Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/mlOP8xdjvP2G0i7EfideIEkv4rY.roa
File: mlOP8xdjvP2G0i7EfideIEkv4rY.roa (raw, json)
Hash identifier: OFcokQEIrvZRKLsoSBV9rrb+n3XMTUWLo595h4u28fA=
Subject key identifier: 9A:53:8F:F3:17:63:BC:FD:86:D2:2E:C4:7E:27:5E:20:49:2F:E2:B6
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019D3DF94629AAD808E6DC40090C4E7723B3
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/mlOP8xdjvP2G0i7EfideIEkv4rY.roa
Signing time: Mon 30 Mar 2026 09:00:39 +0000
ROA not before: Mon 30 Mar 2026 09:00:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.172.36.0/24 maxlen: 24
185.157.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 14:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3d:f9:46:29:aa:d8:08:e6:dc:40:09:0c:4e:77:23:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Mar 30 09:00:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a538ff31763bcfd86d22ec47e275e20492fe2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:17:9e:68:d1:f6:e4:10:ff:7c:5e:fe:b8:
93:10:74:60:eb:da:64:ee:f5:89:0d:cf:7a:47:f8:
c5:f7:d2:ee:56:7a:77:21:74:a5:73:6c:e7:be:63:
fc:61:80:fe:01:55:4f:79:b5:2e:8d:3b:32:2e:b8:
8a:c2:64:bb:ac:9a:80:95:1f:c6:fe:a5:72:1a:f6:
fc:ab:cb:15:51:c7:9f:83:9f:7e:ca:9d:21:b5:17:
26:98:09:81:16:2c:8a:52:47:0e:e4:b8:1b:b9:ca:
40:70:2a:65:84:76:dd:9e:e5:1e:59:97:a0:ff:ef:
6d:49:2e:2d:7e:6f:d3:49:44:83:ec:df:d3:ee:d0:
fc:a1:81:98:99:11:a0:3e:32:ba:8d:86:04:22:6f:
3d:c7:e2:08:06:c8:67:5d:84:20:4c:0f:05:b7:24:
b1:43:0d:d9:f6:7e:05:02:a3:c2:4c:54:40:7b:d3:
47:18:0b:f7:83:32:d2:a6:9c:cb:f4:b4:13:6b:af:
5e:2d:93:01:c6:97:c6:18:c9:ab:cd:bf:5d:a0:d6:
59:b8:d0:ad:6c:ce:b6:81:bf:27:d1:e5:ca:5a:45:
48:63:df:f0:2a:b9:5c:6c:06:a9:90:0b:37:c7:b6:
ef:7c:ed:db:b6:15:16:3c:de:76:6e:bb:78:f7:65:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:53:8F:F3:17:63:BC:FD:86:D2:2E:C4:7E:27:5E:20:49:2F:E2:B6
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/mlOP8xdjvP2G0i7EfideIEkv4rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.36.0/24
185.157.46.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d4:71:b4:01:15:cb:1a:0f:cf:40:4b:57:ec:c0:1e:30:29:
b7:3e:40:c4:96:8c:43:32:8a:47:07:bc:0f:aa:1e:b7:a4:77:
fc:28:6e:db:18:e3:6f:65:05:5a:8a:f5:c3:91:ed:d3:fa:e6:
9a:81:84:75:7e:e4:b6:fe:17:8f:f8:cd:e0:08:6f:cf:44:77:
e4:bb:11:a6:84:b4:fe:f9:a3:8e:92:9d:62:91:8b:74:e6:f0:
82:1e:2a:ae:3d:43:8c:ac:b9:7e:f3:1d:c3:8a:e2:2d:66:03:
3a:4c:69:ef:37:ac:7a:f3:0f:86:13:6e:f9:50:b3:2d:33:5f:
a2:55:cf:d9:09:54:c3:3f:8d:a0:38:da:63:94:71:ed:2b:9d:
fe:0a:21:57:9e:aa:a4:13:1a:f8:2c:c0:2a:bd:b2:9f:ae:25:
d5:ec:3f:d8:05:4f:de:8b:67:8a:5f:61:c9:19:27:a1:1d:e3:
fe:2f:f2:c1:7c:a3:b1:a2:d8:e3:54:72:8e:6c:99:65:ae:81:
cf:a9:22:2c:2c:61:29:e1:e7:85:b8:a1:7d:f6:16:b7:e7:ef:
bb:7d:ce:bf:99:a0:c2:69:30:cc:4d:41:0e:dd:01:55:a3:5a:
e6:3f:16:a8:3b:94:d4:a8:97:21:52:0f:ca:d7:40:ca:cc:3f:
af:80:58:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 00:26:45 2026 by rpki-client