Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/mN2UNox5HS19EFewWcJ4zjCa06A.roa
File: mN2UNox5HS19EFewWcJ4zjCa06A.roa (raw, json)
Hash identifier: kKIGa4iIrNNOzfINks4rXUjMzNcz7Vxs/5qHl+p1nhI=
Subject key identifier: 98:DD:94:36:8C:79:1D:2D:7D:10:57:B0:59:C2:78:CE:30:9A:D3:A0
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A0F6B653AA69C269A1664ED143EC8DAA0A
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/mN2UNox5HS19EFewWcJ4zjCa06A.roa
Signing time: Thu 01 Oct 2026 09:05:38 +0000
ROA not before: Thu 01 Oct 2026 09:05:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 87.232.95.0/24 maxlen: 24
205.234.124.0/23 maxlen: 23
205.234.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:b6:53:aa:69:c2:69:a1:66:4e:d1:43:ec:8d:aa:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Oct 1 09:05:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98dd94368c791d2d7d1057b059c278ce309ad3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:49:2e:70:65:cf:18:23:df:e3:12:63:2f:
8b:41:1e:92:4f:c9:13:08:a2:ac:0d:0d:60:21:5d:
e3:7f:ca:dd:1c:c5:85:0c:09:20:64:e0:d7:ca:89:
da:5d:c5:20:69:53:10:d7:02:48:ae:44:35:97:5a:
6a:5a:bd:bd:0a:1d:44:fc:68:7e:ae:44:27:90:7c:
07:cd:ca:76:fd:81:aa:fa:3d:53:05:9b:1f:6f:71:
b9:ff:dc:a2:45:25:81:a8:24:92:9d:f0:47:e3:2c:
3f:09:2b:dc:a0:52:26:b9:c2:7c:12:87:52:ca:67:
96:60:fd:8a:c4:52:11:75:ba:23:af:65:a3:d8:88:
eb:dd:a7:14:06:c5:75:9c:43:8f:a8:23:34:d6:ce:
d2:98:ec:61:36:9f:04:df:50:2e:a6:e1:2b:91:f5:
94:a6:c3:31:c9:f5:a5:5f:5c:98:a8:9b:50:3c:a1:
01:0f:0b:b0:67:ba:65:0d:f6:e9:4c:4a:cc:b8:7c:
a0:73:92:ba:0b:41:a8:4d:09:99:5f:49:c6:25:6e:
2d:2f:ae:41:3a:ba:83:75:5e:6b:4e:92:8f:15:9c:
be:1a:29:01:ec:77:a0:54:12:65:df:ad:40:e4:4f:
e3:91:79:8b:1e:0d:01:73:a3:36:16:8d:bd:1c:68:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DD:94:36:8C:79:1D:2D:7D:10:57:B0:59:C2:78:CE:30:9A:D3:A0
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/mN2UNox5HS19EFewWcJ4zjCa06A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.95.0/24
205.234.124.0/22
Signature Algorithm: sha256WithRSAEncryption
67:48:1f:45:5f:35:37:dd:17:7c:34:e6:0c:88:78:95:13:83:
0d:78:4f:db:dc:26:e1:a0:8d:f8:29:a7:db:b4:af:07:76:21:
67:3a:22:58:48:47:dd:92:54:d2:8f:11:8e:44:1a:2f:fe:5e:
54:e4:3f:c4:5e:3e:a9:a9:96:6b:2a:c3:89:9f:5d:d2:d2:46:
18:d5:d0:bd:79:0c:37:bb:ac:81:80:04:d9:3e:1a:45:9e:90:
c1:61:d6:05:5f:19:80:a9:06:54:bb:a5:42:38:65:06:dc:25:
3e:db:01:80:d6:02:88:40:2c:10:1f:be:fd:59:09:e1:fd:15:
9c:b8:5e:af:b9:dd:6b:f1:b5:d2:8a:4a:36:15:6b:70:f3:c5:
7e:03:d1:8b:91:4a:f3:44:b8:32:df:90:3a:3a:6a:7c:85:2d:
7b:0e:0a:11:62:17:e4:90:a0:4c:e8:f8:da:ad:bb:d0:e1:fd:
36:7e:a3:ef:62:0a:81:62:1b:bb:5d:d3:90:62:3d:7f:6b:93:
bb:40:ca:0f:65:71:32:bd:d8:a3:37:fb:37:f8:d8:9d:1b:2b:
15:59:11:27:15:34:90:1a:da:20:78:65:97:bd:d2:6f:c3:14:
3b:7d:19:7d:dc:c7:20:87:76:25:d9:71:e0:f2:50:43:b3:54:
e5:f5:17:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:56:01 2026 by rpki-client