Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/mrSAnzlDLfun5MHZVJBImrVFqAo.roa
File: mrSAnzlDLfun5MHZVJBImrVFqAo.roa (raw, json)
Hash identifier: rqUXSHfbdDKPZADppYS48L5JRQ5WmyyUPUXsCOrlNFU=
Subject key identifier: 9A:B4:80:9F:39:43:2D:FB:A7:E4:C1:D9:54:90:48:9A:B5:45:A8:0A
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 019CD85B0A31230FC7A0A871C4719F0C9D9B
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/mrSAnzlDLfun5MHZVJBImrVFqAo.roa
Signing time: Tue 10 Mar 2026 15:26:10 +0000
ROA not before: Tue 10 Mar 2026 15:26:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33659
IP address blocks: 91.200.136.0/22 maxlen: 22
91.235.84.0/22 maxlen: 22
185.110.8.0/22 maxlen: 22
185.188.192.0/22 maxlen: 22
195.211.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:5b:0a:31:23:0f:c7:a0:a8:71:c4:71:9f:0c:9d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Mar 10 15:26:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ab4809f39432dfba7e4c1d95490489ab545a80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:8d:3a:06:bb:66:d8:50:3f:5d:c8:e4:de:
3d:83:55:97:a9:80:15:66:03:8e:3d:6b:13:e6:84:
c3:ff:f9:87:78:7e:99:b8:4f:50:a4:4d:70:85:49:
36:36:1d:92:69:c1:70:c1:75:4f:80:d9:29:db:be:
9a:0a:12:8e:c0:01:cc:3b:9b:c9:37:f2:d7:47:f7:
2d:b8:1c:df:8d:31:0f:1d:1f:de:fb:e7:0c:af:9a:
5b:58:fc:f1:66:74:8a:c5:5b:ac:05:7d:34:7e:3f:
fc:4e:2e:19:ba:3d:41:c6:a5:a2:d7:e0:06:98:81:
6d:f6:fb:e4:72:b8:ff:f0:a0:ef:70:8b:dd:77:f9:
d5:38:25:3f:d4:27:38:1b:1c:62:51:38:8b:3f:26:
ef:7d:df:39:83:79:6d:ba:f7:bd:89:1e:03:3e:8e:
3e:c7:ad:4c:0e:a7:4b:ff:78:40:ab:57:4c:b0:a5:
3f:e4:95:66:48:9d:98:74:84:5a:de:c8:c3:3f:e8:
f1:66:f8:88:bb:f1:12:07:eb:2b:22:db:49:45:8f:
14:f2:d0:0d:1b:0c:67:32:f0:3f:2d:ad:8b:08:38:
31:ce:1f:02:27:f8:1e:f7:4d:f9:7a:81:37:a1:36:
44:6e:10:a4:74:b5:f0:e0:45:e6:d5:22:f2:9a:a8:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B4:80:9F:39:43:2D:FB:A7:E4:C1:D9:54:90:48:9A:B5:45:A8:0A
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/mrSAnzlDLfun5MHZVJBImrVFqAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.136.0/22
91.235.84.0/22
185.110.8.0/22
185.188.192.0/22
195.211.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:f2:96:7f:93:b7:b1:06:0f:dd:2f:aa:fb:6f:4f:1a:a2:61:
12:5b:5e:c8:53:4c:a0:6b:3b:7c:33:2e:5c:31:7d:b0:f2:49:
0d:e1:76:06:c1:9d:b6:bb:69:ca:1a:84:d7:3e:5f:9f:75:68:
d5:f4:62:15:e9:ba:58:dc:1b:e6:80:61:95:ad:45:24:c7:c9:
ae:15:53:d2:7b:16:cd:13:ab:42:fa:ac:f9:42:96:da:4f:c7:
39:55:dd:f7:ed:b2:d1:1b:de:fa:4c:6e:40:3c:37:c7:bd:eb:
61:5f:12:ab:97:52:66:23:23:e7:ab:74:19:b6:bb:2e:34:f4:
64:3c:98:10:1a:65:aa:23:ad:f8:69:ac:35:8b:42:f2:9c:e4:
6b:f3:72:b3:4f:5c:14:3e:ba:b3:17:c0:c4:ee:ba:2a:7c:c0:
c2:63:18:5c:89:20:ac:3b:da:1c:8d:0d:e1:f9:34:13:0f:b2:
49:3d:86:51:29:57:95:3b:95:84:32:d7:d8:52:05:9b:fd:c9:
e8:b6:3f:a6:24:ea:8a:b0:f6:57:39:af:43:e0:c6:94:13:f7:
7e:e9:50:88:52:2a:4b:33:f7:45:1f:43:3f:d6:c0:8d:1e:dc:
49:e2:23:89:79:eb:22:9b:b6:bf:50:a5:99:06:1b:88:f0:00:
30:13:ce:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:46:58 2026 by rpki-client