Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/MrVUIQjfWhMeAygcTn_kB8nchao.roa
File: MrVUIQjfWhMeAygcTn_kB8nchao.roa (raw, json)
Hash identifier: CoX55bP+8UcP/V9NHXcXKWX+Bw+cYWaam37t88M/puk=
Subject key identifier: 32:B5:54:21:08:DF:5A:13:1E:03:28:1C:4E:7F:E4:07:C9:DC:85:AA
Certificate issuer: /CN=958334a4c12ee7bfd36cbf385907c042103436c6
Certificate serial: 019EEF8ED8B3EFD060C9A0A4F2DE1E37A664
Authority key identifier: 95:83:34:A4:C1:2E:E7:BF:D3:6C:BF:38:59:07:C0:42:10:34:36:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/MrVUIQjfWhMeAygcTn_kB8nchao.roa
Signing time: Mon 22 Jun 2026 13:39:36 +0000
ROA not before: Mon 22 Jun 2026 13:39:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206818
IP address blocks: 91.216.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:8e:d8:b3:ef:d0:60:c9:a0:a4:f2:de:1e:37:a6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958334a4c12ee7bfd36cbf385907c042103436c6
Validity
Not Before: Jun 22 13:39:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32b5542108df5a131e03281c4e7fe407c9dc85aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:23:9f:84:49:09:3d:79:3b:f5:0f:34:b3:
63:64:6a:43:e8:2f:0d:2e:c4:bd:fb:73:7d:bd:a8:
76:65:1a:69:ea:16:69:55:67:e1:b2:75:6a:60:bb:
04:cd:f7:7d:94:35:ec:fd:77:02:b9:1f:a5:70:f5:
c8:db:74:3e:1e:cf:83:41:19:81:5c:07:45:43:4e:
ab:2e:e8:d1:ce:ef:cd:e7:45:4b:d1:df:2a:e2:14:
60:e8:0c:e1:8e:82:54:ab:62:2f:3b:60:6d:99:c1:
a9:5e:86:fe:01:01:43:a1:bb:7a:9f:69:50:f8:46:
41:e0:00:91:65:15:bf:ef:0e:20:98:47:cc:69:09:
cf:ce:67:b1:72:86:af:ef:d7:e0:f5:e9:74:ef:aa:
b8:91:5f:7b:e5:2f:c9:42:8d:08:0e:1a:05:d1:5b:
b9:be:a6:73:f0:53:16:e1:b7:6a:c1:03:3c:d4:a7:
ae:7b:71:d8:75:6b:4a:bb:1f:a3:b5:bf:23:fd:65:
d2:61:6d:be:c6:21:6d:99:b0:d4:2b:50:12:29:c2:
10:27:ec:72:dd:10:75:f1:47:1a:3b:0b:ef:b6:4c:
e2:b0:c9:7b:bc:dd:22:78:2f:64:c1:51:aa:f5:ba:
7e:42:b6:df:18:82:1a:54:f8:e1:a7:b8:00:14:1d:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B5:54:21:08:DF:5A:13:1E:03:28:1C:4E:7F:E4:07:C9:DC:85:AA
X509v3 Authority Key Identifier:
keyid:95:83:34:A4:C1:2E:E7:BF:D3:6C:BF:38:59:07:C0:42:10:34:36:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYM0pMEu57_TbL84WQfAQhA0NsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/MrVUIQjfWhMeAygcTn_kB8nchao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5f9ed3-fae0-4bde-9e94-7af63d72dd8d/1/lYM0pMEu57_TbL84WQfAQhA0NsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.210.0/24
Signature Algorithm: sha256WithRSAEncryption
62:dc:4e:6c:06:46:9a:a4:29:97:90:92:df:c9:63:ac:71:42:
36:38:a3:52:aa:c5:a5:9a:10:e3:51:c7:81:9e:42:64:86:90:
42:73:62:c0:8c:30:0a:16:78:31:77:f0:06:05:1d:40:f8:be:
65:32:0e:22:43:57:9d:75:8f:3f:f4:51:de:58:1e:a1:3e:fd:
0a:76:c8:63:8f:19:70:ad:bb:9b:e4:d6:60:10:52:05:0e:a0:
64:88:db:80:98:cc:7d:d2:05:dc:2c:55:17:9b:58:94:e3:9d:
c0:19:f6:17:14:f2:62:2c:db:57:0a:59:ab:6c:8c:ae:7f:0f:
8b:db:84:53:65:aa:e9:b1:6e:05:08:da:9a:18:f7:0b:7c:f4:
51:57:0e:9d:94:e1:42:f0:73:91:f3:97:12:46:f5:d3:35:1e:
90:51:65:d6:1b:23:27:51:14:d5:cd:a6:e3:1e:22:8e:c4:90:
01:79:a0:db:98:3c:c4:72:7a:53:43:1c:46:32:f8:c9:a9:6e:
96:d6:e5:42:45:67:78:06:53:0c:ad:9d:a5:00:9b:59:27:03:
54:bd:8a:46:fc:99:03:de:c4:25:64:e5:2d:46:57:93:ef:17:
75:2d:06:bb:ec:94:31:fd:98:9b:e2:f1:0c:9d:ba:a4:28:05:
88:89:3e:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7vjtiz79BgyaCk8t4eN6ZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ODMzNGE0YzEyZWU3YmZkMzZjYmYzODU5MDdjMDQyMTAz
NDM2YzYwHhcNMjYwNjIyMTMzOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmI1NTQyMTA4ZGY1YTEzMWUwMzI4MWM0ZTdmZTQwN2M5ZGM4NWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzMjn4RJCT15O/UPNLNjZGpD6C8N
LsS9+3N9vah2ZRpp6hZpVWfhsnVqYLsEzfd9lDXs/XcCuR+lcPXI23Q+Hs+DQRmB
XAdFQ06rLujRzu/N50VL0d8q4hRg6AzhjoJUq2IvO2BtmcGpXob+AQFDobt6n2lQ
+EZB4ACRZRW/7w4gmEfMaQnPzmexcoav79fg9el076q4kV975S/JQo0IDhoF0Vu5
vqZz8FMW4bdqwQM81Keue3HYdWtKux+jtb8j/WXSYW2+xiFtmbDUK1ASKcIQJ+xy
3RB18UcaOwvvtkzisMl7vN0ieC9kwVGq9bp+QrbfGIIaVPjhp7gAFB1+nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDK1VCEI31oTHgMoHE5/5AfJ3IWqMB8GA1UdIwQY
MBaAFJWDNKTBLue/02y/OFkHwEIQNDbGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFlNMHBNRXU1N19UYkw4NFdRZkFRaEEwTnNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81ZjllZDMtZmFlMC00YmRlLTllOTQt
N2FmNjNkNzJkZDhkLzEvTXJWVUlRamZXaE1lQXlnY1RuX2tCOG5jaGFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81ZjllZDMtZmFlMC00YmRlLTllOTQtN2FmNjNkNzJkZDhk
LzEvbFlNMHBNRXU1N19UYkw4NFdRZkFRaEEwTnNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9jSMA0G
CSqGSIb3DQEBCwUAA4IBAQBi3E5sBkaapCmXkJLfyWOscUI2OKNSqsWlmhDjUceB
nkJkhpBCc2LAjDAKFngxd/AGBR1A+L5lMg4iQ1eddY8/9FHeWB6hPv0Kdshjjxlw
rbub5NZgEFIFDqBkiNuAmMx90gXcLFUXm1iU453AGfYXFPJiLNtXClmrbIyufw+L
24RTZarpsW4FCNqaGPcLfPRRVw6dlOFC8HOR85cSRvXTNR6QUWXWGyMnURTVzabj
HiKOxJABeaDbmDzEcnpTQxxGMvjJqW6W1uVCRWd4BlMMrZ2lAJtZJwNUvYpG/JkD
3sQlZOUtRleT7xd1LQa77JQx/Zib4vEMnbqkKAWIiT4S
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:02 2026 by rpki-client