Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mNp1QFAQ_9JGQD2k5qxQEERPQvQ.roa
File: mNp1QFAQ_9JGQD2k5qxQEERPQvQ.roa (raw, json)
Hash identifier: SSSpqDcWnMYJkmXbEPi9F9VXGz1GWwEhUNU4kNhvL8o=
Subject key identifier: 98:DA:75:40:50:10:FF:D2:46:40:3D:A4:E6:AC:50:10:44:4F:42:F4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F471EBAB3FB39012E1B91188803B132B6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mNp1QFAQ_9JGQD2k5qxQEERPQvQ.roa
Signing time: Thu 09 Jul 2026 13:43:43 +0000
ROA not before: Thu 09 Jul 2026 13:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215102
IP address blocks: 89.125.15.0/24 maxlen: 24
153.76.208.0/24 maxlen: 24
185.254.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:1e:ba:b3:fb:39:01:2e:1b:91:18:88:03:b1:32:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 9 13:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98da75405010ffd246403da4e6ac5010444f42f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:f7:d0:97:fc:43:88:53:f3:10:90:e9:d6:
fc:cc:cc:71:4c:55:39:f9:81:3c:cf:a1:f0:63:54:
00:df:cb:89:57:3b:67:bd:2a:08:6f:75:49:48:39:
a2:1e:d8:76:8f:89:78:76:be:27:22:75:1d:8c:a7:
67:85:9e:bc:81:ef:dc:50:d0:9c:ea:21:b4:68:74:
b8:5b:c0:64:29:f3:6c:2a:87:d5:a4:6a:7a:72:56:
8f:c3:a4:42:cb:60:30:14:9f:c5:73:01:1c:fd:42:
22:b1:6d:9f:e0:b1:fc:17:32:78:c7:a5:15:b5:ab:
ef:84:58:33:d5:8d:9c:17:da:88:28:4c:09:4a:b8:
a4:48:19:33:dd:be:92:06:e2:d3:ff:36:51:3c:4e:
4e:a7:49:70:e6:8f:fe:76:3c:c4:5a:2e:ff:8b:fc:
5f:d9:ed:a7:0d:f9:77:f2:aa:05:fa:56:ef:16:3d:
06:7e:d6:f4:e9:34:7f:a0:93:4d:90:52:94:44:45:
d8:03:d4:28:ca:54:dd:2b:ad:64:e5:08:43:a2:00:
f9:b9:29:a7:42:a0:bd:d8:eb:8b:f8:a0:71:5f:12:
21:1d:06:c9:18:4d:54:87:fa:86:9e:e8:0a:ce:85:
27:21:97:c2:cc:9b:bb:aa:ac:fb:a3:73:7f:95:c3:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:75:40:50:10:FF:D2:46:40:3D:A4:E6:AC:50:10:44:4F:42:F4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mNp1QFAQ_9JGQD2k5qxQEERPQvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.15.0/24
153.76.208.0/24
185.254.67.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f5:d7:6c:dc:ee:f8:69:9b:b7:23:8f:f8:dc:5c:e5:14:2d:
81:55:b6:51:d1:7b:96:57:8a:e6:1e:db:e0:99:74:b0:41:b1:
b8:08:d3:35:05:7d:a9:8a:7c:13:94:c9:64:83:d7:35:f8:8d:
4b:c1:69:fd:5a:5e:1c:2f:8a:ec:f3:33:f0:1a:fe:f6:d9:89:
02:95:b9:3f:84:3a:06:5e:00:d0:1b:82:d9:08:44:a3:af:83:
55:a6:58:e7:c4:4f:69:99:5b:6b:d2:14:c6:49:54:24:f0:35:
1f:2e:5f:64:06:3f:7d:6e:5d:50:87:83:18:0b:3c:95:45:a3:
52:f1:fa:94:d7:86:82:d2:94:b2:2a:c3:13:2b:d6:58:08:f8:
29:72:de:d7:24:d8:3e:83:fa:66:5e:3a:5e:73:2c:27:5a:2c:
8c:4d:ec:34:69:6d:6d:a8:65:9a:30:ec:77:a4:05:80:45:a4:
a8:64:28:d9:bd:9e:5a:d7:e3:aa:b6:23:ea:c9:e5:f3:e9:cf:
9e:e3:0c:5c:21:05:b6:44:4c:2b:55:fc:6f:34:d3:bb:d4:ed:
cc:45:f9:23:01:8a:84:10:fc:98:b5:6a:38:00:5e:07:25:e8:
ed:f1:62:c2:fe:87:59:59:de:07:f5:7f:98:01:11:fa:c1:fa:
49:5f:a5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:22 2026 by rpki-client