Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/mb4dr8k_JsxsRjoEwvWV-5CcfXg.roa
File: mb4dr8k_JsxsRjoEwvWV-5CcfXg.roa (raw, json)
Hash identifier: fjxFgSI5yvSQHJ2nDrBmruLrx+LFT7l+t3v3J0qYTWY=
Subject key identifier: 99:BE:1D:AF:C9:3F:26:CC:6C:46:3A:04:C2:F5:95:FB:90:9C:7D:78
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A13C338B3AC7059B910C010B6DEEEFBFBF
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/mb4dr8k_JsxsRjoEwvWV-5CcfXg.roa
Signing time: Wed 14 Oct 2026 20:56:13 +0000
ROA not before: Wed 14 Oct 2026 20:56:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206007
IP address blocks: 187.52.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:33:8b:3a:c7:05:9b:91:0c:01:0b:6d:ee:ef:bf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Oct 14 20:56:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99be1dafc93f26cc6c463a04c2f595fb909c7d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:db:aa:6c:ac:8a:a1:10:13:ba:26:a5:b7:
8c:c1:87:be:22:0e:23:7a:5b:fb:96:74:ed:0c:ee:
06:a1:98:26:06:af:47:f5:ea:08:24:38:37:37:07:
87:ac:1c:66:a2:07:f9:d7:58:c7:d1:69:75:41:20:
7c:bd:4e:0f:3d:bb:40:a2:42:b4:a4:51:4b:94:31:
4f:63:9a:f8:38:c3:72:42:bc:ec:48:bc:e8:34:c4:
7c:f8:5c:07:eb:2a:d7:a0:ae:2f:54:f4:84:6a:21:
14:e5:e5:69:42:be:d7:b6:8c:9b:6a:a1:12:d3:e5:
26:24:bf:2d:88:67:28:3f:15:35:16:9f:db:24:c9:
d1:a1:a3:59:98:62:14:77:85:88:6d:25:d0:f3:bf:
5a:27:71:13:73:6d:30:56:a6:ca:1d:26:94:94:ba:
30:13:9a:a4:74:32:9a:c4:47:ef:ac:b3:36:cc:bb:
ad:0d:68:56:a4:a0:96:7b:e7:b4:36:1e:69:96:c0:
45:3e:75:82:a2:08:ae:ed:d3:64:8a:90:4b:30:3b:
06:48:4c:04:6c:e7:be:90:01:3e:88:4d:b0:96:0a:
aa:34:de:92:53:96:cc:52:cc:9d:2c:05:f0:f9:c3:
3e:cd:da:6e:eb:5b:3b:43:9a:ef:c3:c6:df:75:19:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BE:1D:AF:C9:3F:26:CC:6C:46:3A:04:C2:F5:95:FB:90:9C:7D:78
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/mb4dr8k_JsxsRjoEwvWV-5CcfXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.52.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:17:59:af:32:0c:61:69:dd:a4:60:09:b4:05:70:5e:de:54:
47:35:1c:b4:02:e4:24:67:d8:07:00:e1:b8:87:97:86:c2:44:
49:20:75:3d:d2:9e:0d:24:38:3f:e4:69:77:57:81:0b:8d:eb:
92:11:ff:4c:6e:64:f3:d2:c9:35:fc:51:eb:71:af:7f:1e:6b:
0a:e6:25:8d:52:e1:a9:00:07:13:bd:f0:67:5c:a8:e9:56:75:
44:b7:26:71:95:79:5b:64:f8:5d:ea:54:40:f5:a3:09:71:b0:
c9:02:7f:80:c8:e6:a7:dc:38:cf:8f:87:56:ae:9e:87:51:70:
70:0d:49:d9:ed:34:ba:88:25:3a:38:17:70:5c:df:5b:80:0e:
cd:91:48:d6:14:4f:23:4a:98:b3:16:0a:00:14:ed:ce:6f:02:
c3:33:fe:af:be:29:cb:f8:75:a6:8d:5e:23:ae:c6:a7:14:af:
6c:51:4f:d5:52:2e:85:1a:e2:ec:a9:4b:0e:d2:fb:53:39:43:
09:5a:cf:72:9d:aa:96:fe:77:9b:16:35:23:7b:e5:56:51:53:
81:44:c4:01:fe:2f:89:26:7a:b7:b8:c2:11:1e:88:c1:2a:ad:
b7:4f:3d:82:e3:6b:76:ce:ef:da:13:01:01:65:e1:48:fe:94:
eb:bf:cf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:52:12 2026 by rpki-client