Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/mb_8DQNRhnYeblZoIpzg5HhO82I.roa
File: mb_8DQNRhnYeblZoIpzg5HhO82I.roa (raw, json)
Hash identifier: CV9HGV1yyURPXluHri4wm+4FyNp6vBA+4AFnDvt7gTU=
Subject key identifier: 99:BF:FC:0D:03:51:86:76:1E:6E:56:68:22:9C:E0:E4:78:4E:F3:62
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A0D2716B3EC90B2D6153FE5C0B83DA58DB
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/mb_8DQNRhnYeblZoIpzg5HhO82I.roa
Signing time: Thu 24 Sep 2026 08:04:03 +0000
ROA not before: Thu 24 Sep 2026 08:04:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213529
IP address blocks: 88.210.63.0/24 maxlen: 24
216.162.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:71:6b:3e:c9:0b:2d:61:53:fe:5c:0b:83:da:58:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Sep 24 08:04:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99bffc0d035186761e6e5668229ce0e4784ef362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:88:bd:d2:f4:f6:9c:fb:fd:79:da:f5:b1:
00:e0:91:87:5f:3a:57:31:08:14:66:d6:f5:9a:80:
6d:e6:43:1d:61:a6:94:35:bf:b7:5c:d5:40:46:9b:
e1:bf:47:42:19:70:1c:aa:b5:55:b6:ab:d8:f2:6a:
c8:e4:8b:97:16:52:8a:13:17:f7:5f:97:6a:d0:4c:
48:5f:00:5a:b5:1b:ea:f4:ab:28:d1:12:45:68:ec:
f3:7b:26:3b:01:b4:10:d6:b5:7c:84:e2:1a:d4:ae:
ac:c4:52:97:13:5d:53:e3:11:c3:05:ca:26:df:7c:
26:8e:84:8b:36:fa:c0:0d:d7:ee:a4:26:cd:f5:28:
78:65:cf:25:f1:d1:2c:18:1c:11:28:c5:e8:67:34:
13:8e:ac:d1:58:91:64:cd:94:96:ac:bd:e3:e6:4c:
79:ff:66:91:7b:1d:7e:dc:51:e0:41:10:2a:29:3a:
d7:90:f7:d2:f2:37:3e:70:77:0a:80:06:54:b9:1f:
dd:82:07:f4:fd:85:ac:99:b1:e3:79:0e:d9:87:dd:
5b:e1:0a:d1:bc:40:a1:24:07:d1:e9:24:32:03:31:
49:f5:96:48:7d:8b:a7:fe:bc:f3:85:2b:ad:d2:c8:
a7:84:d7:5b:b2:a6:90:69:ba:c0:ce:e5:f4:6c:39:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BF:FC:0D:03:51:86:76:1E:6E:56:68:22:9C:E0:E4:78:4E:F3:62
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/mb_8DQNRhnYeblZoIpzg5HhO82I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.210.63.0/24
216.162.44.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f0:a6:56:b5:10:11:4d:23:80:ca:9f:87:51:9d:5b:cc:95:
49:77:6c:32:ef:b8:4b:65:99:34:02:2a:fa:3b:82:17:1c:c7:
3f:85:66:53:62:56:42:c3:de:e2:7f:ae:1b:f8:7f:01:17:3d:
20:8a:dd:e2:01:1f:46:b8:89:9e:ed:ee:35:fd:56:24:9e:21:
be:ad:92:72:dd:b1:54:17:02:b3:24:46:2a:80:e2:bb:dc:35:
72:6f:cb:20:d6:f1:6c:54:65:1c:cc:18:a1:d8:56:b1:48:e5:
35:c3:f3:d8:06:f3:8d:ae:dd:5e:9a:b3:fb:c5:f9:a0:bf:b3:
4b:58:95:44:4d:50:33:c2:73:c5:36:8c:11:94:e2:61:3f:fa:
1e:bf:37:df:60:f1:1f:52:23:5f:9d:19:9b:45:78:70:e9:3d:
2d:9c:e4:70:de:3b:af:b5:95:9c:9d:dc:ed:94:44:f6:6c:66:
d2:fb:02:ee:93:6f:ef:e2:3f:90:e9:79:49:87:89:12:cd:c5:
f7:d3:18:8b:8e:45:81:b3:03:51:3c:8b:69:24:29:43:99:b1:
94:82:cf:f7:c4:de:c9:1f:cd:81:64:db:d9:b6:ac:c2:2e:40:
f9:da:6f:41:8d:34:a1:36:8e:39:e9:eb:c9:3d:db:8e:5a:c7:
41:a6:cd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:46:26 2026 by rpki-client