Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/mz1Jb3T4ZolM6uN1zf4sUfohQww.roa
File: mz1Jb3T4ZolM6uN1zf4sUfohQww.roa (raw, json)
Hash identifier: RoeR+WJClo/hYUuNplSTfmQx/xOVZakfbpqBs2hXjFs=
Subject key identifier: 9B:3D:49:6F:74:F8:66:89:4C:EA:E3:75:CD:FE:2C:51:FA:21:43:0C
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 01A05C9698775252796D8A0DE0160841766A
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/mz1Jb3T4ZolM6uN1zf4sUfohQww.roa
Signing time: Tue 01 Sep 2026 10:49:28 +0000
ROA not before: Tue 01 Sep 2026 10:49:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 185.56.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:96:98:77:52:52:79:6d:8a:0d:e0:16:08:41:76:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Sep 1 10:49:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b3d496f74f866894ceae375cdfe2c51fa21430c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:c8:68:a8:a0:b2:96:4f:22:b2:38:b8:9c:
35:87:33:15:18:88:2b:23:e9:7a:a3:36:f1:ea:00:
09:7d:8b:f4:cb:f0:1e:12:e9:af:76:d6:eb:c0:5c:
71:df:ed:ad:43:ae:17:ce:79:02:5b:c4:f1:9c:d3:
06:75:b6:02:12:b8:bf:07:1b:5a:d7:67:a7:4b:c9:
c6:24:a3:44:48:c8:3a:db:3e:6b:89:fa:e9:2e:fe:
e2:d7:21:5b:f5:86:33:39:e8:c1:5e:03:da:b9:09:
56:f1:86:d9:e5:06:c0:59:ee:e9:b1:aa:4e:fb:b7:
77:6f:45:87:63:f0:39:0f:0a:06:28:f7:d0:15:83:
ce:16:50:3c:b6:4c:13:d8:f2:46:dc:68:0a:1a:e7:
cd:be:13:db:3a:a8:66:56:cc:ff:2b:5f:79:c7:8e:
88:85:cf:7c:93:10:e0:b9:23:1f:4e:24:02:45:c7:
17:76:56:44:29:88:0c:53:4e:fd:25:62:fb:9c:d8:
34:17:e2:20:7e:4b:5a:8a:fd:b5:32:60:48:16:63:
b7:8b:ce:67:b9:b7:d9:fa:d2:22:36:cc:07:d3:42:
d3:fb:d8:c7:cc:61:3f:3f:e9:15:37:2d:5a:2b:46:
8a:af:fe:3b:f8:47:08:50:d7:4e:42:b8:c6:19:1c:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3D:49:6F:74:F8:66:89:4C:EA:E3:75:CD:FE:2C:51:FA:21:43:0C
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/mz1Jb3T4ZolM6uN1zf4sUfohQww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.46.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:77:83:1d:9e:6e:52:18:3c:3f:b3:6d:87:cc:0e:ac:f3:b5:
43:8f:53:46:4a:b0:64:38:89:7b:11:19:3a:9a:d4:ba:43:3c:
94:aa:a6:46:2d:6d:50:17:d1:0b:4e:d1:7b:78:b3:16:82:dd:
f2:e6:98:4b:fd:68:44:c3:7d:70:ac:0e:26:59:4e:04:2a:cb:
a4:3a:5e:0e:4b:82:78:cf:9a:df:08:a7:59:63:cb:5a:83:dd:
ba:90:51:ff:f0:7c:23:16:6d:fb:79:bf:ca:1c:2d:4d:7f:24:
1b:21:4c:28:89:18:7f:bc:0b:c9:91:0d:5f:d5:97:de:fb:1d:
33:29:cc:bd:cf:f7:cb:dc:d2:7a:39:00:63:37:65:da:5a:42:
32:6f:37:98:62:88:df:9c:e9:e9:f9:38:c1:f3:7d:56:ea:e8:
af:21:39:a4:9e:79:83:4f:5c:b7:21:2b:16:39:47:54:cd:4d:
b4:25:b4:99:2a:43:b3:93:fa:4b:5a:3e:87:64:13:cd:0f:4b:
e8:0a:f1:c9:52:d9:ac:30:17:cb:8c:b7:08:25:52:5d:63:bd:
e6:fb:91:d7:8c:65:ac:78:4b:e0:4e:4f:fc:f3:f8:cb:42:f9:
88:54:d3:14:9b:e0:ad:49:cc:3a:24:44:d4:f8:1d:75:63:5d:
3b:31:62:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:42 2026 by rpki-client