Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/mFm9Gf0w53IE401lpYuGN0qjsd8.roa
File: mFm9Gf0w53IE401lpYuGN0qjsd8.roa (raw, json)
Hash identifier: +9BykQZFflh/Tr/zOhjdGxo/obU7z/9ygNUuG9hMXrY=
Subject key identifier: 98:59:BD:19:FD:30:E7:72:04:E3:4D:65:A5:8B:86:37:4A:A3:B1:DF
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 01A0FB3B0F175E01070C51C01FA0F9297D8D
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/mFm9Gf0w53IE401lpYuGN0qjsd8.roa
Signing time: Fri 02 Oct 2026 06:09:06 +0000
ROA not before: Fri 02 Oct 2026 06:09:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207043
IP address blocks: 94.26.41.0/24 maxlen: 24
94.26.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:3b:0f:17:5e:01:07:0c:51:c0:1f:a0:f9:29:7d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Oct 2 06:09:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9859bd19fd30e77204e34d65a58b86374aa3b1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:03:7a:38:ea:aa:c0:82:a4:4b:38:a7:54:
12:41:85:af:1e:b9:29:b0:74:72:3c:ca:f3:7f:d4:
b6:15:e1:e6:a1:05:26:b4:8d:0b:b2:15:5f:b2:2a:
d8:c1:8e:48:75:72:65:bc:95:69:97:95:c4:1f:00:
52:ed:ca:64:70:17:eb:45:bc:14:2d:c4:32:4c:65:
52:e5:79:df:f2:da:15:13:bf:33:9b:ec:3d:c0:52:
6d:5d:12:c2:af:c3:fe:0b:f1:e8:7a:78:aa:18:9e:
c5:6b:1d:21:90:e6:8f:4f:fb:24:bc:32:8e:d1:dc:
f6:29:fe:b4:b2:26:df:2e:b2:f4:a1:73:a9:41:2c:
8e:f0:28:1d:79:3a:e2:f4:1b:36:b7:be:cb:b2:3b:
5d:05:6f:a0:7a:8c:14:78:3b:00:33:c2:92:38:80:
36:bc:16:38:ff:b5:a4:0a:16:05:c9:8d:41:05:c1:
34:68:d9:94:f9:94:cc:65:8a:44:e2:3e:5d:6a:fa:
47:a6:2c:c4:64:f6:c9:a9:0a:a9:fa:2c:87:31:47:
c3:e2:56:ed:4d:c7:14:9d:c4:f0:60:e3:a4:d4:61:
68:80:6a:ca:0a:f3:91:15:45:63:42:45:0a:1a:9a:
b1:8a:4d:ea:f0:72:98:a2:32:66:d3:70:a1:58:cd:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:59:BD:19:FD:30:E7:72:04:E3:4D:65:A5:8B:86:37:4A:A3:B1:DF
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/mFm9Gf0w53IE401lpYuGN0qjsd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.41.0/24
94.26.83.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:bd:d6:a9:25:88:55:7e:16:15:61:e6:4d:e9:05:59:2e:e7:
85:e1:ff:bc:e0:39:f0:5d:ea:99:7a:5a:16:60:74:2e:c6:89:
9e:5e:a8:8a:7d:2a:b3:67:02:34:3c:fe:24:e1:09:7d:94:42:
4d:68:7f:ba:56:c7:39:22:c9:48:b0:5d:fb:6c:4e:7e:98:3e:
55:aa:44:35:56:ff:5c:4a:61:22:15:4f:f4:ff:86:20:d2:ed:
17:75:77:7f:d8:08:7c:7c:a1:63:a8:d2:ec:60:da:66:a6:c2:
1c:b6:4a:31:0c:1c:fc:d7:5d:04:24:20:88:0e:65:cc:b1:58:
b4:e7:ad:c6:c3:4d:6e:86:30:55:e6:7b:7d:27:72:c3:05:48:
13:c1:16:c5:a8:13:c6:42:8b:c3:ed:8d:ab:9d:4d:41:8f:21:
1e:f3:8b:ab:3b:42:82:a3:30:4a:74:19:8a:53:e4:ed:dd:ea:
e9:3c:96:a4:62:f4:98:38:bb:d2:97:e7:89:93:06:ff:c8:2f:
78:56:a5:ab:db:a7:2d:45:e2:48:1f:52:dd:bb:c9:ea:d0:ce:
07:9c:2f:ef:77:28:91:14:06:82:79:44:f8:c5:5e:c7:89:c9:
33:cc:02:85:cb:5a:9c:4c:5d:d7:66:47:b7:2c:c5:1d:57:3e:
cb:d2:2e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:15:11 2026 by rpki-client