Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/mTC50bn5GwCfUE1KLvBluLFMkdY.roa
File: mTC50bn5GwCfUE1KLvBluLFMkdY.roa (raw, json)
Hash identifier: IQbZPBbOsnx+tQod2Uvet4P1ugnKIlsjG5N3DHSFcf8=
Subject key identifier: 99:30:B9:D1:B9:F9:1B:00:9F:50:4D:4A:2E:F0:65:B8:B1:4C:91:D6
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A08C3C29104F8C527DBB1A352B92F2C634
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/mTC50bn5GwCfUE1KLvBluLFMkdY.roa
Signing time: Thu 10 Sep 2026 16:52:27 +0000
ROA not before: Thu 10 Sep 2026 16:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212027
IP address blocks: 94.103.189.0/24 maxlen: 24
94.103.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:3c:29:10:4f:8c:52:7d:bb:1a:35:2b:92:f2:c6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Sep 10 16:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9930b9d1b9f91b009f504d4a2ef065b8b14c91d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:40:4e:44:4e:02:39:22:1a:64:aa:ff:7e:
78:bb:34:46:6d:8b:87:42:89:65:40:c5:de:de:03:
48:1f:4e:a1:be:e8:f6:84:98:6b:bd:36:a8:c3:14:
a0:90:1f:38:bc:af:7f:cc:e7:af:f1:3c:d6:17:49:
84:ec:c3:9d:de:d8:82:87:f9:a2:86:7a:c1:4e:7c:
5b:d1:a3:e3:30:ff:5f:8f:99:8a:d6:39:ff:c4:d4:
6e:37:99:58:35:4f:d9:f4:b5:b0:46:68:7b:68:3d:
ec:d4:94:33:00:5e:43:05:1e:24:2c:d4:f0:36:45:
46:4d:ca:7d:f4:da:74:44:25:f4:c0:49:05:35:a7:
75:23:db:89:42:b1:77:9a:89:4c:ee:8e:81:ba:ca:
cc:d7:8d:1f:53:35:11:86:70:81:6c:7a:b2:d1:b0:
1f:fc:42:90:c9:ed:2b:37:ca:ad:be:47:01:10:0c:
04:2b:e3:aa:4d:78:22:ef:00:0d:cc:60:2b:7a:a4:
85:87:32:89:b7:a7:9a:b5:74:6e:fc:da:60:09:a1:
8f:70:eb:7e:b0:73:e6:f9:48:35:8e:c3:b3:ab:ab:
b5:c8:ae:46:d0:1f:42:13:94:cf:de:29:e7:74:32:
37:b7:64:0f:98:81:72:dd:de:bd:b0:b8:00:07:fd:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:30:B9:D1:B9:F9:1B:00:9F:50:4D:4A:2E:F0:65:B8:B1:4C:91:D6
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/mTC50bn5GwCfUE1KLvBluLFMkdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.189.0/24
94.103.191.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9f:a9:c9:90:24:45:76:e3:ab:92:59:e3:ad:55:7c:16:bc:
a6:59:8c:6b:ec:84:58:bf:af:07:68:b5:89:e1:9c:e7:7c:e9:
00:cf:a1:1a:8a:4a:d6:3a:2f:f0:6c:c8:6b:31:02:91:76:43:
94:cc:14:d7:3e:bf:67:a9:2e:4d:20:fa:c2:b0:ce:73:8b:8e:
14:42:2b:99:1b:6d:69:90:58:1b:8c:0e:d7:f5:76:4b:17:4d:
cb:52:d4:54:11:de:16:51:b5:50:31:5f:e5:ad:7b:3f:1c:d7:
48:63:fd:63:a2:b9:9f:95:4e:b8:70:de:ed:a7:23:78:dc:9e:
40:dd:6c:6c:a6:ab:cc:f0:36:75:4f:0b:c9:c2:93:a9:e3:7f:
23:8f:71:e5:6c:37:55:75:58:e7:bb:c9:67:77:3f:7f:dc:d3:
6f:68:7e:0e:7e:4b:f4:f4:59:1e:65:a7:f5:bf:8e:92:43:04:
a7:38:00:9c:f6:88:b4:31:f9:2f:33:5a:e3:ca:2b:7d:ee:e1:
14:7c:79:34:46:db:1f:f3:56:a2:30:c4:f8:d2:a1:91:b4:cf:
85:fa:a6:63:19:7e:35:3c:d4:dd:9a:0f:64:3d:d3:b3:32:29:
4d:d6:be:a0:37:34:26:3d:1e:37:87:fc:93:69:f3:b4:8d:73:
3e:5b:95:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:49:14 2026 by rpki-client