Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mmKHzSE8y6aIFnvN2KIypSBE0EY.roa
File: mmKHzSE8y6aIFnvN2KIypSBE0EY.roa (raw, json)
Hash identifier: TqqnpeZxkST2K8vgXliAi3G8EMUXKYAcVJc408hCgTs=
Subject key identifier: 9A:62:87:CD:21:3C:CB:A6:88:16:7B:CD:D8:A2:32:A5:20:44:D0:46
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CACF908A12A7D3F7B40DA724995230B4D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mmKHzSE8y6aIFnvN2KIypSBE0EY.roa
Signing time: Mon 02 Mar 2026 05:15:27 +0000
ROA not before: Mon 02 Mar 2026 05:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214564
IP address blocks: 5.83.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:f9:08:a1:2a:7d:3f:7b:40:da:72:49:95:23:0b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 2 05:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a6287cd213ccba688167bcdd8a232a52044d046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:35:4e:24:f8:83:46:ef:77:da:a5:56:38:
2f:71:f7:06:00:8d:e0:00:a0:e2:77:c6:04:d3:6f:
b6:ba:08:0e:35:1d:c2:f3:73:a8:7e:55:23:88:fe:
ed:db:ff:4e:9d:89:00:14:90:7b:58:3d:c5:9c:b3:
35:33:f3:10:e9:fb:ed:92:bd:75:7a:48:6a:79:13:
30:20:45:59:c8:d5:11:cf:b0:79:b1:58:b8:3d:a3:
a8:45:a6:e6:87:b2:dd:67:ac:da:5f:72:fb:ef:a8:
55:54:60:96:74:fd:83:a5:9e:2d:56:40:f9:5e:bf:
cf:ff:ef:60:64:47:92:70:93:79:b5:84:62:b2:36:
e7:a4:c6:b4:15:ab:ee:ea:9e:26:f4:18:80:66:f2:
c2:f7:94:8e:24:28:ad:c7:0b:2e:57:30:fe:2a:2a:
ca:5d:f8:5c:43:82:c3:0a:8f:a4:e4:8b:0d:f3:9b:
11:8e:dc:34:8d:ed:c2:04:da:d4:0f:f9:75:11:6c:
0d:da:95:bb:bd:da:45:7a:82:f5:15:1d:e0:4f:0c:
f7:74:ff:12:66:6e:fd:b1:07:54:56:7e:fb:03:92:
65:50:09:93:4b:c8:fb:69:fd:b5:f4:cf:a0:54:51:
a7:01:e1:08:98:2c:d0:b0:43:6f:26:57:09:6e:5f:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:62:87:CD:21:3C:CB:A6:88:16:7B:CD:D8:A2:32:A5:20:44:D0:46
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mmKHzSE8y6aIFnvN2KIypSBE0EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.146.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:6f:fa:53:eb:91:6e:37:15:ce:4d:d7:76:fe:c2:98:a8:af:
64:e6:fa:5f:ef:2d:cb:db:29:57:f1:0d:f0:d7:b4:54:80:0a:
57:a3:e9:b8:d6:33:d7:67:e8:ce:47:87:c5:02:db:75:59:15:
80:ee:dd:9e:70:81:a2:ce:fb:a0:97:6e:f4:34:55:ce:8e:bd:
d2:e5:c8:0d:c1:39:9a:00:8e:39:a8:3d:73:8a:09:01:d5:f4:
22:09:92:78:81:13:5f:1c:92:b2:bd:9c:00:21:90:3c:b9:e0:
32:e1:7a:a6:3b:ba:5e:de:f9:64:a8:41:1f:60:a1:e9:11:30:
f3:cc:b4:82:38:72:fd:7b:e9:a4:9f:e6:96:d5:7f:e3:e6:26:
db:4e:53:45:17:d9:26:02:90:17:da:86:48:38:18:c3:d4:16:
4c:77:38:32:e9:d9:ba:cc:9a:80:6f:84:59:e4:db:ff:40:5f:
2c:bd:10:a9:b2:77:bc:05:c6:ae:b5:ab:81:69:8f:8f:90:e0:
63:74:30:c3:19:5b:81:a9:64:67:c9:c6:3c:e0:65:83:e2:cb:
66:8a:c5:07:40:b7:af:14:a5:5a:af:45:67:91:fe:e7:11:cf:
ac:cc:d6:9b:25:ee:07:3c:c9:8b:0d:e7:f1:d5:8c:d9:b8:0b:
47:a5:50:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZys+QihKn0/e0DackmVIwtNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwMzAyMDUxNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTYyODdjZDIxM2NjYmE2ODgxNjdiY2RkOGEyMzJhNTIwNDRkMDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23s1TiT4g0bvd9qlVjgvcfcGAI3g
AKDid8YE02+2uggONR3C83OoflUjiP7t2/9OnYkAFJB7WD3FnLM1M/MQ6fvtkr11
ekhqeRMwIEVZyNURz7B5sVi4PaOoRabmh7LdZ6zaX3L776hVVGCWdP2DpZ4tVkD5
Xr/P/+9gZEeScJN5tYRisjbnpMa0Favu6p4m9BiAZvLC95SOJCitxwsuVzD+KirK
XfhcQ4LDCo+k5IsN85sRjtw0je3CBNrUD/l1EWwN2pW7vdpFeoL1FR3gTwz3dP8S
Zm79sQdUVn77A5JlUAmTS8j7af219M+gVFGnAeEImCzQsENvJlcJbl/UZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJpih80hPMumiBZ7zdiiMqUgRNBGMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvbW1LSHpTRTh5NmFJRm52TjJLSXlwU0JFMEVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVOSMA0G
CSqGSIb3DQEBCwUAA4IBAQB+b/pT65FuNxXOTdd2/sKYqK9k5vpf7y3L2ylX8Q3w
17RUgApXo+m41jPXZ+jOR4fFAtt1WRWA7t2ecIGizvugl270NFXOjr3S5cgNwTma
AI45qD1zigkB1fQiCZJ4gRNfHJKyvZwAIZA8ueAy4XqmO7pe3vlkqEEfYKHpETDz
zLSCOHL9e+mkn+aW1X/j5ibbTlNFF9kmApAX2oZIOBjD1BZMdzgy6dm6zJqAb4RZ
5Nv/QF8svRCpsne8BcautauBaY+PkOBjdDDDGVuBqWRnycY84GWD4stmisUHQLev
FKVar0Vnkf7nEc+szNabJe4HPMmLDefx1YzZuAtHpVAb
-----END CERTIFICATE-----
Generated at Thu Mar 5 23:39:06 2026 by rpki-client