Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mhR1uetN_JmQXVIztnLOtZLm3y8.roa
File: mhR1uetN_JmQXVIztnLOtZLm3y8.roa (raw, json)
Hash identifier: ECABld1fpq9ynY+E6qDzlixmdAs4G6LqW5/L+Cpx8LQ=
Subject key identifier: 9A:14:75:B9:EB:4D:FC:99:90:5D:52:33:B6:72:CE:B5:92:E6:DF:2F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019E3C7369BA3A3C06F8F2D91796C5289AFE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mhR1uetN_JmQXVIztnLOtZLm3y8.roa
Signing time: Mon 18 May 2026 18:57:37 +0000
ROA not before: Mon 18 May 2026 18:57:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209378
IP address blocks: 192.124.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3c:73:69:ba:3a:3c:06:f8:f2:d9:17:96:c5:28:9a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 18 18:57:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a1475b9eb4dfc99905d5233b672ceb592e6df2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:19:30:91:37:ad:af:81:cd:c9:d3:30:f0:
51:92:09:18:45:47:6b:11:c4:7e:61:9a:ed:bf:68:
b2:6a:b8:53:b1:2d:4a:14:32:99:9b:29:c2:89:0c:
45:ab:a1:a3:6d:55:62:99:9a:8f:68:59:8d:87:3a:
85:43:c2:1d:95:c7:ba:15:4f:7c:c8:88:f1:83:59:
ad:14:2a:fa:62:c5:a5:1d:2f:64:16:d7:d5:d5:8d:
b3:de:12:09:05:57:32:c1:30:c8:9a:ea:f2:e9:02:
03:e3:de:7e:20:bf:68:81:f8:fc:8e:c8:cb:f7:43:
d3:86:70:48:35:9e:8f:d5:70:10:a3:f3:17:03:95:
4c:dd:dc:81:fd:87:3e:71:7a:6d:fe:39:bc:17:84:
f0:3a:3b:b6:d9:09:60:c6:52:e2:a7:cd:b8:2b:4a:
c8:e0:4b:a4:ea:74:c4:76:ce:b9:a3:38:6c:82:99:
50:56:35:1a:e9:6a:9d:a7:a5:ba:12:b9:d8:53:31:
de:57:ba:6b:43:44:ca:ea:c2:4e:4e:ae:d4:6a:5a:
13:41:f6:a3:96:92:86:9f:dd:8b:09:c6:ab:14:fd:
48:fe:0a:03:d6:48:d8:2c:dd:24:2d:b2:16:6e:e8:
e8:7f:f3:d3:a0:b9:7c:4e:c1:c4:ab:19:3a:52:ca:
ec:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:14:75:B9:EB:4D:FC:99:90:5D:52:33:B6:72:CE:B5:92:E6:DF:2F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mhR1uetN_JmQXVIztnLOtZLm3y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.181.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b3:ec:2f:ea:3e:a1:92:71:20:4f:4c:8d:2a:4f:39:ee:68:
0b:c3:d7:aa:97:32:8b:82:04:68:65:12:e2:7a:85:9d:ca:e4:
5c:02:07:f7:36:58:23:31:00:ab:15:44:0f:48:a4:db:02:7b:
ef:c1:48:2d:99:07:d5:b1:88:fb:f4:4b:1c:68:f7:0c:a2:63:
a4:73:6a:1e:dd:8b:da:dd:4e:2b:b1:8d:81:a4:c7:05:7c:65:
ce:8b:cd:59:a0:0f:fc:a7:ab:49:40:67:e1:40:af:d8:3d:11:
a1:fa:af:c0:5a:87:60:6a:f7:2f:fc:d4:da:2d:d7:71:c6:d2:
71:e6:85:31:44:00:b0:f3:45:1d:87:46:67:5d:1a:c1:7e:29:
34:7b:67:c0:99:28:e6:ed:ac:47:ab:15:8a:7a:fc:0c:df:2b:
44:6c:f4:01:99:8c:00:7d:2d:f1:a3:68:39:75:a3:ab:c8:f8:
67:e3:81:db:cd:1a:7d:74:9d:b0:c2:02:cc:87:c5:b1:48:c7:
00:e2:0c:13:e1:15:ae:f1:b2:2b:58:c5:5a:d8:44:be:90:0e:
94:e2:a7:6b:2a:36:18:c1:cc:8f:8e:07:eb:ed:50:1a:a7:d1:
bc:a8:60:20:08:9a:5e:32:ee:ca:77:54:12:09:09:f0:62:17:
29:6d:ed:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ48c2m6OjwG+PLZF5bFKJr+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwNTE4MTg1NzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTE0NzViOWViNGRmYzk5OTA1ZDUyMzNiNjcyY2ViNTkyZTZkZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO0ZMJE3ra+BzcnTMPBRkgkYRUdr
EcR+YZrtv2iyarhTsS1KFDKZmynCiQxFq6GjbVVimZqPaFmNhzqFQ8Idlce6FU98
yIjxg1mtFCr6YsWlHS9kFtfV1Y2z3hIJBVcywTDImury6QID495+IL9ogfj8jsjL
90PThnBINZ6P1XAQo/MXA5VM3dyB/Yc+cXpt/jm8F4TwOju22QlgxlLip824K0rI
4Euk6nTEds65ozhsgplQVjUa6Wqdp6W6ErnYUzHeV7prQ0TK6sJOTq7UaloTQfaj
lpKGn92LCcarFP1I/goD1kjYLN0kLbIWbujof/PToLl8TsHEqxk6UsrsOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJoUdbnrTfyZkF1SM7ZyzrWS5t8vMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvbWhSMXVldE5fSm1RWFZJenRuTE90WkxtM3k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHy1MA0G
CSqGSIb3DQEBCwUAA4IBAQA0s+wv6j6hknEgT0yNKk857mgLw9eqlzKLggRoZRLi
eoWdyuRcAgf3NlgjMQCrFUQPSKTbAnvvwUgtmQfVsYj79EscaPcMomOkc2oe3Yva
3U4rsY2BpMcFfGXOi81ZoA/8p6tJQGfhQK/YPRGh+q/AWodgavcv/NTaLddxxtJx
5oUxRACw80Udh0ZnXRrBfik0e2fAmSjm7axHqxWKevwM3ytEbPQBmYwAfS3xo2g5
daOryPhn44HbzRp9dJ2wwgLMh8WxSMcA4gwT4RWu8bIrWMVa2ES+kA6U4qdrKjYY
wcyPjgfr7VAap9G8qGAgCJpeMu7Kd1QSCQnwYhcpbe1M
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:31 2026 by rpki-client