Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MwhkRI9Yo1hZlNKZqt5BzaLoBZQ.roa
File: MwhkRI9Yo1hZlNKZqt5BzaLoBZQ.roa (raw, json)
Hash identifier: IhvWHFB/Edf3xkXOH4PyX3R8u1tTe8uA2kOriBM952o=
Subject key identifier: 33:08:64:44:8F:58:A3:58:59:94:D2:99:AA:DE:41:CD:A2:E8:05:94
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A12E5921A5199A398F5B0FD1358BCFBE14
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MwhkRI9Yo1hZlNKZqt5BzaLoBZQ.roa
Signing time: Mon 12 Oct 2026 04:22:35 +0000
ROA not before: Mon 12 Oct 2026 04:22:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212341
IP address blocks: 89.144.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:59:21:a5:19:9a:39:8f:5b:0f:d1:35:8b:cf:be:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 12 04:22:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=330864448f58a3585994d299aade41cda2e80594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:c4:72:ce:12:20:66:ed:0c:19:1c:e4:3f:
8e:c2:bf:d4:c7:93:4b:d0:d5:f2:b4:6f:22:43:90:
c4:28:b2:89:6b:24:42:fa:98:0a:4f:ba:1d:67:75:
b8:2b:2d:a1:c7:83:1a:54:df:c8:24:ee:c6:46:1a:
74:28:49:de:96:3e:eb:34:93:2b:14:0d:18:51:c2:
f1:b3:da:fb:8f:e5:22:5f:bf:5c:ce:3f:51:1e:be:
ae:21:cc:06:6d:11:e1:12:49:08:ed:e4:cf:e5:d9:
35:5d:36:ff:09:08:78:e7:8a:bc:59:10:a2:09:73:
67:51:09:23:e4:e0:00:5f:b5:a6:e5:09:c3:b5:ae:
bf:ba:e6:20:35:b4:fc:36:d6:6c:3a:5b:8e:8d:d8:
b3:8d:17:c4:cb:83:6f:d7:dd:86:8e:e5:70:b5:d5:
3a:c7:c9:c3:cb:09:0c:50:db:d8:4b:38:21:ac:b4:
94:cc:08:18:9a:24:5f:89:a0:3f:39:92:a5:47:0a:
2f:0d:88:ed:7a:60:e3:56:0b:8a:de:e5:63:00:eb:
df:7f:7e:23:9e:8d:55:af:d6:ef:f3:cf:e4:20:ec:
f8:16:9c:19:4b:65:b4:ac:87:4b:bd:ca:d8:7c:6d:
43:ab:99:20:85:3f:f6:c4:cf:4c:46:af:a9:18:6d:
50:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:08:64:44:8F:58:A3:58:59:94:D2:99:AA:DE:41:CD:A2:E8:05:94
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MwhkRI9Yo1hZlNKZqt5BzaLoBZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.2.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b4:93:c1:74:d0:81:4b:f4:2f:5a:12:7e:a4:73:13:f2:3e:
d9:4d:ce:88:5d:3e:df:dc:16:54:c9:2e:3b:3f:93:a3:67:a7:
4b:f2:bc:07:9e:97:84:a4:28:62:f2:90:c7:aa:14:82:86:c1:
b0:f0:1a:93:1f:eb:fb:92:fd:87:fb:73:ab:a6:b4:9c:5d:2d:
de:ce:ec:69:2a:4b:13:6d:ca:03:e5:7c:cf:e5:8a:94:7b:2a:
d4:19:61:32:70:c5:d3:18:ab:28:93:43:57:7d:8b:33:70:7a:
33:28:eb:fe:2f:46:4e:7a:ef:8b:5b:72:5f:5f:46:ec:0e:85:
16:d3:06:85:a4:61:c4:0f:09:92:d3:f8:3c:96:06:98:23:18:
71:d8:cc:01:b8:8f:b8:e2:97:2d:41:ab:9f:50:89:43:98:bf:
73:a6:a5:3e:40:26:18:28:17:4d:65:cb:32:10:56:ab:5a:a8:
9a:ce:79:8b:6a:a5:5d:77:5c:37:d6:86:6b:dd:79:62:c5:2b:
d1:bf:55:cd:08:e1:ff:85:7a:24:16:1a:b0:93:01:c5:b4:b6:
1b:dd:cc:63:76:49:00:50:b6:fe:23:ad:ba:60:d4:12:3b:95:
b6:44:7e:0d:a9:7e:6b:cc:97:14:36:37:72:6a:be:ce:90:04:
2b:a5:ce:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEuWSGlGZo5j1sP0TWLz74UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDEyMDQyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzA4NjQ0NDhmNThhMzU4NTk5NGQyOTlhYWRlNDFjZGEyZTgwNTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNnEcs4SIGbtDBkc5D+Owr/Ux5NL
0NXytG8iQ5DEKLKJayRC+pgKT7odZ3W4Ky2hx4MaVN/IJO7GRhp0KEnelj7rNJMr
FA0YUcLxs9r7j+UiX79czj9RHr6uIcwGbRHhEkkI7eTP5dk1XTb/CQh454q8WRCi
CXNnUQkj5OAAX7Wm5QnDta6/uuYgNbT8NtZsOluOjdizjRfEy4Nv192GjuVwtdU6
x8nDywkMUNvYSzghrLSUzAgYmiRfiaA/OZKlRwovDYjtemDjVguK3uVjAOvff34j
no1Vr9bv88/kIOz4FpwZS2W0rIdLvcrYfG1Dq5kghT/2xM9MRq+pGG1QPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDMIZESPWKNYWZTSmareQc2i6AWUMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvTXdoa1JJOVlvMWhabE5LWnF0NUJ6YUxvQlpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWZACMA0G
CSqGSIb3DQEBCwUAA4IBAQATtJPBdNCBS/QvWhJ+pHMT8j7ZTc6IXT7f3BZUyS47
P5OjZ6dL8rwHnpeEpChi8pDHqhSChsGw8BqTH+v7kv2H+3OrprScXS3ezuxpKksT
bcoD5XzP5YqUeyrUGWEycMXTGKsok0NXfYszcHozKOv+L0ZOeu+LW3JfX0bsDoUW
0waFpGHEDwmS0/g8lgaYIxhx2MwBuI+44pctQaufUIlDmL9zpqU+QCYYKBdNZcsy
EFarWqiaznmLaqVdd1w31oZr3XlixSvRv1XNCOH/hXokFhqwkwHFtLYb3cxjdkkA
ULb+I626YNQSO5W2RH4NqX5rzJcUNjdyar7OkAQrpc6c
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:32:12 2026 by rpki-client