Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/mKMnS4GPAkhZpl90ZHA7btSZw8A.roa
File: mKMnS4GPAkhZpl90ZHA7btSZw8A.roa (raw, json)
Hash identifier: my+0RB41vKskkHVdyntY7fc04LwoMZaH9P99tLjFCoc=
Subject key identifier: 98:A3:27:4B:81:8F:02:48:59:A6:5F:74:64:70:3B:6E:D4:99:C3:C0
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019FD18331743FDA3EAACDF474061E32CD34
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/mKMnS4GPAkhZpl90ZHA7btSZw8A.roa
Signing time: Wed 05 Aug 2026 10:41:03 +0000
ROA not before: Wed 05 Aug 2026 10:41:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199785
IP address blocks: 91.209.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:83:31:74:3f:da:3e:aa:cd:f4:74:06:1e:32:cd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Aug 5 10:41:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98a3274b818f024859a65f7464703b6ed499c3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:01:77:97:3f:59:2d:36:a0:39:94:f7:5e:
f1:6d:52:4d:56:cb:e4:a8:12:08:3f:10:5e:4b:77:
75:9f:b7:00:f2:36:45:f4:69:7d:44:7d:20:62:73:
c6:e6:55:23:85:ed:e8:a5:d8:7e:fc:0e:33:78:da:
25:4e:25:cb:4a:01:0b:4f:f2:35:50:82:4c:95:5a:
6a:53:ce:96:51:4f:fb:11:2b:79:5d:52:2c:fe:3e:
4d:23:cd:85:b6:ad:34:d3:bd:2e:b5:44:92:0b:a3:
b7:36:0a:8a:9a:e3:85:fe:11:f8:13:4e:b6:ba:b3:
fe:f8:52:82:48:fe:19:b2:0c:1a:52:08:a1:7f:e1:
5a:94:ef:04:dc:fb:c0:ab:4d:40:fc:85:f2:f1:14:
8f:e6:f8:86:15:e1:3e:b0:bb:66:b7:6b:99:dd:31:
6e:8a:7e:bc:7f:de:21:cb:70:ed:10:6f:90:3f:b2:
f5:bd:2f:26:a6:93:4f:8d:6c:32:d3:12:a8:22:9b:
1a:64:06:9d:ed:51:8f:ad:ac:b5:f1:81:26:0f:5b:
84:0f:2b:14:49:e5:fb:2a:70:3a:b2:42:35:99:a6:
92:5e:e0:b2:a1:3c:b6:61:0e:d5:66:a2:e8:75:66:
8d:d5:d5:91:6b:53:dc:a2:b5:10:6f:03:fc:04:72:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A3:27:4B:81:8F:02:48:59:A6:5F:74:64:70:3B:6E:D4:99:C3:C0
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/mKMnS4GPAkhZpl90ZHA7btSZw8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
19:1b:b2:37:63:9f:02:36:ed:58:60:cc:07:aa:f2:87:fc:5b:
45:8f:36:bc:76:ab:5e:36:08:9e:92:c7:d4:61:16:3d:0d:31:
6c:b9:14:31:11:67:0c:53:35:52:e6:d4:fb:b9:80:ca:67:66:
83:e8:53:92:31:69:ad:3e:8d:9e:3f:16:26:8c:0a:50:d7:f6:
c1:85:92:af:0a:71:5e:43:a4:c9:85:5f:29:17:ea:88:81:d9:
9f:37:f4:74:59:ec:93:e8:01:27:07:3e:98:46:33:0d:cf:e9:
2c:4a:15:1d:bb:ae:a5:a3:ab:6e:5a:bc:49:62:51:85:b9:6e:
ff:ec:de:f2:3e:88:26:9c:da:23:9c:0d:a4:20:c0:56:74:5d:
79:d4:73:72:e7:ad:df:04:55:59:6b:6a:54:60:b1:90:75:d7:
16:99:f2:3f:26:ea:1f:7f:27:97:70:f4:9d:9b:bb:cb:78:fe:
16:79:86:df:a7:d9:59:78:45:59:f5:83:c9:3a:7d:3e:20:d6:
59:85:86:73:dd:62:2f:a7:1b:dc:f7:a0:77:47:08:c1:21:04:
ca:14:bd:6f:a6:55:90:2b:3b:f5:42:b5:74:ba:64:24:c1:b5:
1c:a9:ff:24:16:10:43:18:c5:fd:67:88:19:67:15:d4:5a:99:
ef:84:ef:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/RgzF0P9o+qs30dAYeMs00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0
M2Q1MzUwHhcNMjYwODA1MTA0MTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGEzMjc0YjgxOGYwMjQ4NTlhNjVmNzQ2NDcwM2I2ZWQ0OTljM2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwoBd5c/WS02oDmU917xbVJNVsvk
qBIIPxBeS3d1n7cA8jZF9Gl9RH0gYnPG5lUjhe3opdh+/A4zeNolTiXLSgELT/I1
UIJMlVpqU86WUU/7ESt5XVIs/j5NI82Ftq00070utUSSC6O3NgqKmuOF/hH4E062
urP++FKCSP4ZsgwaUgihf+FalO8E3PvAq01A/IXy8RSP5viGFeE+sLtmt2uZ3TFu
in68f94hy3DtEG+QP7L1vS8mppNPjWwy0xKoIpsaZAad7VGPray18YEmD1uEDysU
SeX7KnA6skI1maaSXuCyoTy2YQ7VZqLodWaN1dWRa1PcorUQbwP8BHIsiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJijJ0uBjwJIWaZfdGRwO27UmcPAMB8GA1UdIwQY
MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt
ZmVlOGVhZjczYjBkLzEvbUtNblM0R1BBa2hacGw5MFpIQTdidFNadzhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk
LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9GHMA0G
CSqGSIb3DQEBCwUAA4IBAQAZG7I3Y58CNu1YYMwHqvKH/FtFjza8dqteNgieksfU
YRY9DTFsuRQxEWcMUzVS5tT7uYDKZ2aD6FOSMWmtPo2ePxYmjApQ1/bBhZKvCnFe
Q6TJhV8pF+qIgdmfN/R0WeyT6AEnBz6YRjMNz+ksShUdu66lo6tuWrxJYlGFuW7/
7N7yPogmnNojnA2kIMBWdF151HNy563fBFVZa2pUYLGQddcWmfI/JuoffyeXcPSd
m7vLeP4WeYbfp9lZeEVZ9YPJOn0+INZZhYZz3WIvpxvc96B3RwjBIQTKFL1vplWQ
Kzv1QrV0umQkwbUcqf8kFhBDGMX9Z4gZZxXUWpnvhO9n
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:09 2026 by rpki-client