Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mCSfqIwQT38EE5qohUisjEjKeJs.roa
File: mCSfqIwQT38EE5qohUisjEjKeJs.roa (raw, json)
Hash identifier: 7w/03+c8OT8asVpJ45hTHuW7TpacydJceZd/maMh2q4=
Subject key identifier: 98:24:9F:A8:8C:10:4F:7F:04:13:9A:A8:85:48:AC:8C:48:CA:78:9B
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A0A0B0F8E45254BE844D8B66896E838CE4
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mCSfqIwQT38EE5qohUisjEjKeJs.roa
Signing time: Mon 14 Sep 2026 16:12:27 +0000
ROA not before: Mon 14 Sep 2026 16:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213887
IP address blocks: 109.122.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:b0:f8:e4:52:54:be:84:4d:8b:66:89:6e:83:8c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Sep 14 16:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98249fa88c104f7f04139aa88548ac8c48ca789b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1f:75:f7:09:4c:3d:1c:f9:d8:6d:f3:e3:9f:
08:87:7f:9e:86:0c:9e:b7:fa:b9:96:81:35:46:51:
2f:dc:52:fd:c4:f4:9d:93:97:2f:ae:3f:9e:02:57:
b3:95:47:85:89:48:f6:c9:11:e2:78:47:d1:95:f2:
2b:1a:42:0c:71:72:c2:b4:33:c4:e7:72:58:2e:82:
de:b5:e6:c8:39:20:cf:f6:17:10:18:d3:68:0d:60:
24:2f:3f:81:49:b2:35:57:5a:3f:e2:01:a4:49:ac:
a2:f5:c0:76:9c:30:51:2b:bc:b9:cb:ad:f9:db:3a:
75:dd:8d:4b:7f:01:87:1e:6f:75:eb:9f:ce:82:7f:
04:c8:f7:a9:73:80:64:fb:3b:a0:ed:c8:e1:6b:f0:
c2:03:f2:f0:ec:0a:0d:7b:02:b6:77:c9:6a:60:5e:
e2:6e:93:12:f6:1f:38:d0:a0:ee:ef:db:7b:24:3b:
d8:7d:41:a2:55:44:18:c3:7f:96:55:34:43:3f:77:
75:b4:0d:d6:53:55:c7:3e:c1:09:b6:37:4f:93:92:
0a:65:37:c6:50:51:79:35:9d:9e:a5:d9:ee:55:95:
88:8c:42:33:71:14:a7:52:af:7f:5c:89:85:db:a5:
b4:a5:d2:00:c4:35:dd:73:bd:12:77:1c:d6:43:0e:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:24:9F:A8:8C:10:4F:7F:04:13:9A:A8:85:48:AC:8C:48:CA:78:9B
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mCSfqIwQT38EE5qohUisjEjKeJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.196.0/22
Signature Algorithm: sha256WithRSAEncryption
38:5b:70:36:f0:c9:ef:0a:e3:42:57:52:f6:4e:75:b1:80:30:
18:89:d1:8b:4e:ca:e9:31:4f:95:a7:a7:14:b9:95:b7:e0:c9:
d7:2c:a6:e2:7c:1f:c8:86:55:8d:ab:9b:b5:4e:9e:8e:a0:6d:
91:db:dc:52:d4:8b:93:7b:24:6a:24:4f:81:d9:72:d4:33:36:
28:2b:49:0b:89:7c:95:b3:45:8f:7f:aa:2a:e4:c5:79:83:fd:
03:94:a8:ce:cd:04:c1:4e:fa:1d:5c:a3:55:c9:5c:f0:78:46:
18:73:0e:ba:2c:b2:fc:ec:be:ec:a6:10:b8:c8:7c:d4:97:33:
a7:01:eb:62:a6:eb:f8:a1:84:04:50:aa:e6:62:f0:1d:2d:a3:
17:92:5e:a3:53:61:57:d2:09:68:29:27:cb:e8:82:2b:78:a4:
3a:4e:f3:75:eb:47:7e:70:66:56:62:a6:57:9b:3b:4b:c3:98:
2c:7e:e3:cf:ff:fe:5d:87:9d:64:1c:1f:6f:b5:c5:14:b8:6d:
25:a7:67:4a:ef:d6:6a:8f:c1:84:fb:84:52:fc:d7:1f:fe:a6:
d7:39:25:1d:7a:0a:d6:a8:1e:db:f9:04:1d:9f:81:aa:3c:fa:
7d:89:77:26:95:98:53:ca:d4:53:12:ca:0b:8d:04:3b:32:89:
53:87:63:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCgsPjkUlS+hE2LZolug4zkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjYwOTE0MTYxMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODI0OWZhODhjMTA0ZjdmMDQxMzlhYTg4NTQ4YWM4YzQ4Y2E3ODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx919wlMPRz52G3z458Ih3+ehgye
t/q5loE1RlEv3FL9xPSdk5cvrj+eAlezlUeFiUj2yRHieEfRlfIrGkIMcXLCtDPE
53JYLoLetebIOSDP9hcQGNNoDWAkLz+BSbI1V1o/4gGkSayi9cB2nDBRK7y5y635
2zp13Y1LfwGHHm9165/Ogn8EyPepc4Bk+zug7cjha/DCA/Lw7AoNewK2d8lqYF7i
bpMS9h840KDu79t7JDvYfUGiVUQYw3+WVTRDP3d1tA3WU1XHPsEJtjdPk5IKZTfG
UFF5NZ2epdnuVZWIjEIzcRSnUq9/XImF26W0pdIAxDXdc70SdxzWQw70QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJgkn6iMEE9/BBOaqIVIrIxIynibMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvbUNTZnFJd1FUMzhFRTVxb2hVaXNqRWpLZUpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbXrEMA0G
CSqGSIb3DQEBCwUAA4IBAQA4W3A28MnvCuNCV1L2TnWxgDAYidGLTsrpMU+Vp6cU
uZW34MnXLKbifB/IhlWNq5u1Tp6OoG2R29xS1IuTeyRqJE+B2XLUMzYoK0kLiXyV
s0WPf6oq5MV5g/0DlKjOzQTBTvodXKNVyVzweEYYcw66LLL87L7sphC4yHzUlzOn
Aetipuv4oYQEUKrmYvAdLaMXkl6jU2FX0gloKSfL6IIreKQ6TvN160d+cGZWYqZX
mztLw5gsfuPP//5dh51kHB9vtcUUuG0lp2dK79Zqj8GE+4RS/Ncf/qbXOSUdegrW
qB7b+QQdn4GqPPp9iXcmlZhTytRTEsoLjQQ7MolTh2Mq
-----END CERTIFICATE-----
Generated at Sat Sep 19 17:48:10 2026 by rpki-client