Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/mRcIbFNCnD8-j166Cds9xjp_G64.roa
File: mRcIbFNCnD8-j166Cds9xjp_G64.roa (raw, json)
Hash identifier: hXGGUlabA9BUoPGb8XsHCFiJUJpqlscIvK51Nx3M6j0=
Subject key identifier: 99:17:08:6C:53:42:9C:3F:3E:8F:5E:BA:09:DB:3D:C6:3A:7F:1B:AE
Certificate issuer: /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Certificate serial: 019E34E311014ED1D22E2A939B7262F8206D
Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/mRcIbFNCnD8-j166Cds9xjp_G64.roa
Signing time: Sun 17 May 2026 07:42:36 +0000
ROA not before: Sun 17 May 2026 07:42:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200645
IP address blocks: 185.100.44.0/22 maxlen: 22
185.117.136.0/22 maxlen: 22
185.177.156.0/22 maxlen: 22
185.179.220.0/22 maxlen: 22
193.104.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:34:e3:11:01:4e:d1:d2:2e:2a:93:9b:72:62:f8:20:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Validity
Not Before: May 17 07:42:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9917086c53429c3f3e8f5eba09db3dc63a7f1bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:fa:79:e0:bb:4b:be:60:99:18:b6:78:4d:3b:
e6:e0:80:6f:3e:ee:e8:6e:d6:73:77:c1:ac:17:99:
ec:d3:d6:66:b5:96:fd:b6:23:e7:d4:97:e0:56:5c:
95:35:a6:9c:d4:9a:32:c2:d1:f4:26:9b:ca:3f:a9:
ab:81:89:dd:fd:0e:24:ea:a8:6d:ee:4f:a4:f7:fe:
e4:03:cb:7d:e1:e1:7f:07:c2:1b:b3:cd:90:c8:ce:
25:dc:0b:bc:c2:f7:87:f6:33:53:73:ab:44:e6:39:
86:21:24:61:9c:c8:ca:4e:c0:68:55:20:3d:6e:8c:
47:f1:3f:3e:21:b7:f5:57:45:d3:fb:33:42:21:f0:
81:c4:08:a3:f7:17:ce:4c:8e:f8:5b:f7:35:11:4a:
6c:bd:4d:32:66:8a:97:fc:0f:ad:02:00:8b:f4:dc:
7c:a2:5b:87:2f:c1:49:2d:58:7a:00:d3:62:8a:c8:
3b:15:a4:8d:f3:3e:c1:76:bc:33:de:ae:9b:99:c7:
64:65:3c:90:fe:11:da:ed:62:4b:ec:9d:70:55:8e:
7d:9d:4f:39:bf:eb:12:79:1e:f1:d5:12:70:35:55:
13:b9:ef:00:33:15:86:4d:d1:fc:ff:aa:69:2f:3c:
3d:88:d4:ee:46:30:3d:3d:51:99:10:31:25:dd:b5:
18:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:17:08:6C:53:42:9C:3F:3E:8F:5E:BA:09:DB:3D:C6:3A:7F:1B:AE
X509v3 Authority Key Identifier:
keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/mRcIbFNCnD8-j166Cds9xjp_G64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.44.0/22
185.117.136.0/22
185.177.156.0/22
185.179.220.0/22
193.104.29.0/24
Signature Algorithm: sha256WithRSAEncryption
52:2c:9d:fc:1a:02:79:53:27:9b:60:74:52:1e:80:44:ee:31:
38:b3:16:ca:e1:50:f7:3e:df:90:99:8d:4a:1a:e6:3b:ee:e4:
59:e1:c6:90:e2:cc:90:a1:44:9a:ae:f9:61:89:24:7d:cc:86:
4e:c7:60:1c:29:b5:1f:bb:dd:e5:dc:a7:b7:60:f0:f4:1b:c2:
0c:96:10:6b:ba:bf:4e:4f:1b:08:64:c1:aa:27:6f:ce:1c:cb:
ad:3e:c7:4c:a2:22:9f:b1:6e:c6:4d:b2:e3:eb:45:a5:1c:72:
4b:17:4c:1e:65:78:dd:2c:51:ca:ac:49:57:23:1e:8e:71:e9:
6b:32:e9:70:94:1d:00:f4:98:38:b2:b0:33:e9:82:6f:77:1a:
a8:49:a4:9e:c9:e1:70:a3:2c:5e:7c:ff:b5:29:58:b7:d0:d3:
d2:c8:0d:4c:00:a0:63:56:24:85:2b:c2:6d:96:e9:f7:b6:04:
98:3b:04:7b:4c:9d:34:15:2f:39:d7:df:f6:11:98:58:5e:6a:
39:78:8f:65:86:b4:19:44:8e:cb:6b:8a:43:e1:d8:3f:84:58:
87:ff:01:17:cb:9e:c8:eb:7b:89:60:2c:db:28:17:25:a9:1c:
c9:21:6d:78:b3:79:2e:a4:be:50:c1:2a:6b:51:a9:40:83:f6:
40:f3:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:32:23 2026 by rpki-client