Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/mLE7VosmydhVCMguYH3rQgmTc-M.roa
File: mLE7VosmydhVCMguYH3rQgmTc-M.roa (raw, json)
Hash identifier: mTYzchMKEO4uZTushftKzw0+5nZsPeA/JGcP5k+QnQM=
Subject key identifier: 98:B1:3B:56:8B:26:C9:D8:55:08:C8:2E:60:7D:EB:42:09:93:73:E3
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 019F3C4419220DB1691728CB504E3AFC338C
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/mLE7VosmydhVCMguYH3rQgmTc-M.roa
Signing time: Tue 07 Jul 2026 11:08:43 +0000
ROA not before: Tue 07 Jul 2026 11:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211874
IP address blocks: 185.132.184.0/23 maxlen: 24
194.93.44.0/22 maxlen: 24
194.93.44.0/23 maxlen: 23
194.93.44.0/24 maxlen: 24
194.93.45.0/24 maxlen: 24
194.93.46.0/24 maxlen: 24
194.93.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:44:19:22:0d:b1:69:17:28:cb:50:4e:3a:fc:33:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Jul 7 11:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98b13b568b26c9d85508c82e607deb42099373e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:24:3e:84:96:a1:39:ca:83:c2:c8:86:1b:
e9:15:e4:03:ea:b0:43:e5:d8:34:df:f5:aa:68:e3:
44:d1:c4:2b:b0:39:c3:63:1a:a9:ed:ed:9a:fe:52:
43:11:1c:89:f8:3f:d5:78:5f:23:44:c3:b2:03:16:
3e:72:77:c8:a4:d1:64:5d:ee:05:34:da:4b:4d:7c:
f3:cc:52:8f:ec:07:21:78:8a:04:83:68:d7:60:0e:
fd:87:0e:76:e7:db:1b:5d:e1:c9:5f:5a:33:13:3a:
b0:0c:fe:95:5d:78:ec:e9:59:63:2d:44:7d:16:26:
46:4d:32:8f:73:d9:e3:c9:20:c9:71:1c:35:3d:61:
49:05:ad:30:27:21:10:b3:59:a4:00:32:9c:54:e2:
f2:4c:18:3b:1b:05:69:94:7b:51:24:d1:0c:8d:ad:
eb:b9:19:7a:f0:94:28:8e:0b:88:ba:8f:0b:24:b5:
6f:6b:9d:61:0d:66:e1:df:e8:41:81:67:75:07:d1:
4c:59:bc:8f:04:77:33:d1:34:08:12:e6:a5:85:a1:
42:6b:7f:19:20:43:f3:bf:99:1b:5c:03:3a:09:40:
fd:8a:b6:81:45:c4:00:df:e1:be:c8:2f:88:84:dd:
07:ae:be:30:b6:cf:b9:d8:79:ed:bb:f7:a1:8d:71:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B1:3B:56:8B:26:C9:D8:55:08:C8:2E:60:7D:EB:42:09:93:73:E3
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/mLE7VosmydhVCMguYH3rQgmTc-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.184.0/23
194.93.44.0/22
Signature Algorithm: sha256WithRSAEncryption
05:8c:a0:3b:6a:90:41:7d:8b:9b:b0:89:8a:9e:8f:8a:06:e1:
38:50:d2:11:09:38:9a:52:b9:e1:2b:94:f1:54:6a:eb:68:e9:
00:c4:b3:2c:a0:54:5d:94:36:47:e8:07:43:49:15:1f:98:27:
13:83:b6:04:ca:75:d4:fb:11:ff:ca:52:d5:ec:55:da:db:2a:
0e:c5:d6:15:a6:61:1b:fc:51:95:aa:24:d7:f5:b7:da:0a:f3:
71:f2:01:52:e3:c2:32:7d:93:a7:d5:9a:3d:98:1d:4b:95:7b:
39:6f:9e:ca:02:6a:65:bd:18:df:b7:d9:6b:84:89:f5:90:15:
1e:74:55:9a:bb:2b:90:26:79:3c:73:7b:d3:47:87:50:5a:70:
b0:00:8f:cb:3f:60:ce:b1:49:7d:d8:7c:b7:cb:02:53:ec:d6:
99:6d:e0:ae:37:ce:53:61:30:e2:bb:0b:22:b3:19:ce:cc:61:
d8:b4:01:46:6a:19:6e:9b:c6:b5:fe:a2:bc:66:f9:02:d9:3b:
27:e6:f8:1f:e2:2d:34:1f:e7:0e:9a:59:38:a9:01:55:6f:81:
22:af:ce:0d:d2:a6:2b:27:87:1b:83:40:ac:4a:ba:60:f2:95:
8b:5f:0d:4f:af:6e:d2:12:ab:08:72:00:62:f6:6a:a2:45:4f:
0c:98:df:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:05:44 2026 by rpki-client