Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/mlxjfCYLY5zP7FWHQn5jZrn1-2E.roa
File: mlxjfCYLY5zP7FWHQn5jZrn1-2E.roa (raw, json)
Hash identifier: Sa3BVa6U3gGHjYDNKkWwgEzxSnctftBOzOaSJF0fsp8=
Subject key identifier: 9A:5C:63:7C:26:0B:63:9C:CF:EC:55:87:42:7E:63:66:B9:F5:FB:61
Certificate issuer: /CN=83c966da5eead50905091c3b599c9a44074739d0
Certificate serial: 01A07FFCAADE31F7AFF71F9DE10CD9FD5B6C
Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/mlxjfCYLY5zP7FWHQn5jZrn1-2E.roa
Signing time: Tue 08 Sep 2026 07:47:40 +0000
ROA not before: Tue 08 Sep 2026 07:47:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 91.199.81.0/24 maxlen: 24
216.120.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:fc:aa:de:31:f7:af:f7:1f:9d:e1:0c:d9:fd:5b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0
Validity
Not Before: Sep 8 07:47:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a5c637c260b639ccfec5587427e6366b9f5fb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:c9:dd:27:bd:ce:b9:ba:45:45:ee:90:13:
b9:3f:cf:d9:ef:08:cb:8d:0b:cb:c5:b7:52:ed:4c:
97:b9:8c:d9:14:c3:ed:8a:76:36:12:f2:13:f7:81:
21:02:9c:56:8c:7f:c1:02:09:f4:f7:c9:95:da:7d:
86:a2:33:47:d3:ad:ac:d5:c1:8b:a9:82:ab:50:15:
fa:2e:41:e6:14:87:9e:7c:68:97:64:96:38:db:5e:
ed:f1:d4:60:09:ac:0c:bf:e1:d9:fd:f2:17:99:1e:
fe:92:62:49:8f:ad:6f:9b:02:10:a4:94:c0:77:39:
8d:2f:4c:a4:83:a4:29:93:b0:02:66:c3:d5:62:9b:
1c:25:8b:d5:55:e8:5c:c3:a7:ea:6a:e0:1b:cb:d0:
a0:f3:c7:19:a6:3d:56:87:92:bc:94:0d:aa:be:5a:
7a:4d:05:6c:9d:c8:ef:81:23:8d:4d:63:70:18:e4:
77:d8:59:f7:b4:88:04:f0:5d:ee:02:87:02:81:0c:
d4:f1:8f:b0:87:ac:62:07:b0:4b:cc:18:4e:d2:96:
fe:87:2b:1c:71:77:72:85:c9:22:63:60:38:43:9e:
a6:90:a3:b4:b8:e8:84:d9:19:7c:5e:3e:e0:6a:c0:
c5:f3:d8:1f:dd:20:6a:01:4f:92:53:31:8d:f2:be:
4e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5C:63:7C:26:0B:63:9C:CF:EC:55:87:42:7E:63:66:B9:F5:FB:61
X509v3 Authority Key Identifier:
keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/mlxjfCYLY5zP7FWHQn5jZrn1-2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.81.0/24
216.120.180.0/23
Signature Algorithm: sha256WithRSAEncryption
59:14:cb:c5:be:3d:e7:aa:ab:30:9e:24:cc:2b:15:f1:91:6d:
25:93:bb:47:b7:d0:bb:a8:3a:8c:b6:93:7d:fc:2d:e7:8c:b9:
4b:21:fd:9e:c1:62:ca:96:a2:ad:83:1f:c4:a4:28:d8:d1:70:
4e:4f:3e:1f:e1:79:5c:2a:d6:27:92:0f:5b:c0:f2:00:ea:a9:
a0:fe:5f:a5:93:16:13:59:e2:77:24:ed:10:f6:77:34:e9:cd:
74:6e:40:02:2a:25:13:8c:68:f3:4e:74:b5:9f:b0:36:36:0a:
26:6b:6d:02:fc:f9:3e:35:99:b0:3a:0f:f7:91:59:1e:74:ce:
ee:87:21:eb:c9:54:18:ad:91:85:37:59:95:af:08:48:97:59:
c1:60:9d:c1:23:63:2d:7b:f4:9e:1c:03:ee:99:16:6d:13:be:
20:05:61:2f:c6:35:0a:29:25:18:28:d7:16:19:56:b9:57:25:
6d:5c:88:7e:61:2b:46:57:bb:1b:3b:3a:dc:71:3d:04:e5:b2:
34:b0:fa:91:ef:57:6f:9d:3e:21:29:6c:d4:b3:44:e6:b3:39:
12:e0:da:33:dd:43:41:c9:b4:e3:17:2a:87:c0:93:c1:ca:53:
35:03:a3:e0:a4:fe:f4:39:97:f2:9c:3e:88:41:12:af:36:65:
db:33:9f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:36 2026 by rpki-client