Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/1mbdaBzZtydgseHXPZhGSosWJLs.roa
File: 1mbdaBzZtydgseHXPZhGSosWJLs.roa (raw, json)
Hash identifier: UjyK1tIsvQ19Bbuvrkb9drQLQvPfdLo/PcfCdTfYs3E=
Subject key identifier: D6:66:DD:68:1C:D9:B7:27:60:B1:E1:D7:3D:98:46:4A:8B:16:24:BB
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01A1A0C69042DE86AF946C68D342BCBDDED4
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/1mbdaBzZtydgseHXPZhGSosWJLs.roa
Signing time: Tue 03 Nov 2026 09:38:50 +0000
ROA not before: Tue 03 Nov 2026 09:38:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 87.232.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:c6:90:42:de:86:af:94:6c:68:d3:42:bc:bd:de:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Nov 3 09:38:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d666dd681cd9b72760b1e1d73d98464a8b1624bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:66:5f:38:41:1a:13:dd:ef:8c:4d:cd:21:
ed:7b:8e:a7:87:3c:aa:59:40:1d:5d:11:c2:7c:5b:
67:f1:ca:15:e2:ab:06:af:fa:7d:1d:d4:ab:69:52:
b8:e9:b3:08:a1:30:4b:29:b1:73:84:78:fd:95:11:
f3:47:17:61:f2:f2:99:ed:4f:d8:a0:98:75:41:05:
27:8f:b5:10:5f:df:33:39:1c:9f:c5:e2:18:f0:cc:
00:2c:e8:04:07:17:5e:8b:d4:12:6d:7c:78:72:99:
f7:fe:05:e0:40:86:95:56:85:88:a9:92:98:86:1b:
19:16:05:b5:b4:85:d4:ff:c2:b9:83:b3:bc:32:e0:
82:cf:6d:ea:df:29:b2:e6:d9:a0:fc:70:97:f0:e7:
f9:06:a5:6c:b0:6f:07:a3:cc:73:25:ea:1e:72:f8:
2a:e1:0f:4f:41:8a:ee:91:6e:14:ad:97:6f:64:9c:
7d:a7:96:08:ec:e8:8b:16:00:f4:9c:c5:e8:45:4a:
52:bf:2a:19:45:00:89:c4:3d:b3:d9:fd:3e:ac:74:
78:7b:66:29:d0:d9:31:8e:d2:4e:d2:ac:78:64:23:
89:00:f0:ab:7e:5f:4c:37:58:0c:5b:5d:cc:2b:9e:
56:d1:bb:8f:4b:4d:fe:59:54:d2:c8:4b:c6:43:29:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:66:DD:68:1C:D9:B7:27:60:B1:E1:D7:3D:98:46:4A:8B:16:24:BB
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/1mbdaBzZtydgseHXPZhGSosWJLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.228.0/24
Signature Algorithm: sha256WithRSAEncryption
72:9d:22:1b:22:0f:27:e4:07:66:53:f6:35:ce:f4:9d:d2:3c:
c7:f3:c9:11:9e:3a:55:2c:15:81:a4:b3:fc:09:8a:4d:d3:dd:
49:89:a7:40:b8:89:40:02:17:f9:05:85:d5:59:60:8f:8d:79:
3b:f6:e4:f5:65:13:b8:b3:13:b8:59:7f:54:e1:5b:d1:17:0c:
98:53:7f:4b:15:2a:05:69:39:4b:af:8a:47:bc:65:c4:25:2b:
96:0e:3b:80:90:ed:fe:93:3a:c8:ce:07:a7:0b:20:b6:64:d3:
cc:4a:47:c1:90:bc:0c:c8:59:be:da:0b:03:91:8e:27:50:c4:
1e:9f:74:5a:64:5c:42:9e:44:8c:5c:40:18:10:f6:74:d5:04:
b9:8f:c1:07:80:88:3b:9b:52:86:83:a6:c2:8a:ed:ce:9a:c4:
10:21:97:5a:f2:09:e3:a2:6d:c5:4e:bb:9a:83:42:da:4a:d8:
60:bd:fc:82:b1:7c:37:9f:f4:c1:47:32:2a:09:67:01:a2:fe:
55:a0:f7:1d:73:33:85:45:13:42:d0:88:23:72:35:0d:95:5d:
86:75:e7:ef:4b:dd:1d:63:af:c6:c5:72:7d:e5:4e:17:41:d8:
36:fc:ec:11:a7:8c:ee:16:b3:01:94:7c:91:c9:f4:3a:65:39:
1d:41:f4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:48:29 2026 by rpki-client