Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/mRRVOowOjRXJf-IU2ijf4UY9FbU.roa
File: mRRVOowOjRXJf-IU2ijf4UY9FbU.roa (raw, json)
Hash identifier: vI/jjC9GVOLKY66ayPKNMBj8qyuMxVqslWBZiRL9D0A=
Subject key identifier: 99:14:55:3A:8C:0E:8D:15:C9:7F:E2:14:DA:28:DF:E1:46:3D:15:B5
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 01A0008E67E840F9021ABDCC0D94191481B0
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/mRRVOowOjRXJf-IU2ijf4UY9FbU.roa
Signing time: Fri 14 Aug 2026 13:55:27 +0000
ROA not before: Fri 14 Aug 2026 13:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197170
IP address blocks: 94.26.106.0/24 maxlen: 24
192.109.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:8e:67:e8:40:f9:02:1a:bd:cc:0d:94:19:14:81:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Aug 14 13:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9914553a8c0e8d15c97fe214da28dfe1463d15b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:d8:5d:7a:3f:4a:2e:19:2b:d5:bf:2c:0d:
77:9d:71:77:f5:da:6c:73:9d:c6:15:94:d7:76:56:
89:93:51:6b:26:fb:4e:e1:0e:49:99:c7:13:3e:7d:
ce:da:02:76:30:19:46:33:8f:45:ae:79:8a:cb:ba:
37:ef:55:01:fc:32:76:1a:6e:cd:23:53:f0:fc:f4:
cc:6b:4e:ea:8d:b7:69:65:77:10:39:61:93:b6:71:
d1:c7:f0:00:63:56:34:a1:77:b8:ab:15:31:70:9f:
0a:71:a7:0e:2f:15:1b:0f:d6:f4:f9:ad:77:4d:9a:
34:6b:53:1c:92:84:82:e2:eb:e0:5c:3a:f9:90:35:
63:23:c2:a5:b6:d0:fb:dc:9d:10:b0:38:be:3c:a2:
d2:7b:17:05:0f:2b:e5:13:58:b6:27:17:b7:81:1b:
65:72:56:3a:2f:0c:f7:fe:5b:4d:63:53:6b:a4:c6:
63:72:5e:cf:e5:ee:ee:6a:22:36:af:0e:5e:07:3d:
78:46:fb:8a:67:a6:ec:b1:51:74:e6:71:9f:67:3f:
f5:4c:04:e9:ef:9f:a6:60:1f:8a:c6:35:df:0c:68:
f6:e8:bd:17:43:ae:be:e8:4c:4e:bc:94:23:43:7b:
18:f4:dd:86:45:3f:6b:e0:b4:f1:95:21:05:60:e5:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:14:55:3A:8C:0E:8D:15:C9:7F:E2:14:DA:28:DF:E1:46:3D:15:B5
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/mRRVOowOjRXJf-IU2ijf4UY9FbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.106.0/24
192.109.200.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7f:25:ee:dc:b5:43:99:ce:2d:bd:81:9f:db:f0:93:82:e5:
67:b4:67:50:95:ec:90:10:47:01:0f:72:ed:23:9c:3a:94:61:
92:0a:9e:cf:a3:49:73:f4:fe:42:8d:95:07:b1:28:82:3f:f3:
99:15:e9:b4:73:a2:8a:4b:fa:5a:bf:76:c3:4e:b0:07:ac:f8:
40:81:9d:1a:8f:a2:a3:0f:34:18:77:1e:20:29:ee:a1:da:0d:
cb:19:e7:7f:5a:f3:8a:b5:6d:88:ee:a1:0a:0d:d7:c7:b9:96:
05:45:13:33:17:9e:2a:74:4f:e8:bb:20:35:46:0a:27:1b:92:
d6:a8:b6:10:63:d1:fe:67:78:83:05:2e:7a:b0:6f:66:57:33:
0f:00:1f:83:58:d8:62:3c:eb:59:e9:c5:17:d7:34:9c:3e:76:
88:43:12:bc:6a:db:3b:79:d1:1e:b4:05:92:d0:1e:af:c2:9c:
82:98:f7:e0:90:44:44:f0:53:78:58:ae:20:26:a2:96:2a:94:
2c:56:44:5f:32:f4:29:02:33:5e:e5:5d:10:5d:32:8b:e8:72:
e5:04:47:f5:2d:d1:c8:76:c9:5c:b9:78:a1:06:ea:93:c3:43:
aa:13:46:ca:c5:35:6a:e6:7d:61:9c:83:d5:95:fc:62:b8:b9:
04:cf:77:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:47:20 2026 by rpki-client