Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/mrkgByY7NmMUGPqRzcSy7M1T8wQ.roa
File: mrkgByY7NmMUGPqRzcSy7M1T8wQ.roa (raw, json)
Hash identifier: CGmvp8btbekWYmWCb4BogCtC9HXr6LCgssbD7e9pmJ0=
Subject key identifier: 9A:B9:20:07:26:3B:36:63:14:18:FA:91:CD:C4:B2:EC:CD:53:F3:04
Certificate issuer: /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial: 01A1114179A0A9C64DB2A0744FBF5E8F91D7
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/mrkgByY7NmMUGPqRzcSy7M1T8wQ.roa
Signing time: Tue 06 Oct 2026 12:47:45 +0000
ROA not before: Tue 06 Oct 2026 12:47:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52013
IP address blocks: 45.93.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:41:79:a0:a9:c6:4d:b2:a0:74:4f:bf:5e:8f:91:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Validity
Not Before: Oct 6 12:47:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ab92007263b36631418fa91cdc4b2eccd53f304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:db:78:6c:ae:2e:f1:5f:5b:b0:8e:21:15:
ca:c1:ff:03:2d:6d:0e:60:9b:39:0b:37:f9:e7:8b:
a0:b7:05:33:e5:6a:cf:95:14:3a:9e:5c:df:ca:3b:
24:17:ca:3f:f8:7f:3c:f2:c3:1e:f3:9d:94:78:ec:
20:54:60:7c:f9:86:d5:13:b8:06:ee:45:71:a9:55:
99:4c:df:4e:49:76:d3:98:c5:27:5e:58:d6:ee:d4:
c8:cc:fc:06:1e:64:b0:88:37:1e:87:01:a8:87:7d:
e3:b6:ca:4c:ef:1f:4d:45:c0:2b:76:dc:15:bc:e3:
13:34:5e:e4:94:1b:5b:14:aa:d3:a4:d8:39:33:f4:
db:47:ce:2a:62:82:46:7b:eb:04:ce:5a:8d:55:6f:
78:7f:16:31:d9:c4:3f:8c:4a:5b:a4:d1:c9:83:94:
75:95:46:01:5b:64:0f:90:85:e9:75:a3:cb:bf:3a:
d0:b0:67:e7:b5:6a:39:2f:a3:be:fc:9c:41:f7:de:
2e:5b:5d:92:c9:01:9f:09:2e:da:cf:fd:90:35:39:
f1:20:8d:30:3b:bd:bf:c1:52:1a:b2:ed:99:35:d0:
b8:a0:99:c0:36:25:bd:e5:7d:82:f0:37:cd:47:37:
73:30:c8:b4:45:b4:69:b0:7c:4f:e0:7f:e1:d3:51:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B9:20:07:26:3B:36:63:14:18:FA:91:CD:C4:B2:EC:CD:53:F3:04
X509v3 Authority Key Identifier:
keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/mrkgByY7NmMUGPqRzcSy7M1T8wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.144.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d6:77:3d:e7:5a:f5:ea:a7:53:e7:1a:b0:a5:e8:02:06:1c:
2c:80:f5:4c:9a:01:7d:be:0a:04:b1:56:db:95:9b:60:f3:2b:
f3:0e:91:09:14:31:96:c2:01:f9:22:a1:28:f8:b7:6c:d3:e7:
31:82:a5:67:23:49:06:8d:ed:94:bb:91:7a:24:e0:20:34:1d:
8e:c4:cd:e9:88:b7:f4:78:3c:9d:02:a7:29:4f:e1:7b:85:6d:
33:39:cb:d4:cf:78:cc:a0:f8:d6:59:3a:78:a4:cd:05:53:5b:
16:8b:d7:a8:bb:76:eb:b1:c4:2a:90:5d:53:b6:96:a0:29:8a:
1a:f1:03:7d:da:35:0f:b7:c0:7a:3f:c5:88:9f:6e:fc:9f:11:
8e:35:37:82:10:b0:23:ad:1e:21:ed:e6:91:2f:0d:15:29:06:
6a:01:24:1e:0a:d1:6a:0a:59:bf:4b:75:4e:4d:9f:ae:bb:f7:
7f:73:50:56:c0:2e:8f:a9:90:8a:8a:a8:8c:54:63:78:4b:fd:
e4:30:cf:da:cc:31:75:47:8f:ea:8e:5c:e2:94:0d:6a:a4:46:
04:14:ce:69:d7:db:21:80:7e:42:fb:3e:7d:52:ab:9d:6c:ed:
21:ca:c6:fe:c7:8d:84:57:74:ee:5c:8a:95:b0:73:0c:a2:46:
ed:ee:72:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:13:34 2026 by rpki-client