Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mKM1tsqKQoc8PWb5_XoP-ubgxII.roa
File: mKM1tsqKQoc8PWb5_XoP-ubgxII.roa (raw, json)
Hash identifier: 2Pbyr222Z3HUuNeOb+9nT1zhYlbpfVd4M4pk3DJMr44=
Subject key identifier: 98:A3:35:B6:CA:8A:42:87:3C:3D:66:F9:FD:7A:0F:FA:E6:E0:C4:82
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 01A19D423449A33A1B5F1736EF7FC073ECE4
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mKM1tsqKQoc8PWb5_XoP-ubgxII.roa
Signing time: Mon 02 Nov 2026 17:15:24 +0000
ROA not before: Mon 02 Nov 2026 17:15:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210539
IP address blocks: 185.170.128.0/24 maxlen: 24
185.170.130.0/24 maxlen: 24
185.170.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:42:34:49:a3:3a:1b:5f:17:36:ef:7f:c0:73:ec:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Nov 2 17:15:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98a335b6ca8a42873c3d66f9fd7a0ffae6e0c482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:c8:2f:15:5d:3e:2e:ea:44:71:7e:7d:d3:
6d:af:72:2d:dd:9e:b8:c5:25:d4:d0:b8:24:dd:e8:
34:7f:8e:88:8a:11:50:55:9c:92:46:96:97:d1:4b:
3a:96:3e:79:ea:5a:6b:7e:fa:53:31:d6:b6:d5:43:
f3:a1:0b:18:43:ae:2f:88:38:d7:bd:7e:4b:84:c8:
9e:10:1d:da:08:4f:f4:8e:45:70:00:ce:27:e3:dd:
09:97:58:1d:8b:72:27:c8:bd:ba:dc:32:80:f6:16:
3c:65:be:ee:b6:65:0e:b1:0d:78:15:b2:a6:55:ae:
48:4d:75:70:eb:bc:9a:4b:9d:82:8e:e2:f1:de:e5:
a2:98:02:3c:67:5d:5a:43:f7:76:99:fa:94:fa:a9:
63:4d:51:74:da:6f:5f:60:1f:5d:99:7c:b6:91:21:
86:8e:ba:e3:09:a1:15:54:99:55:e4:a0:a8:a6:61:
a8:8b:54:c6:c0:d6:ea:7e:5c:53:86:cc:d7:cb:b5:
a6:33:2a:55:a3:01:da:a9:53:64:de:b7:37:09:cd:
73:ec:57:fc:4d:21:a0:85:df:14:10:14:f3:d4:ce:
b2:5a:f2:b4:fc:3b:aa:18:11:2a:9a:a9:aa:96:71:
47:2f:aa:f4:b0:9d:2c:34:c0:4c:b1:08:78:7a:7b:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A3:35:B6:CA:8A:42:87:3C:3D:66:F9:FD:7A:0F:FA:E6:E0:C4:82
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mKM1tsqKQoc8PWb5_XoP-ubgxII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.128.0/24
185.170.130.0/23
Signature Algorithm: sha256WithRSAEncryption
92:9a:ad:35:3e:1a:e8:7b:2c:ed:fd:b6:fe:d9:84:a2:5e:43:
03:9d:a9:52:aa:bb:42:bd:e5:0e:f4:0a:a3:fc:28:d9:23:58:
69:a9:f3:29:0f:79:78:96:1a:36:4a:52:ee:d5:b7:3e:2c:8d:
fc:92:b9:cd:7a:31:63:4f:73:68:1c:dc:af:51:fe:17:ae:7e:
92:dc:84:dc:3a:c6:36:31:14:80:63:d6:81:98:e3:6a:ec:d0:
e7:f3:92:77:77:4f:c7:01:f3:bb:ee:71:90:e2:cb:98:4d:15:
75:aa:7a:b5:41:c1:74:4b:45:8f:00:7b:d1:aa:be:76:6d:3c:
a1:18:e9:29:16:ee:ce:33:0c:61:45:08:24:a6:ed:28:0d:c2:
24:02:11:b6:c1:da:4d:1e:e7:25:71:5c:90:b1:28:5f:f8:f5:
ad:8a:3d:a5:63:a2:82:78:ba:b4:4b:63:73:5e:de:9b:ea:be:
96:99:63:a0:85:57:06:f3:a4:4b:37:89:26:f4:72:f2:20:a4:
5c:cc:5c:de:13:72:6d:c7:17:ce:53:42:3a:16:b0:af:39:d5:
61:99:1d:d2:d7:38:83:23:ab:53:13:31:3f:ef:c7:d8:9f:f1:
26:8a:63:12:ea:38:af:39:62:84:fa:71:08:93:39:4b:ed:35:
b7:3c:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:15 2026 by rpki-client