Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/mQVVU0yW21pC8IYFai3gUt7H-pE.roa
File: mQVVU0yW21pC8IYFai3gUt7H-pE.roa (raw, json)
Hash identifier: H5zFgqItky5UWDxQkcovYBDjwRGeK4Gj998+PN5ijik=
Subject key identifier: 99:05:55:53:4C:96:DB:5A:42:F0:86:05:6A:2D:E0:52:DE:C7:FA:91
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 019F2343A71FAFD7FC2F549CD081E4390E45
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/mQVVU0yW21pC8IYFai3gUt7H-pE.roa
Signing time: Thu 02 Jul 2026 14:37:43 +0000
ROA not before: Thu 02 Jul 2026 14:37:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213535
IP address blocks: 88.218.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:43:a7:1f:af:d7:fc:2f:54:9c:d0:81:e4:39:0e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Jul 2 14:37:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=990555534c96db5a42f086056a2de052dec7fa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:9a:02:60:ae:ac:b3:be:5a:d4:61:44:4b:
7b:44:9f:46:f4:8d:f4:6b:7b:96:4f:65:8b:5e:de:
21:55:69:ec:0e:35:e5:cb:52:1e:b5:69:96:7f:5a:
57:00:c8:58:54:7c:0d:34:c2:7a:61:73:60:93:e6:
14:72:2e:5a:26:2c:4f:10:d9:dc:ff:52:7b:5c:09:
33:65:de:89:6f:cf:49:18:f0:db:b0:b5:c6:f8:df:
60:2c:ed:46:30:c3:89:4f:24:b9:eb:63:6a:0d:60:
5f:5e:5a:9b:39:b3:92:ce:f8:02:2a:38:7a:91:73:
bf:eb:26:72:54:4c:f5:2c:cf:23:ec:35:83:fa:dd:
8b:21:a2:dd:b5:22:d0:ac:33:60:e7:36:cc:52:f2:
11:6d:02:34:95:6b:b1:28:e0:b3:eb:91:b4:70:41:
77:4d:64:04:7f:fe:69:f5:0c:94:47:71:72:3b:53:
ae:10:69:ad:43:8b:c6:dd:9f:4c:56:66:a7:02:db:
35:ae:9a:4b:42:6d:39:05:3b:c8:3d:c7:15:95:4c:
bb:49:35:2a:6b:6d:51:f4:47:85:ba:4f:3a:db:5a:
4e:62:7e:26:bb:a8:3b:f0:6d:59:1b:80:96:9c:48:
3e:ff:30:81:f5:33:8f:b6:d8:0d:ec:c7:5a:21:ad:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:05:55:53:4C:96:DB:5A:42:F0:86:05:6A:2D:E0:52:DE:C7:FA:91
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/mQVVU0yW21pC8IYFai3gUt7H-pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.196.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:bc:ea:f7:a0:27:22:6f:47:24:b7:11:27:29:d4:f2:ec:ec:
28:8c:b7:a8:8d:2d:4a:70:29:61:90:e2:7a:74:88:44:de:02:
8f:9d:87:3b:78:1f:86:06:29:c1:45:18:04:df:90:ac:31:1f:
34:0e:08:03:95:f1:0d:18:0f:37:9c:62:cc:d8:02:c6:59:d0:
c6:95:6f:50:28:e7:2b:10:c0:4b:d1:70:c7:09:9f:18:43:7c:
23:e2:e4:b2:70:61:d8:61:a2:3d:2e:f6:d7:66:d4:07:71:25:
98:0d:8a:3a:d5:2c:c6:fa:06:12:5b:a5:d8:6e:2b:4f:20:3b:
a9:04:a7:cf:57:ca:1f:20:5b:be:fa:7d:a8:2d:af:ba:1d:d9:
20:e3:65:47:bb:cc:bb:e8:c7:59:70:4c:c1:32:8d:63:16:d4:
11:87:34:7a:49:19:fd:32:0b:12:da:0a:84:67:d4:c0:f2:01:
18:6c:ae:55:e8:a7:52:7b:4b:a5:bc:53:df:eb:c6:16:56:d3:
39:fe:ae:3f:bb:7d:ce:21:ea:81:22:79:b2:3f:ea:a4:70:78:
5d:24:9f:dd:f9:4d:8d:00:5c:e3:c5:ca:57:b8:ae:9c:88:70:
81:11:9a:44:27:33:97:57:58:8d:66:da:7b:04:e3:a8:73:ae:
62:05:ac:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:16 2026 by rpki-client