Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/MhcXZnTtDfYiJDVELcnkCFBBkXs.roa
File: MhcXZnTtDfYiJDVELcnkCFBBkXs.roa (raw, json)
Hash identifier: MmN60FYZ1eRqdDs1XAaIfFW9D0B2EiB8PeXLjNIcdRs=
Subject key identifier: 32:17:17:66:74:ED:0D:F6:22:24:35:44:2D:C9:E4:08:50:41:91:7B
Certificate issuer: /CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Certificate serial: 019E4F6B5D7D31984D2D62ED0CDB27A55741
Authority key identifier: 2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/MhcXZnTtDfYiJDVELcnkCFBBkXs.roa
Signing time: Fri 22 May 2026 11:21:36 +0000
ROA not before: Fri 22 May 2026 11:21:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211040
IP address blocks: 87.238.254.0/23 maxlen: 23
87.238.254.0/24 maxlen: 24
87.238.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:6b:5d:7d:31:98:4d:2d:62:ed:0c:db:27:a5:57:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8ff3614fd0c8a8b7e963ccf20c3af085e2bace
Validity
Not Before: May 22 11:21:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3217176674ed0df6222435442dc9e4085041917b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:93:2e:52:46:7b:14:8d:94:8e:ad:97:e5:
7d:d3:7f:81:7f:ee:77:41:bf:3c:8d:85:ed:7f:96:
c9:ee:2d:d3:50:20:e3:94:51:25:7a:17:50:4a:7e:
02:be:dd:9c:ac:f7:c4:49:ee:27:e1:5b:15:3c:b3:
41:c4:80:fb:78:be:bd:10:24:47:96:6e:18:e4:71:
5e:01:01:f1:d9:bc:d9:63:cc:73:10:0c:06:89:a4:
7f:60:49:b9:09:4d:e2:2a:5a:0f:09:a8:3a:5d:1c:
cc:26:5f:b2:bf:07:15:b7:ba:77:32:32:a3:86:80:
95:9a:3c:f4:cd:35:c1:d3:4b:23:c5:cc:66:9e:bf:
2b:d2:e4:b8:24:51:d3:8b:3b:34:c7:6b:68:ad:82:
06:51:1b:e7:1c:c0:92:de:06:25:43:6e:ec:42:c7:
d0:60:8c:ed:f5:ed:91:cc:aa:d8:e5:da:6c:76:4d:
a3:64:b1:30:a2:36:a3:f4:de:ea:7d:40:02:97:3a:
9b:05:e3:43:df:93:8b:d2:7d:bf:66:21:72:58:da:
e9:04:8a:8e:98:53:52:5a:2a:3e:a0:2f:85:d9:0d:
b1:bf:07:cb:36:42:be:3f:de:21:61:50:d4:eb:22:
31:5b:0b:aa:f1:37:e2:d4:96:9b:3f:97:2b:28:10:
c7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:17:66:74:ED:0D:F6:22:24:35:44:2D:C9:E4:08:50:41:91:7B
X509v3 Authority Key Identifier:
keyid:2C:8F:F3:61:4F:D0:C8:A8:B7:E9:63:CC:F2:0C:3A:F0:85:E2:BA:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI_zYU_QyKi36WPM8gw68IXius4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/MhcXZnTtDfYiJDVELcnkCFBBkXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/32024d-d3e7-4ad0-8a91-3318504c7750/1/LI_zYU_QyKi36WPM8gw68IXius4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.254.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:86:83:83:c4:35:3f:5c:39:7d:d2:7d:de:83:12:c0:e5:ed:
f9:d8:5f:3c:74:1b:0b:03:a8:f8:2b:c0:2b:56:11:42:5d:81:
ec:05:96:82:56:61:52:c0:e6:ed:cf:4b:cb:36:3c:7f:7a:7d:
08:84:21:e9:89:8e:39:a7:e6:2e:05:88:3f:73:2f:09:3c:ec:
64:d8:1d:fb:66:8c:65:f4:46:4c:fa:c8:87:14:e5:65:4f:8e:
19:b4:9e:5e:fd:2b:2d:cd:2e:ce:92:9b:d7:47:90:10:fb:d3:
3c:29:ba:bf:9b:f4:22:2e:4b:38:73:bc:7d:b1:22:9b:97:41:
ef:e5:bd:ab:51:6e:a1:b7:f3:36:c0:9c:8e:58:8e:b8:4d:36:
52:49:47:57:79:38:9f:4f:f1:5e:62:19:9b:f3:5a:a4:e4:bf:
b5:3e:08:77:56:04:fe:62:8c:a9:92:ef:ae:78:e2:74:98:5c:
1a:77:ba:5b:8e:5c:5a:8f:7c:be:30:22:52:93:f8:36:b2:4d:
b4:56:9f:44:77:c1:d1:d1:e0:26:2c:63:c4:c3:a9:88:99:ea:
45:c4:54:42:d6:52:a5:f7:fa:77:c8:42:e2:5b:d4:81:17:dd:
91:50:55:76:ed:14:d9:c9:2b:98:e2:75:c9:84:8c:3a:df:55:
d4:5a:09:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5Pa119MZhNLWLtDNsnpVdBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOGZmMzYxNGZkMGM4YThiN2U5NjNjY2YyMGMzYWYwODVl
MmJhY2UwHhcNMjYwNTIyMTEyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjE3MTc2Njc0ZWQwZGY2MjIyNDM1NDQyZGM5ZTQwODUwNDE5MTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscCTLlJGexSNlI6tl+V903+Bf+53
Qb88jYXtf5bJ7i3TUCDjlFElehdQSn4Cvt2crPfESe4n4VsVPLNBxID7eL69ECRH
lm4Y5HFeAQHx2bzZY8xzEAwGiaR/YEm5CU3iKloPCag6XRzMJl+yvwcVt7p3MjKj
hoCVmjz0zTXB00sjxcxmnr8r0uS4JFHTizs0x2torYIGURvnHMCS3gYlQ27sQsfQ
YIzt9e2RzKrY5dpsdk2jZLEwojaj9N7qfUAClzqbBeND35OL0n2/ZiFyWNrpBIqO
mFNSWio+oC+F2Q2xvwfLNkK+P94hYVDU6yIxWwuq8Tfi1JabP5crKBDH6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDIXF2Z07Q32IiQ1RC3J5AhQQZF7MB8GA1UdIwQY
MBaAFCyP82FP0Miot+ljzPIMOvCF4rrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTElfellVX1F5S2kzNldQTThndzY4SVhpdXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zMjAyNGQtZDNlNy00YWQwLThhOTEt
MzMxODUwNGM3NzUwLzEvTWhjWFpuVHREZllpSkRWRUxjbmtDRkJCa1hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zMjAyNGQtZDNlNy00YWQwLThhOTEtMzMxODUwNGM3NzUw
LzEvTElfellVX1F5S2kzNldQTThndzY4SVhpdXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV+7+MA0G
CSqGSIb3DQEBCwUAA4IBAQA7hoODxDU/XDl90n3egxLA5e352F88dBsLA6j4K8Ar
VhFCXYHsBZaCVmFSwObtz0vLNjx/en0IhCHpiY45p+YuBYg/cy8JPOxk2B37Zoxl
9EZM+siHFOVlT44ZtJ5e/SstzS7OkpvXR5AQ+9M8Kbq/m/QiLks4c7x9sSKbl0Hv
5b2rUW6ht/M2wJyOWI64TTZSSUdXeTifT/FeYhmb81qk5L+1Pgh3VgT+Yoypku+u
eOJ0mFwad7pbjlxaj3y+MCJSk/g2sk20Vp9Ed8HR0eAmLGPEw6mImepFxFRC1lKl
9/p3yELiW9SBF92RUFV27RTZySuY4nXJhIw631XUWgkP
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:37 2026 by rpki-client