c9:39:3b:e8:ac:85:09:bb:c2:63:b9:45:de:73:c8:
cc:7d:b8:a2:aa:e8:f2:62:0e:6d:32:dc:eb:5d:0b:
59:e9:c6:4f:6d:8e:a1:dc:1c:5f:09:47:d2:4a:c8:
6a:26:a7:89:44:a3:f4:08:e5:ae:c2:f2:51:a2:fc:
6d:c1:e8:52:bf:d5:ac:71:50:e5:1d:d9:70:fc:a6:
ae:d9:2a:b5:b9:df:b4:f4:cd:df:b9:7d:40:ea:c0:
90:d5:e1:c8:27:53:46:d3:66:7d:a1:9d:32:61:b8:
28:1f:58:17:d1:91:2a:fd:cf:c4:17:3b:8f:d5:c2:
f6:b2:e2:6a:9a:e2:2e:e2:a4:62:62:68:0d:01:00:
d8:f9:d5:e8:67:6f:af:05:51:83:4e:49:4d:bf:43:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:79:F4:30:A9:87:0F:2D:5A:4F:CD:D6:61:F6:9D:16:6A:B4:FC:6E
X509v3 Authority Key Identifier:
keyid:56:06:15:DE:A7:0D:80:B6:E5:10:01:37:F0:74:42:17:B7:87:A2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgYV3qcNgLblEAE38HRCF7eHopw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/mXn0MKmHDy1aT83WYfadFmq0_G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6bc743-07eb-414b-b2cd-6f3ea3b5790a/1/VgYV3qcNgLblEAE38HRCF7eHopw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.96.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:d2:59:45:17:74:a2:e0:13:97:7c:4b:e5:91:40:f7:f5:14:
1e:fd:f9:9b:a1:46:fc:98:37:8a:24:6b:46:a4:5a:a7:b6:56:
8c:90:ad:d6:51:ed:17:62:25:6f:94:20:99:38:a1:6a:bc:47:
57:65:20:b8:e7:9b:09:87:b6:57:cb:02:9e:d5:7e:bb:14:ac:
3e:21:30:b7:1f:58:13:14:24:b0:f0:69:a8:90:1b:75:05:95:
ca:de:63:fb:b1:fd:58:e9:82:98:f2:0d:8d:eb:83:d8:03:8e:
a7:4d:87:21:ff:65:68:3d:e6:58:74:51:20:b1:a0:76:a1:50:
dc:6b:8f:24:6e:28:e9:9d:78:38:e5:0f:4b:26:19:36:d8:02:
9e:44:95:c6:93:86:71:86:cf:08:37:d9:d7:f6:ca:63:1c:32:
72:11:42:2e:fd:44:2c:c9:d9:12:7a:7b:88:bf:46:bc:32:c4:
ed:67:17:e3:03:50:66:9a:b1:47:b3:11:01:14:48:6f:86:05:
ad:ec:da:bd:17:f8:55:b2:48:78:5d:60:d8:0b:20:d9:1a:31:
e9:72:7b:64:f5:dc:2f:0b:93:d5:9b:f3:51:c3:d5:f9:5f:63:
c5:fe:6c:67:91:82:96:96:26:32:f0:e0:37:76:4b:9f:e8:2a:
14:d6:a5:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzW/aBKSUgGkTsBWi+pxoUjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MDYxNWRlYTcwZDgwYjZlNTEwMDEzN2YwNzQ0MjE3Yjc4
N2EyOWMwHhcNMjYwMzEwMDkwNDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTc5ZjQzMGE5ODcwZjJkNWE0ZmNkZDY2MWY2OWQxNjZhYjRmYzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjK3OpXalR3JLmI4XRw7EGC0ylQz
US8zzDUGaTZHVwOzaIHrg3I2ETQ3KIFKpcEiXLI99NkVSFP/zF/s3bb5yNiaD4ea
gNGwgCm36fOS+pjPRWk4qKkbVe/g95pZropva8qCgnkzwR3JOTvorIUJu8JjuUXe
c8jMfbiiqujyYg5tMtzrXQtZ6cZPbY6h3BxfCUfSSshqJqeJRKP0COWuwvJRovxt
wehSv9WscVDlHdlw/Kau2Sq1ud+09M3fuX1A6sCQ1eHIJ1NG02Z9oZ0yYbgoH1gX
0ZEq/c/EFzuP1cL2suJqmuIu4qRiYmgNAQDY+dXoZ2+vBVGDTklNv0OFMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJl59DCphw8tWk/N1mH2nRZqtPxuMB8GA1UdIwQY
MBaAFFYGFd6nDYC25RABN/B0Qhe3h6KcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmdZVjNxY05nTGJsRUFFMzhIUkNGN2VIb3B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82YmM3NDMtMDdlYi00MTRiLWIyY2Qt
NmYzZWEzYjU3OTBhLzEvbVhuME1LbUhEeTFhVDgzV1lmYWRGbXEwX0c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82YmM3NDMtMDdlYi00MTRiLWIyY2QtNmYzZWEzYjU3OTBh
LzEvVmdZVjNxY05nTGJsRUFFMzhIUkNGN2VIb3B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubxgMA0G
CSqGSIb3DQEBCwUAA4IBAQBe0llFF3Si4BOXfEvlkUD39RQe/fmboUb8mDeKJGtG
pFqntlaMkK3WUe0XYiVvlCCZOKFqvEdXZSC455sJh7ZXywKe1X67FKw+ITC3H1gT
FCSw8GmokBt1BZXK3mP7sf1Y6YKY8g2N64PYA46nTYch/2VoPeZYdFEgsaB2oVDc
a48kbijpnXg45Q9LJhk22AKeRJXGk4Zxhs8IN9nX9spjHDJyEUIu/UQsydkSenuI
v0a8MsTtZxfjA1BmmrFHsxEBFEhvhgWt7Nq9F/hVskh4XWDYCyDZGjHpcntk9dwv
C5PVm/NRw9X5X2PF/mxnkYKWliYy8OA3dkuf6CoU1qXG
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:54:41 2026 by rpki-client