Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/v-MzIERZsnmBsizF0Xmn80GpIZg.roa
File: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (raw, json)
Hash identifier: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=
Subject key identifier: BF:E3:33:20:44:59:B2:79:81:B2:2C:C5:D1:79:A7:F3:41:A9:21:98
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A10BE3BAED3077C4A95BCAED8590552301
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/v-MzIERZsnmBsizF0Xmn80GpIZg.roa
Signing time: Mon 05 Oct 2026 11:47:16 +0000
ROA not before: Mon 05 Oct 2026 11:47:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.0.26.0/24 maxlen: 24
2001:7f8:154::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:e3:ba:ed:30:77:c4:a9:5b:ca:ed:85:90:55:23:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Oct 5 11:47:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfe333204459b27981b22cc5d179a7f341a92198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:2a:ca:cb:8e:a8:8a:da:7a:f3:4c:43:3e:
40:70:c4:c3:38:de:ff:a4:36:8f:cb:38:f2:76:35:
1c:a0:6a:82:0d:0c:71:31:b8:ff:7e:50:ad:dc:14:
63:08:4d:2d:5b:48:16:1f:d7:53:11:73:3d:ce:19:
04:44:c2:e3:43:60:03:12:2d:c5:f7:7b:73:89:b1:
5d:62:1f:9b:ed:8e:61:02:d3:9d:3b:fa:d3:90:1a:
dd:15:43:39:6b:1c:b8:ca:32:36:4e:10:16:2a:68:
12:69:fa:3c:e9:45:a6:bb:b3:93:69:1b:59:af:c7:
a9:69:f0:79:5b:af:9c:a6:81:14:32:3c:81:71:2b:
88:9b:fe:25:b6:12:54:ee:c2:3e:98:d0:f8:4b:70:
ca:2a:93:4d:48:a3:10:4b:7f:e5:a9:47:e0:47:b0:
ba:17:08:1c:dd:e4:df:d3:9e:bd:b3:f6:45:85:98:
b7:e0:1e:2d:0d:3f:16:81:d1:90:8d:84:64:de:52:
82:32:5a:79:55:55:c0:af:e8:6c:0a:6d:33:b2:db:
36:90:51:6b:91:11:50:1b:1f:e3:77:9b:58:06:37:
fb:65:ec:be:bc:d8:61:2c:4c:b2:3f:e8:2a:81:36:
cd:6f:d4:88:c1:9a:77:e6:02:d2:78:ef:63:65:ab:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E3:33:20:44:59:B2:79:81:B2:2C:C5:D1:79:A7:F3:41:A9:21:98
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/v-MzIERZsnmBsizF0Xmn80GpIZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.26.0/24
IPv6:
2001:7f8:154::/48
Signature Algorithm: sha256WithRSAEncryption
7f:9c:2f:18:21:91:1f:ce:d5:2f:cf:79:9c:c5:9c:f6:5f:26:
3d:a2:f5:95:ff:a5:e5:03:67:c7:89:a3:8b:dc:a9:b1:d7:68:
a6:72:1a:53:a1:58:4f:a7:98:93:86:33:ef:3c:03:87:b3:24:
e4:f7:6e:81:5b:84:6e:f0:53:b9:11:04:5a:be:fd:47:f0:61:
3d:6e:51:70:55:9d:98:2c:d8:1f:f6:b8:3e:56:49:dd:9d:5d:
28:fe:e7:22:14:b8:99:d5:d5:24:a5:57:43:f0:04:a8:15:07:
e6:ec:79:23:09:dc:b4:55:26:c0:5d:1d:e2:d6:aa:ec:9f:27:
68:96:51:55:31:f4:97:af:3b:c8:31:9d:d3:bc:13:05:f9:c5:
6d:cb:52:5d:b8:55:fb:c0:a6:6f:76:e5:57:71:e1:45:1d:1f:
d1:52:9e:e1:ad:ac:7b:8e:de:22:d3:09:28:30:6f:ee:4c:9b:
01:33:19:5c:01:be:52:d4:cb:35:4c:d3:cf:cb:3d:b0:84:b0:
f9:66:15:ba:b8:90:b2:f7:4e:17:ba:a5:b4:f8:1c:a7:4f:b5:
50:eb:56:8d:de:ee:90:3b:1d:15:d1:7a:ab:1c:94:92:78:1a:
0f:c6:21:6f:e2:b0:45:a8:4e:41:7a:11:6a:0d:ea:ba:5f:00:
b2:1a:87:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:37:43 2026 by rpki-client