Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/MX5dZjmRhppvWEFD2WrlNbkj9Eo.roa
File: MX5dZjmRhppvWEFD2WrlNbkj9Eo.roa (raw, json)
Hash identifier: blK8+6tOSfWU/roFJ6xx5fVNBHhlL8RA+sVhQOK1Yz8=
Subject key identifier: 31:7E:5D:66:39:91:86:9A:6F:58:41:43:D9:6A:E5:35:B9:23:F4:4A
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 019FD6125806033C41F6042FA1463EC3F37C
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/MX5dZjmRhppvWEFD2WrlNbkj9Eo.roa
Signing time: Thu 06 Aug 2026 07:55:54 +0000
ROA not before: Thu 06 Aug 2026 07:55:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210064
IP address blocks: 91.192.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:12:58:06:03:3c:41:f6:04:2f:a1:46:3e:c3:f3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Aug 6 07:55:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=317e5d663991869a6f584143d96ae535b923f44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:c3:3d:3b:05:54:8a:39:b3:b1:17:76:ed:
64:4d:9d:81:9f:2b:25:53:51:20:fb:f9:95:fd:9a:
2c:44:fe:4c:c5:71:c6:0f:c5:09:79:ca:6d:ad:24:
b8:21:09:80:72:3d:80:8b:c1:52:65:88:06:67:0a:
11:fa:a8:20:d7:50:ea:aa:81:12:59:e3:09:4b:f5:
31:41:e5:cb:8a:0d:31:76:12:69:49:0e:f5:30:4a:
ef:b8:2c:f7:01:bf:e7:d3:be:94:6e:41:7c:25:26:
31:83:a8:bd:4f:c0:cf:46:ba:5c:eb:cf:02:9e:9a:
38:d8:5e:c2:cd:cf:18:68:ca:09:f8:da:49:94:3a:
35:62:6a:8c:94:a7:4a:60:eb:e6:90:6e:55:a0:e7:
b5:41:34:74:bc:a0:d0:4d:af:5e:c3:4e:21:b6:6e:
e9:7c:c8:56:f5:8d:1e:46:e3:b5:81:d7:13:c8:3c:
54:26:fc:7e:c0:b2:d5:09:6e:79:d6:1b:11:10:b9:
20:bb:13:f5:28:f8:43:d9:4d:88:2a:05:9b:44:94:
db:83:10:2e:d7:10:1d:ba:3c:da:e3:78:d1:f1:bd:
b5:38:20:80:d9:e5:03:ad:5b:2b:a4:95:33:f7:ac:
75:30:1d:22:6a:a5:1c:f4:63:c5:ce:0d:0f:d2:e1:
a6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7E:5D:66:39:91:86:9A:6F:58:41:43:D9:6A:E5:35:B9:23:F4:4A
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/MX5dZjmRhppvWEFD2WrlNbkj9Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.160.0/24
Signature Algorithm: sha256WithRSAEncryption
62:21:aa:a5:46:9b:da:05:07:a7:c6:e5:e3:eb:8c:20:1a:39:
17:c8:20:39:23:59:eb:d2:23:d5:78:8c:19:04:f5:22:15:0b:
be:98:d9:9a:1e:5b:7f:23:23:70:67:d7:5a:74:82:e7:8c:10:
e3:bf:7a:fa:fd:87:47:26:dc:cc:e7:bd:e9:bc:02:cc:c1:00:
15:52:57:69:46:dc:02:70:93:01:72:ad:f1:bb:58:00:0e:7c:
9f:e1:fc:30:cd:9e:03:71:98:10:ee:b4:a9:52:25:39:0d:89:
ca:70:ed:68:fe:ff:cc:2d:60:5c:63:86:a2:42:6e:48:af:ee:
a0:d5:9c:1d:d7:ca:fa:b0:00:bf:c9:fe:a0:f5:3a:cc:7d:ad:
21:e4:5e:65:66:4d:f4:47:b1:ea:3c:21:48:26:cb:b1:5d:1a:
2c:08:79:0d:57:f9:5b:53:f8:44:3d:67:3e:a1:47:f6:61:8e:
50:17:d5:2b:38:c0:bc:dd:6a:6c:f0:b8:65:9e:42:86:33:99:
32:7a:d0:74:02:04:2f:46:65:db:96:0c:c0:51:31:45:a0:ca:
86:76:40:a2:74:5e:39:8c:80:d6:9d:bf:0d:e8:d7:50:26:e5:
78:b5:0d:93:1c:49:4f:db:34:b0:66:b6:9b:43:7e:e8:ec:a6:
c6:e7:20:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:48:22 2026 by rpki-client