Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/MiU56L_qitmJblw1iBDrCqCvVFg.roa
File: MiU56L_qitmJblw1iBDrCqCvVFg.roa (raw, json)
Hash identifier: knsPFcuq5nrLof7enbcgI/qHAUxtpLnwYjDzKc/c4Xk=
Subject key identifier: 32:25:39:E8:BF:EA:8A:D9:89:6E:5C:35:88:10:EB:0A:A0:AF:54:58
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01A0E999539E4A04541433EBFACC60E65924
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/MiU56L_qitmJblw1iBDrCqCvVFg.roa
Signing time: Mon 28 Sep 2026 19:58:54 +0000
ROA not before: Mon 28 Sep 2026 19:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215826
IP address blocks: 193.233.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:99:53:9e:4a:04:54:14:33:eb:fa:cc:60:e6:59:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Sep 28 19:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=322539e8bfea8ad9896e5c358810eb0aa0af5458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:d4:9a:f3:b8:94:32:9a:eb:37:90:f9:af:
e2:f1:7e:d0:c1:1f:b8:58:9d:0d:26:86:72:d4:56:
ff:c6:6b:d4:bc:aa:05:b4:90:b0:66:9d:ec:ad:c7:
1c:36:d5:bc:6b:d7:64:db:4c:b9:c3:1c:43:82:6f:
1b:a6:b6:bc:75:8e:ee:31:3d:15:48:48:0a:da:95:
15:14:a1:47:3c:6c:11:8f:8b:c1:46:be:0d:6f:de:
11:e3:85:dc:1c:15:ac:f0:71:68:97:37:b3:82:3e:
c2:9c:10:85:ec:d3:e6:ae:f4:18:04:e4:17:08:c2:
05:5c:31:d7:1b:a5:53:f7:b7:84:d6:63:db:74:1c:
9d:35:81:f7:e0:d3:37:cc:b4:e5:c2:29:57:4a:5f:
7e:eb:ce:94:ea:f0:7c:a8:06:f0:4f:a7:f4:9a:dd:
25:41:60:70:b2:ac:32:a3:5f:26:b6:4b:50:92:61:
9d:d8:cd:09:0d:74:3e:3c:8b:96:86:9c:b7:da:3a:
27:c3:7a:df:39:ef:6c:40:cd:2e:9e:12:70:83:5a:
a7:8f:73:5d:a8:b6:fc:50:0e:a3:77:28:43:11:99:
13:1d:99:56:a9:d9:b9:91:f5:2e:e4:0f:36:e8:4f:
8d:6a:7a:d6:7e:5f:f3:01:13:98:96:20:eb:18:04:
98:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:25:39:E8:BF:EA:8A:D9:89:6E:5C:35:88:10:EB:0A:A0:AF:54:58
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/MiU56L_qitmJblw1iBDrCqCvVFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.134.0/24
Signature Algorithm: sha256WithRSAEncryption
68:16:30:9e:8d:9a:87:25:16:b7:7b:fc:11:ba:fc:a5:93:da:
8b:2c:d9:ae:52:f9:37:e4:1b:2e:3b:13:bd:7e:fd:b8:c6:5e:
3b:e9:32:6e:f7:12:b3:a1:21:94:2f:ab:f2:7c:5e:35:5c:6b:
9e:cc:fa:a4:e1:d3:64:0d:cc:38:b4:8c:34:83:6e:b4:1e:2a:
01:ea:84:a4:52:24:55:94:f3:10:b3:5b:8b:e9:fc:c1:3c:cf:
5a:d7:aa:c9:b8:ba:5e:59:19:cb:e2:cc:a6:f0:ea:24:a7:1b:
d7:b0:d4:b0:34:b8:80:71:78:96:0d:21:94:d8:d1:b5:7a:f7:
a7:a1:ee:f5:5a:0e:e2:12:86:86:61:55:59:92:4d:e4:16:15:
77:8f:33:4b:b1:f9:6f:d1:6e:c9:fa:f5:ae:c2:a4:5b:8e:2a:
90:15:f3:cc:54:0c:c4:44:29:d7:d8:85:7c:ed:04:66:3d:5d:
1a:28:b0:f2:5a:6e:7d:8d:41:63:db:17:1e:3c:c4:40:33:36:
bb:9a:3f:22:f3:7e:b7:78:3e:6b:ce:b4:7a:dc:cd:4f:75:3b:
16:a1:06:c8:c3:02:36:4a:d2:c8:7a:e7:57:e5:d8:76:79:2e:
0b:a1:60:55:65:8d:10:9c:d9:79:18:41:78:83:33:ad:fe:0d:
cd:df:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:15:28 2026 by rpki-client