Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/mcBG1OhhxrtDCLZbnbdmL8YYj1c.roa
File: mcBG1OhhxrtDCLZbnbdmL8YYj1c.roa (raw, json)
Hash identifier: VU83ADSXkXkgxpUSiqeNZ14qzvTFwfPzksOEUTczOM0=
Subject key identifier: 99:C0:46:D4:E8:61:C6:BB:43:08:B6:5B:9D:B7:66:2F:C6:18:8F:57
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 01A07D7AE1A75CEA1CE9D8F87731283B54DC
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/mcBG1OhhxrtDCLZbnbdmL8YYj1c.roa
Signing time: Mon 07 Sep 2026 20:06:40 +0000
ROA not before: Mon 07 Sep 2026 20:06:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215366
IP address blocks: 193.188.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:7a:e1:a7:5c:ea:1c:e9:d8:f8:77:31:28:3b:54:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Sep 7 20:06:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99c046d4e861c6bb4308b65b9db7662fc6188f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:1d:61:49:dc:35:bd:1b:9f:53:16:27:09:
2b:2d:a7:b1:c8:89:55:09:da:0e:e2:ae:7e:d2:dc:
1a:82:74:0b:b5:59:30:56:15:78:3c:41:11:76:b6:
a4:91:0f:81:90:03:98:4f:c1:d3:a5:18:fb:5d:00:
2c:0c:27:e5:e6:f6:af:78:93:5f:71:d3:d1:6e:1f:
a6:c8:0f:a9:53:e0:90:74:f6:09:dd:59:9a:29:09:
5d:d7:c2:9f:7a:2d:a9:b5:a3:90:5f:f7:a4:b5:71:
39:ea:95:2d:bc:83:80:88:0b:c5:da:a3:66:11:9e:
ee:df:63:18:58:a1:77:de:06:25:34:ea:b0:e0:73:
b4:47:bf:53:10:3d:74:5b:29:51:cc:2c:10:66:bb:
19:2a:45:1a:22:54:1c:8b:38:db:04:fb:be:8f:95:
be:40:28:29:49:bb:56:a7:8a:12:1a:c2:a2:3e:70:
3b:e4:2c:9c:5f:5a:59:a0:c4:16:ae:2f:69:39:94:
c9:2a:87:fa:66:b7:38:44:51:b6:23:69:13:f5:20:
0f:0b:ad:cf:b4:84:ee:c8:ce:97:b1:e1:f4:ef:f7:
84:03:0c:6c:93:ab:a9:8d:57:22:46:36:b5:35:49:
e5:f1:b6:47:ba:0b:90:ed:73:c1:12:66:cb:ae:a8:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C0:46:D4:E8:61:C6:BB:43:08:B6:5B:9D:B7:66:2F:C6:18:8F:57
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/mcBG1OhhxrtDCLZbnbdmL8YYj1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.194.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:bd:5b:c7:13:86:d3:40:f8:38:07:fe:9f:cb:28:22:73:2a:
57:26:2e:6c:78:ac:c3:de:6e:9c:36:3e:06:0b:ba:dc:13:50:
f4:8d:c7:47:81:3d:1d:9d:94:bf:87:3e:f3:55:2d:13:d2:f4:
4e:31:27:f9:2f:14:2d:bb:28:b8:18:e0:2d:34:a4:47:63:e8:
02:b4:47:d2:f6:f2:fa:38:14:5a:27:b7:84:0e:b4:b5:3c:ab:
84:f7:5a:bf:ab:7c:f1:e4:48:cf:17:f3:ef:12:17:b8:3a:1c:
38:b7:32:fb:68:1a:66:cf:4e:b9:72:b5:b0:86:61:56:14:91:
66:ec:42:7f:ea:68:2f:e2:0b:78:87:6d:87:a4:1e:63:20:ef:
dd:75:26:aa:14:89:ee:d0:ba:00:a3:6c:fd:a7:60:02:f6:fb:
e5:69:e6:7a:4a:c6:e9:dc:7c:57:b4:a9:79:1b:29:2a:ef:72:
43:c0:e5:1d:48:8d:1a:f6:97:f3:54:ee:2c:47:55:33:44:3d:
69:dd:43:87:73:bc:e4:42:56:a9:42:bc:92:c0:4b:53:9c:43:
e1:ee:3d:96:f4:65:91:d4:83:34:57:76:54:29:2d:25:11:80:
46:a9:05:35:12:88:34:7f:8f:b9:e3:8e:a0:b5:43:82:fe:18:
61:a2:b7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:52:40 2026 by rpki-client