Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mfy62Wui1MuENqxFqf8t3SAK3mY.roa
File: mfy62Wui1MuENqxFqf8t3SAK3mY.roa (raw, json)
Hash identifier: wpOFOr8saSJezH6CX2QVRq0oFsLHzBDc366AO1PVhc8=
Subject key identifier: 99:FC:BA:D9:6B:A2:D4:CB:84:36:AC:45:A9:FF:2D:DD:20:0A:DE:66
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D0A4AD96FE297A106F6377E7AB0D6B054
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mfy62Wui1MuENqxFqf8t3SAK3mY.roa
Signing time: Fri 20 Mar 2026 08:09:30 +0000
ROA not before: Fri 20 Mar 2026 08:09:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214438
IP address blocks: 83.143.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:4a:d9:6f:e2:97:a1:06:f6:37:7e:7a:b0:d6:b0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 20 08:09:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99fcbad96ba2d4cb8436ac45a9ff2ddd200ade66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:8f:3a:59:d0:73:16:15:19:01:5e:28:11:
2c:fa:b5:11:5c:f3:ba:46:b7:1e:d6:94:ee:49:7e:
e1:e2:dd:e8:7a:5f:30:01:c7:f2:ec:3e:0e:e6:2a:
9a:29:6e:82:c1:0c:50:6b:9b:bc:63:cb:ef:fe:b2:
10:7b:bf:2b:00:11:93:6d:69:51:b9:af:b4:b0:ea:
d2:a3:36:65:27:64:65:e3:e0:e2:61:af:ea:8e:42:
aa:b5:a5:fe:39:33:56:cd:1b:f3:dc:d8:1f:ba:8d:
e5:30:65:fb:74:f8:77:bb:77:7c:f1:07:55:55:ba:
0c:27:a3:bd:ff:0b:75:28:06:57:73:d3:57:2f:bf:
40:13:4f:dd:f7:43:84:b0:f5:f4:6a:54:d6:82:3e:
0c:28:6f:80:24:97:b5:87:50:7b:4c:6a:43:71:17:
a0:f3:cb:b7:5e:46:84:0a:03:d2:60:17:44:b3:ff:
4f:3d:b5:11:fc:5f:59:cd:5e:d2:a5:47:f2:99:52:
91:04:61:38:e4:89:76:61:b0:23:10:d7:ce:58:2d:
02:6b:94:de:f6:70:c7:1b:22:10:a8:e6:b5:df:50:
05:87:34:42:a6:b8:a9:53:32:7d:72:4c:62:3c:04:
d5:84:e3:29:83:48:34:e2:1b:42:c0:2b:74:a0:27:
f6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FC:BA:D9:6B:A2:D4:CB:84:36:AC:45:A9:FF:2D:DD:20:0A:DE:66
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mfy62Wui1MuENqxFqf8t3SAK3mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:3e:c3:45:6c:01:a9:f3:b2:98:9b:35:a8:a5:cc:4c:82:a7:
4b:56:df:15:1e:9e:c1:d7:00:36:70:71:2d:ec:03:78:0f:a0:
28:69:22:a5:92:68:58:73:a0:1d:13:da:c4:95:b1:40:df:10:
b9:94:f9:d7:e0:0a:4d:7f:e6:4f:7c:5f:22:5c:d3:86:10:13:
50:25:48:5a:de:ba:fc:90:52:00:06:9b:6f:0e:2b:29:31:e9:
4a:27:13:52:28:c5:d2:fd:d4:24:f1:46:f8:ac:74:f0:b7:ee:
13:c1:0d:c3:c1:12:88:2c:ed:79:d6:46:a9:ea:52:9c:7b:85:
7f:50:c1:b4:ef:81:80:b9:5b:52:b8:4c:45:93:e9:ab:09:19:
71:20:66:94:e6:48:40:f5:31:d9:c8:4e:9a:3e:94:e7:70:bd:
f9:e1:3a:cb:f6:4b:18:fc:20:0d:5b:15:e7:d5:35:30:5b:96:
a4:a3:df:d2:38:d9:91:71:ce:b8:18:b9:02:7f:a7:5b:4b:63:
95:fe:2d:0e:dc:d4:50:2a:e9:6f:6c:cc:a5:eb:1f:c5:5d:e5:
4e:a4:cd:20:5e:10:40:4e:dc:73:e2:0f:1c:7f:e9:9e:62:11:
07:e6:c5:28:bb:1c:78:73:59:c6:ac:25:b7:01:14:e8:a7:89:
fa:85:30:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:22:41 2026 by rpki-client