Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/MExW6rVJZ9pWbqvFp0G9lOka-58.roa
File: MExW6rVJZ9pWbqvFp0G9lOka-58.roa (raw, json)
Hash identifier: HkEI96jI4lT7soA+OZMJwpG4nYSiA2Db+DFyoXEJySo=
Subject key identifier: 30:4C:56:EA:B5:49:67:DA:56:6E:AB:C5:A7:41:BD:94:E9:1A:FB:9F
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A0C559BBFBB29CB7D92B8D7331B653369E
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/MExW6rVJZ9pWbqvFp0G9lOka-58.roa
Signing time: Mon 21 Sep 2026 19:03:07 +0000
ROA not before: Mon 21 Sep 2026 19:03:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218688
IP address blocks: 185.102.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:59:bb:fb:b2:9c:b7:d9:2b:8d:73:31:b6:53:36:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Sep 21 19:03:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=304c56eab54967da566eabc5a741bd94e91afb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:74:2b:31:fa:73:77:0d:cd:d5:50:e1:64:4c:
ff:a9:dc:ce:7d:ad:e0:21:92:22:d3:34:c7:81:bf:
fc:49:1d:e2:60:50:ec:34:62:de:84:cf:1c:ec:fe:
e2:39:9e:cd:22:25:c0:1c:60:68:e2:73:c3:12:0e:
6d:2e:b3:8a:6a:a4:2e:07:d9:01:75:30:4e:ee:0c:
90:0b:1a:93:83:57:cd:fb:df:1b:02:ea:c3:bd:48:
66:f0:87:4f:0b:42:5b:9e:0c:11:37:9e:94:28:79:
ba:e6:0a:7d:62:45:36:38:21:1d:6d:a3:8c:f3:15:
61:01:a8:5c:c4:99:d3:74:2b:bd:c1:9f:a1:c4:9d:
4b:5a:9b:9b:18:2c:28:62:4e:a3:73:be:53:71:6f:
9e:49:f0:16:5d:6a:40:67:61:16:20:a6:67:16:1a:
62:47:fd:4c:f9:30:83:09:32:5d:a2:c9:31:c8:b9:
71:71:21:22:c1:97:10:24:f5:a2:da:f8:05:23:a0:
24:5e:d2:f7:45:0a:14:18:9a:ba:67:7d:1d:56:48:
e4:dc:47:a7:e9:c7:73:ed:15:cb:6c:ec:dc:5d:53:
be:f5:92:51:3f:bb:85:23:e8:c0:a2:c0:e3:42:8f:
6a:c4:c3:32:91:5b:f1:e6:ad:0c:57:f2:86:73:c5:
b0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4C:56:EA:B5:49:67:DA:56:6E:AB:C5:A7:41:BD:94:E9:1A:FB:9F
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/MExW6rVJZ9pWbqvFp0G9lOka-58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.115.0/24
Signature Algorithm: sha256WithRSAEncryption
98:96:83:87:31:b0:c4:a8:4e:41:84:da:4e:ae:61:6d:f4:22:
d6:6d:d4:c2:b1:ec:4d:73:85:81:cd:e3:e2:5a:ab:8f:5b:ca:
3f:0e:15:15:ba:f0:14:8d:83:21:2d:2b:ce:91:d3:22:7b:63:
f7:6b:f8:50:38:fd:53:1c:e4:72:bc:2e:fe:4d:b1:d9:0f:ce:
42:23:c7:0c:56:33:e1:f5:bf:c3:1b:22:32:32:60:25:86:e2:
70:3a:e8:ba:89:35:3e:9f:e7:9d:e4:57:e5:22:b7:19:0e:3a:
b0:11:86:7b:d2:fd:27:ab:17:80:1d:3c:83:ad:30:52:9d:e9:
c5:e5:ba:79:6c:d1:7d:a8:af:c9:e5:0c:4c:cf:ee:85:18:1d:
29:0b:fe:1a:d3:41:09:aa:94:09:fe:2a:e5:f9:2d:97:55:2b:
af:06:5f:fc:9e:43:85:e8:5d:d2:01:f9:ee:93:8f:5f:c9:a2:
b5:01:79:6a:78:69:9b:90:ce:a1:62:ee:51:a8:0b:87:58:dd:
ea:de:1e:f8:ea:d6:81:50:69:7e:09:d1:43:cb:dd:fc:a4:14:
e1:c0:a1:ce:c4:0d:bd:da:60:9d:47:c8:f5:62:eb:cf:84:aa:
1d:48:31:c7:15:17:2e:94:fa:cb:e3:11:85:f7:92:d4:de:2f:
01:0f:fc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:44:03 2026 by rpki-client