Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MhkYq6AImYWZltKnYzBVnCtFhKs.roa
File: MhkYq6AImYWZltKnYzBVnCtFhKs.roa (raw, json)
Hash identifier: ahiOB8RQs9yrC1Oa0V+CT8lh5u6HGGad6JuEVMWAuf4=
Subject key identifier: 32:19:18:AB:A0:08:99:85:99:96:D2:A7:63:30:55:9C:2B:45:84:AB
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019FAE077F72317A2F4B2295E3CD7D127BB4
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MhkYq6AImYWZltKnYzBVnCtFhKs.roa
Signing time: Wed 29 Jul 2026 13:19:14 +0000
ROA not before: Wed 29 Jul 2026 13:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200017
IP address blocks: 85.209.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Aug 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:07:7f:72:31:7a:2f:4b:22:95:e3:cd:7d:12:7b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 29 13:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=321918aba00899859996d2a76330559c2b4584ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:c9:9e:24:57:7f:a7:27:bf:c2:ef:94:f7:
1f:d3:69:c8:fd:5d:8b:dd:81:2d:f5:42:46:b3:14:
dc:58:5b:24:0f:e3:13:3b:1a:92:39:e7:f7:8d:6d:
2b:fc:8b:af:fe:5b:58:6a:bf:76:ba:9f:41:d0:f5:
1e:53:24:75:25:8f:4e:2d:0b:9d:9b:77:53:b0:7c:
a2:ee:1f:b1:4b:01:b5:94:41:d8:da:87:40:37:82:
7a:19:cc:1c:54:64:8e:d0:9d:92:9d:39:b3:14:9f:
17:41:2d:92:0f:77:6f:fe:a2:30:07:eb:eb:75:e1:
52:b8:05:a1:f0:f1:b9:d8:dc:ae:0e:1b:10:e7:86:
fb:a2:7e:0b:08:d9:f6:97:07:07:08:c5:31:b8:57:
13:2d:e4:c7:fd:02:b8:45:db:a0:ac:80:0c:24:c8:
60:1c:eb:df:37:6b:3e:fa:4c:9b:bd:77:3c:61:9f:
ad:a4:91:b7:03:68:ce:99:c5:8f:55:9d:ed:71:b9:
77:5f:d4:2c:c3:8e:c2:f9:64:c5:ef:8e:22:d7:30:
6a:45:2e:8f:e4:22:a3:0f:c1:25:6f:94:27:d0:1c:
46:65:40:68:a6:a9:22:12:c9:24:7a:9c:6d:0a:cb:
63:e0:d0:83:94:27:77:da:0e:ab:ed:9b:a7:2c:e7:
10:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:19:18:AB:A0:08:99:85:99:96:D2:A7:63:30:55:9C:2B:45:84:AB
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MhkYq6AImYWZltKnYzBVnCtFhKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.121.0/24
Signature Algorithm: sha256WithRSAEncryption
01:5a:16:b3:ea:26:b4:8e:c9:38:d6:a1:df:0f:9e:55:fb:8c:
95:53:ac:47:ce:66:25:54:9a:42:fb:7d:c2:d1:b3:f5:cf:b2:
c8:9e:70:6d:15:97:28:a9:eb:7e:d9:b5:f2:12:4d:ad:64:b2:
cb:a1:56:f3:b9:54:5b:b4:73:9e:47:2b:88:ad:ff:b5:84:71:
2f:49:79:7a:3d:6a:20:87:3b:2d:be:2f:1e:ea:95:b8:b4:12:
95:1d:48:e9:df:97:a9:9e:23:cd:aa:16:fe:86:e2:f7:f8:25:
6a:4a:28:9e:31:7b:78:9f:8d:82:a6:39:46:16:21:d6:a4:32:
5c:01:10:62:13:4e:c5:aa:60:41:4e:71:fd:bf:7e:5b:cc:ca:
ad:3c:ba:dd:0d:2f:a4:27:14:18:4b:31:44:d2:fa:4a:d9:55:
f9:f5:18:b4:77:4a:b4:17:f2:f6:46:39:ab:9d:31:bb:c1:49:
b7:e5:a8:48:e1:d4:84:ca:ef:cb:7c:92:fe:2b:72:80:0f:6d:
16:61:ad:20:69:2b:dc:53:d9:4f:5e:36:b8:c8:21:08:5b:c3:
51:b1:09:d9:d4:5a:37:34:a0:a7:14:7b:d5:f2:cb:d2:cd:02:
31:09:54:0f:7a:89:1b:32:92:d6:84:04:14:f9:1d:a8:43:5e:
e8:08:eb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 15:10:12 2026 by rpki-client