Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mZPRyUQnGiB7LkBlefGeGQXCWCY.roa
File: mZPRyUQnGiB7LkBlefGeGQXCWCY.roa (raw, json)
Hash identifier: HL59o+BeCIRcxv6yuiIx31M1UsndAiSdRZbQkWJcsvY=
Subject key identifier: 99:93:D1:C9:44:27:1A:20:7B:2E:40:65:79:F1:9E:19:05:C2:58:26
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A13DD15FE53F7C995A580934EED463749E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mZPRyUQnGiB7LkBlefGeGQXCWCY.roa
Signing time: Thu 15 Oct 2026 04:28:13 +0000
ROA not before: Thu 15 Oct 2026 04:28:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36007
IP address blocks: 89.144.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:d1:5f:e5:3f:7c:99:5a:58:09:34:ee:d4:63:74:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 15 04:28:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9993d1c944271a207b2e406579f19e1905c25826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:ac:63:cb:63:ce:97:34:7a:2a:28:89:96:
99:7f:78:d4:b6:d9:43:1e:96:e6:17:d5:fa:de:16:
bb:29:11:66:3a:a0:61:3a:00:0b:2b:9e:7d:97:0d:
38:ef:ce:e0:00:e0:bf:2c:01:7b:5a:eb:17:12:ae:
37:05:de:de:3e:1c:4d:ce:93:ab:58:a4:f5:e8:c2:
1f:49:87:b8:63:e9:4d:44:3c:a4:8b:03:ec:d7:44:
9f:38:bb:58:29:60:80:4c:80:21:30:64:8a:fe:d3:
e4:52:60:87:cb:32:67:66:f5:61:f2:2d:ea:ce:86:
d5:88:60:0d:76:c1:fa:bb:64:8f:a2:28:14:85:d3:
9f:d4:92:3e:51:a9:2b:57:b2:e2:f8:3e:5f:e3:ee:
ca:d1:a3:15:08:7e:64:eb:35:44:06:26:2f:4b:b8:
2d:e6:82:7f:5a:d2:a7:f3:16:2f:13:a8:d0:ff:39:
d6:05:78:0a:5d:b8:7c:85:7d:6e:69:0b:cd:96:50:
1e:e5:97:4c:bd:82:f6:63:c9:6f:92:94:00:10:e2:
7d:e6:de:65:57:af:f5:9b:cc:9d:f9:04:d3:b5:d4:
11:ee:ed:d3:05:a9:e7:e2:9f:2f:f0:4a:fd:48:96:
44:3e:0f:32:2f:8e:79:9f:b9:1f:3c:d0:ff:67:61:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:93:D1:C9:44:27:1A:20:7B:2E:40:65:79:F1:9E:19:05:C2:58:26
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mZPRyUQnGiB7LkBlefGeGQXCWCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.18.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:7c:8a:6e:11:31:68:fb:a2:54:4b:de:91:cb:85:48:e4:dc:
a4:56:e0:44:bd:10:3e:de:64:af:34:ae:cc:a7:15:c2:2b:fc:
dd:a7:d2:c4:a6:67:70:01:8a:c6:1a:e8:00:7f:fc:0b:38:12:
68:1d:6b:a6:3e:ce:3c:06:1b:86:40:60:b1:7a:ff:d6:4f:4f:
9b:6f:5f:24:07:d0:88:07:27:b1:72:cb:a0:eb:4a:fb:92:cc:
fd:7f:ed:f7:7e:48:27:91:82:1e:16:b4:58:24:0b:e5:b6:62:
b9:4f:2f:ad:f4:2d:91:65:1a:fa:c2:ea:d9:9c:23:2c:ec:1f:
da:1e:20:ec:09:6e:11:11:be:e4:ce:94:c7:c1:ed:5c:a5:43:
49:9b:92:a3:b3:3b:e2:10:37:1c:de:e4:ec:f7:de:48:79:d8:
9b:bd:e7:d5:ee:d3:6e:a8:b3:74:78:dd:4c:b6:a4:69:2e:47:
78:f1:0e:34:35:1e:68:f9:04:41:3f:10:ca:ac:4f:11:dd:f3:
e3:9b:77:8b:7b:89:af:90:84:45:b7:ab:20:5b:05:d7:93:f7:
31:d4:d1:de:5c:44:d4:34:9e:6b:32:64:60:de:e9:8a:fa:d1:
18:64:a8:70:38:c3:84:7d:fd:a5:ec:6e:00:5c:ed:82:ba:cb:
c4:73:1e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:51:53 2026 by rpki-client