Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mGO6BpHEOTyu4qeAeQs4cCM8ZWY.roa
File: mGO6BpHEOTyu4qeAeQs4cCM8ZWY.roa (raw, json)
Hash identifier: qoBr7mm+mZ81czNGF1y5Vpk29iGkBo7vunLsNw7EssA=
Subject key identifier: 98:63:BA:06:91:C4:39:3C:AE:E2:A7:80:79:0B:38:70:23:3C:65:66
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A07A34462754D1BC9DEC6D2A30D89E5F66
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mGO6BpHEOTyu4qeAeQs4cCM8ZWY.roa
Signing time: Mon 07 Sep 2026 04:50:41 +0000
ROA not before: Mon 07 Sep 2026 04:50:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 85.31.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 05:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:34:46:27:54:d1:bc:9d:ec:6d:2a:30:d8:9e:5f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 7 04:50:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9863ba0691c4393caee2a780790b3870233c6566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:ce:a5:0b:89:4f:72:ec:37:4e:b6:9b:86:
24:d3:c3:05:9e:36:70:ec:a1:06:5c:63:dc:6d:7f:
4d:ad:63:3c:e4:95:ea:d1:7d:c7:ce:42:8c:45:4d:
40:0c:39:32:7c:72:68:9a:f4:9b:30:95:1a:09:3c:
38:6a:f7:e2:7f:20:fd:70:ea:b5:0e:4f:f7:73:89:
32:f8:c2:6e:05:32:f6:f4:a0:c8:c1:58:bd:87:30:
66:4f:99:9f:2f:30:c1:fe:66:c5:96:d7:d7:c7:9c:
39:30:54:b1:d6:c3:f9:74:01:7b:0f:0c:47:44:c9:
14:0f:07:72:87:66:b1:51:b5:f6:94:2c:c4:46:a6:
bc:c0:14:4d:5f:df:81:82:84:61:2a:d2:7a:b2:eb:
ef:40:9a:7d:24:13:14:61:89:22:cf:49:bf:74:1c:
bd:cc:68:a7:b9:ea:f7:54:48:fd:a7:fb:01:cc:d0:
c8:c0:04:92:d0:4c:b5:dd:9a:5a:8d:b0:49:44:6a:
a8:72:80:09:b7:4c:05:be:01:75:ac:aa:2b:16:e8:
e3:94:05:40:2d:23:82:39:b5:62:df:77:7c:f0:a5:
d1:11:86:ac:1a:f5:56:aa:74:5f:7e:25:c5:ed:6c:
97:e2:e7:bf:fb:e7:5d:14:f4:be:4d:53:f1:43:96:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:63:BA:06:91:C4:39:3C:AE:E2:A7:80:79:0B:38:70:23:3C:65:66
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mGO6BpHEOTyu4qeAeQs4cCM8ZWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.46.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e3:34:eb:9f:30:a4:da:b5:d3:b9:d9:ae:94:19:06:c0:c4:
62:da:d9:33:65:b6:ec:4c:f1:74:2c:2e:ea:be:6b:79:7b:49:
73:a0:05:14:7d:79:e5:24:15:3b:69:71:81:09:4f:9b:cd:fe:
85:ec:0e:51:be:d6:7c:5a:57:0d:11:1f:6d:2f:10:8e:2c:a2:
90:30:09:5c:e8:23:df:e6:de:23:7a:29:84:e5:0a:6c:0c:38:
8e:20:5a:bd:6e:47:10:5a:14:c6:93:c8:b4:ec:72:c1:ed:59:
bf:61:b5:28:40:7f:e1:37:ad:65:51:b4:4f:15:5d:c1:e0:44:
70:92:9d:b5:cc:45:3f:f7:44:ee:50:e8:e5:7a:50:b7:b1:1e:
dd:f6:c4:b7:2d:e4:c2:e2:43:32:76:73:7e:94:f1:0e:60:0f:
56:06:3d:7a:78:01:30:a1:d4:33:23:d3:6a:cb:d1:c3:e8:5e:
ab:0a:6b:87:99:b1:0a:e3:d3:1c:4b:14:d2:11:1d:eb:a3:02:
3b:4d:cd:bd:57:40:97:91:7f:69:07:de:2d:29:c1:3e:dd:97:
11:33:a5:ac:32:f3:3d:ee:0f:32:9c:0a:58:ef:50:38:20:a3:
c8:cc:c2:78:23:a6:ee:f6:93:be:fd:30:e7:c5:69:38:56:7b:
93:85:2b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 12:34:25 2026 by rpki-client