Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/MrqwQN_40LYHVUpQ7Y-cFkHIGjw.roa
File: MrqwQN_40LYHVUpQ7Y-cFkHIGjw.roa (raw, json)
Hash identifier: rO1YwNS8cTFdYkfKdUakwC2XbOT+zNlpe3fwBgP8yx8=
Subject key identifier: 32:BA:B0:40:DF:F8:D0:B6:07:55:4A:50:ED:8F:9C:16:41:C8:1A:3C
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019CB443CA227F33D92BFB3BCAEFE07D2D77
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/MrqwQN_40LYHVUpQ7Y-cFkHIGjw.roa
Signing time: Tue 03 Mar 2026 15:14:27 +0000
ROA not before: Tue 03 Mar 2026 15:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205570
IP address blocks: 188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b4:43:ca:22:7f:33:d9:2b:fb:3b:ca:ef:e0:7d:2d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Mar 3 15:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32bab040dff8d0b607554a50ed8f9c1641c81a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:a5:60:bd:1f:0e:dd:9b:a6:7d:d7:18:57:
9e:87:41:8b:fc:1e:fd:72:f2:bf:72:97:69:a2:03:
44:6b:dc:92:4d:42:7a:0a:c0:7a:2c:fc:43:13:00:
3e:41:9c:f0:9e:27:1c:91:33:e5:1e:6b:7f:bb:c9:
64:51:1d:4a:89:a8:8f:d6:a7:9f:7c:53:61:e7:6f:
ac:35:3b:31:3f:2e:bb:ea:31:32:56:2e:ca:a7:1f:
ea:a3:0c:03:8f:cf:58:6e:d8:c1:fd:9c:33:7b:73:
f9:24:bc:bf:92:ff:fe:77:17:41:e2:9d:9e:ce:6f:
95:af:2a:41:7b:d0:42:1f:48:4f:c3:50:2c:e0:ae:
3a:1b:f9:db:bc:2a:0b:07:c7:b6:98:77:ab:e6:28:
f4:71:5a:8f:82:ec:e2:86:e8:cc:8b:bb:f5:25:93:
ec:d2:d6:22:80:60:45:1c:eb:15:6e:0e:f0:20:bc:
35:92:4a:ce:2e:ba:f2:7e:50:df:1b:bd:10:ca:25:
7f:40:95:2b:2a:23:56:84:50:66:b9:04:4c:d6:3d:
f7:57:b7:25:e2:7e:01:67:7d:d3:89:e5:8e:90:9a:
68:b1:b2:ca:32:79:76:74:02:1c:bf:78:2c:dc:65:
d1:60:a7:89:68:3f:96:69:02:f6:7d:3e:86:ce:fc:
aa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BA:B0:40:DF:F8:D0:B6:07:55:4A:50:ED:8F:9C:16:41:C8:1A:3C
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/MrqwQN_40LYHVUpQ7Y-cFkHIGjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.206.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:17:7e:4e:8c:9f:9b:57:cb:12:f3:a5:fc:c5:a2:d4:31:3b:
db:3f:72:74:33:c8:9d:58:a4:bd:24:55:da:d1:77:4d:31:49:
8f:1d:a8:99:26:f3:b1:18:91:c1:2e:71:5c:82:75:a1:89:b1:
77:fd:54:b6:4b:82:e3:4f:a4:f3:53:4d:b1:b6:fc:0b:02:6f:
c5:df:7e:97:3c:12:c6:bc:79:7b:3b:da:cf:46:d0:31:92:79:
be:81:92:cf:34:ce:48:a6:d2:f7:90:f5:93:9d:b2:2c:75:7b:
59:4c:17:78:9e:71:68:be:6f:dc:3a:7c:68:0b:c6:f9:23:d7:
28:9a:8a:f5:cd:e2:e4:ff:25:cc:45:ba:ea:3a:78:ea:5d:d0:
50:6c:10:84:48:c2:c5:19:25:29:f3:b9:31:75:4a:ae:6e:26:
34:3d:d6:c1:ee:26:fe:6e:0f:be:4a:bb:94:12:b8:d4:29:0d:
a6:c0:bc:9d:81:79:cc:9b:6a:85:fa:b7:f9:2f:16:8a:d8:52:
99:a3:74:d7:24:e5:bb:8f:d1:27:bd:6d:24:dd:71:9d:88:67:
b1:da:fe:16:08:08:1b:75:3b:5a:bb:79:e9:3c:58:d9:b5:88:
ea:e4:27:21:73:de:80:24:34:07:06:bb:ac:d9:d7:de:90:c9:
a2:bc:08:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 23:59:51 2026 by rpki-client