Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mBFlSxNttSlqh3nygm5KlIBLh4o.roa
File: mBFlSxNttSlqh3nygm5KlIBLh4o.roa (raw, json)
Hash identifier: jLVy3FlMiVXZ9hx9xjFl1wG0YDUJXO1r55ErJITfEpU=
Subject key identifier: 98:11:65:4B:13:6D:B5:29:6A:87:79:F2:82:6E:4A:94:80:4B:87:8A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01A05D904B735636DF47A73D240314064D96
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mBFlSxNttSlqh3nygm5KlIBLh4o.roa
Signing time: Tue 01 Sep 2026 15:22:12 +0000
ROA not before: Tue 01 Sep 2026 15:22:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218790
IP address blocks: 188.132.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:90:4b:73:56:36:df:47:a7:3d:24:03:14:06:4d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 1 15:22:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9811654b136db5296a8779f2826e4a94804b878a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:26:db:43:69:f8:ba:d5:c3:85:27:37:10:
28:0c:ef:31:0c:78:0b:c6:c4:80:37:45:56:87:88:
21:95:6c:3e:ef:86:b4:24:d1:19:33:8a:9f:ef:95:
55:0d:af:7c:60:2e:33:3a:44:b1:69:61:d6:8c:1c:
81:a2:b7:62:44:7e:96:77:ab:18:7d:92:12:de:9f:
76:31:a6:43:e8:cc:25:56:cc:92:f7:fc:7e:c1:0b:
f4:76:c7:c2:0f:7a:95:b2:43:0c:14:19:c3:dc:e6:
ea:45:b5:41:1a:81:6e:e9:6d:8b:5a:11:82:d0:13:
4c:e4:6c:8d:ae:66:67:b1:03:8e:c0:ac:45:1a:52:
eb:0c:ba:e3:b2:6d:0a:49:79:ef:8e:d7:56:52:d8:
52:84:e1:c2:c7:ee:10:71:13:ae:61:df:1c:c3:99:
26:9e:7b:f9:b1:bc:b7:3b:56:2c:04:17:fd:fa:fb:
c9:a8:73:a9:ad:f6:ef:ef:60:77:ba:e0:eb:ee:12:
ca:f8:12:ad:55:1e:54:57:d6:5f:af:f3:e8:eb:46:
7a:34:8c:29:e3:26:20:bf:91:d1:14:b0:65:f8:b9:
b5:c7:f9:44:e5:2a:37:a7:35:ab:53:a4:a2:d9:2c:
ad:2f:20:6e:06:bc:83:3f:49:9d:2d:5c:85:6d:09:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:11:65:4B:13:6D:B5:29:6A:87:79:F2:82:6E:4A:94:80:4B:87:8A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mBFlSxNttSlqh3nygm5KlIBLh4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a7:58:22:fa:b6:6d:bf:18:0a:26:f7:35:40:a8:67:cf:89:
87:ea:d6:33:8b:7c:1c:a4:ea:b4:36:4d:c5:88:f6:2d:5e:25:
b0:8f:15:c8:17:56:ca:12:40:03:22:b4:f8:7d:37:d5:f4:fc:
e5:60:f2:c1:28:6d:cc:1e:7d:98:c6:b5:3d:f7:a7:03:b7:93:
b5:6d:06:8d:06:98:5d:20:79:6a:01:69:c7:3a:49:7f:59:ee:
3a:10:02:96:a1:e5:7d:66:da:2a:a1:76:46:d1:d0:bc:0c:cc:
23:40:cc:e9:1b:ce:de:7a:29:fc:6f:51:91:82:75:1f:cf:1e:
27:ce:35:d7:2e:0d:7f:c8:83:70:89:85:31:17:62:d4:8c:41:
d1:0f:e5:c6:89:23:57:07:f0:7b:76:1c:6f:7a:b8:ed:f9:a2:
3f:51:06:b9:d8:00:b4:13:99:2d:73:5a:d6:3f:c3:35:b4:97:
7c:7c:36:8e:41:c6:9f:40:0e:78:da:e9:ec:b9:cc:f3:60:11:
7b:93:25:08:44:60:14:39:b9:1e:07:3b:cb:66:c8:a0:2d:ec:
f8:84:54:01:1f:ba:89:25:47:f5:a7:83:c4:0f:df:b2:f7:e3:
fc:5a:4f:ab:d2:7d:df:7b:b7:03:5a:b4:5c:03:fd:1b:a5:3c:
40:e7:90:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:21 2026 by rpki-client