Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/mZ0Vh3mUD-6BucwIMRh7n6Oob-w.roa
File: mZ0Vh3mUD-6BucwIMRh7n6Oob-w.roa (raw, json)
Hash identifier: LTInTuueEV5b9AKYoT2yYL8qnCIhIntMZeqV/2ZLbn8=
Subject key identifier: 99:9D:15:87:79:94:0F:EE:81:B9:CC:08:31:18:7B:9F:A3:A8:6F:EC
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 01A11C116D86F257E5A11996C0319A6B1919
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/mZ0Vh3mUD-6BucwIMRh7n6Oob-w.roa
Signing time: Thu 08 Oct 2026 15:11:06 +0000
ROA not before: Thu 08 Oct 2026 15:11:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201875
IP address blocks: 185.58.236.0/22 maxlen: 22
2a02:6460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:11:6d:86:f2:57:e5:a1:19:96:c0:31:9a:6b:19:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Oct 8 15:11:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=999d158779940fee81b9cc0831187b9fa3a86fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:ce:70:26:5b:e3:bf:8f:77:e2:b1:f9:a1:
7c:1a:a4:e1:5b:38:9f:13:85:e4:9a:e5:5d:7a:82:
c3:11:cb:12:40:c9:a7:4c:3c:03:0e:1a:d8:08:2c:
8b:ae:e1:29:8c:97:57:72:1a:33:9e:fd:ca:3f:41:
f7:01:48:8d:71:80:ab:7d:78:36:d2:f3:cd:77:25:
b3:f5:c8:6c:f3:32:91:fa:df:81:fd:f0:fc:0f:0e:
5a:c9:3b:5d:d0:d8:05:79:0a:e3:72:42:f9:88:b5:
14:dd:f3:64:d7:d7:48:9a:47:81:c4:30:16:2b:bc:
64:82:e0:69:f0:20:fc:2a:0a:6b:73:85:f5:0d:00:
93:d7:22:c5:fb:9c:07:db:59:71:36:84:8d:b9:03:
0b:f4:f5:89:00:1e:7c:bc:01:74:e4:b8:f4:e3:61:
1d:9d:70:6d:ae:81:bb:ac:2e:e4:5f:c0:c9:2a:c0:
eb:c9:bb:c7:59:df:42:46:84:c4:77:0a:2a:bb:fe:
bc:78:ba:9d:e9:1f:a7:56:e6:55:91:93:22:5b:ec:
5f:c7:aa:9c:95:c0:54:83:02:9e:62:9f:e4:2e:df:
3b:1f:9d:9f:19:7a:26:98:a9:7e:b5:8d:47:10:35:
1b:6a:0e:cb:de:94:0c:a4:ed:a2:f4:f3:a4:fe:ad:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9D:15:87:79:94:0F:EE:81:B9:CC:08:31:18:7B:9F:A3:A8:6F:EC
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/mZ0Vh3mUD-6BucwIMRh7n6Oob-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.236.0/22
IPv6:
2a02:6460::/32
Signature Algorithm: sha256WithRSAEncryption
82:4a:2b:c0:a4:3a:26:af:2b:f7:a7:60:80:9d:51:a8:b2:8b:
02:27:e6:0a:8a:82:41:13:e1:4a:ed:0b:53:cb:7e:53:7e:f7:
9a:ef:31:d6:b4:72:22:ba:7b:88:9f:e0:2a:05:d2:4f:c2:50:
45:48:7c:05:42:e4:5b:5a:66:58:ed:a9:c1:9f:e5:64:a8:ef:
55:48:8c:a1:a9:40:73:d1:e9:f4:6d:95:3a:98:5c:43:36:6d:
22:12:f4:06:a4:94:7f:0d:c3:c6:cb:7c:11:31:ee:66:93:67:
ed:e3:72:45:70:7a:87:0c:aa:5d:0b:2f:e0:64:88:aa:de:cc:
24:9a:d4:59:3b:c0:c4:bb:13:3f:79:39:e5:38:46:28:96:8b:
51:3d:fa:c9:4d:92:f1:44:89:f9:94:e4:d1:b3:06:a0:98:80:
ca:4d:27:1c:70:64:27:7d:9a:df:e8:44:ff:b7:2c:af:99:26:
90:2f:42:c3:65:a8:a0:fe:85:19:a6:33:28:04:49:64:21:1f:
a9:02:24:5c:f0:9e:a4:87:3a:19:cf:cf:fa:c1:13:9f:22:20:
ce:51:4c:6c:21:41:21:0e:aa:23:55:ce:a5:2f:dc:05:2f:81:
b7:ec:23:73:db:56:be:45:23:b5:27:bb:c8:77:05:a3:ad:ee:
17:22:1b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:37:07 2026 by rpki-client