Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/MtUsxVkzaQnJUDqvIpHbGDeDiMY.roa
File: MtUsxVkzaQnJUDqvIpHbGDeDiMY.roa (raw, json)
Hash identifier: 1LbHmqJ52KUuB35jhJjRFkWQs98HkVEhmIkG4Hjy7kA=
Subject key identifier: 32:D5:2C:C5:59:33:69:09:C9:50:3A:AF:22:91:DB:18:37:83:88:C6
Certificate issuer: /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial: 01A068D0F7471D406B7048412E8E65CAF9A6
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/MtUsxVkzaQnJUDqvIpHbGDeDiMY.roa
Signing time: Thu 03 Sep 2026 19:48:40 +0000
ROA not before: Thu 03 Sep 2026 19:48:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 64.239.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:d0:f7:47:1d:40:6b:70:48:41:2e:8e:65:ca:f9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Validity
Not Before: Sep 3 19:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32d52cc559336909c9503aaf2291db18378388c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:85:3a:6a:fd:90:b9:ae:ed:3f:50:17:54:4c:
bd:53:7e:93:fd:7d:1c:68:c5:a8:89:da:c9:aa:84:
02:aa:80:d9:54:c6:44:77:6b:ef:38:53:c9:4d:fc:
2b:ab:cd:78:07:4e:fb:22:9c:41:9a:db:ea:db:54:
8d:99:3d:9d:22:b5:4f:97:70:6c:7f:8a:fb:62:33:
e1:19:0d:42:ac:c4:11:2a:8d:56:41:a6:53:6c:e2:
a0:df:9a:ae:59:1d:b0:98:3b:61:d2:3b:dc:80:c3:
47:dd:c3:28:34:67:c4:15:10:25:0c:80:11:e5:c8:
b1:20:57:15:ea:3a:02:23:a3:1c:3e:e6:b1:75:0a:
20:1c:25:ce:74:81:0b:45:52:43:31:78:ab:08:6f:
01:6a:91:3a:8a:9e:e3:15:fd:0c:aa:6d:65:80:a2:
c5:aa:6d:20:e3:d8:3a:1a:cb:df:8a:cf:45:73:c0:
f6:c4:96:93:08:c3:b8:21:a0:f1:ab:9c:37:20:77:
2c:c1:18:6b:aa:1e:c6:72:b6:72:9b:06:44:11:f2:
3d:5e:ed:27:63:13:9c:c7:ed:41:78:4a:fc:44:01:
d3:97:04:f5:55:d7:8c:71:d7:1b:11:8d:69:27:8e:
d4:f5:32:1a:11:e3:a0:9a:b4:31:29:2e:7e:a9:0e:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D5:2C:C5:59:33:69:09:C9:50:3A:AF:22:91:DB:18:37:83:88:C6
X509v3 Authority Key Identifier:
keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/MtUsxVkzaQnJUDqvIpHbGDeDiMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.239.56.0/24
Signature Algorithm: sha256WithRSAEncryption
65:38:e2:00:52:67:6f:96:36:39:9e:cd:de:7f:a9:a0:a1:30:
51:75:2c:95:4c:95:5e:41:86:9a:84:ba:a6:4b:cb:f5:a2:af:
b7:23:6e:74:5b:39:ab:0f:28:f2:d6:dd:3e:48:f9:03:29:e9:
55:3e:f2:f4:b7:48:43:65:e0:56:1c:c0:56:ab:33:01:7d:9d:
16:d3:f2:0a:07:54:96:fe:1a:b4:7e:5b:96:c5:09:c5:5e:29:
7f:ab:f5:b5:38:e6:30:9e:ff:72:f5:93:76:13:f4:e7:50:f8:
da:48:ad:fd:3f:06:23:89:a7:5c:b5:e0:ea:89:93:2d:a2:4d:
ea:38:f2:7f:e3:0d:34:a2:28:72:86:e8:17:ae:4f:da:a8:2a:
6b:15:d3:fe:87:9b:8a:52:8b:66:e1:91:21:9f:bb:80:7c:f0:
3d:ed:de:de:7a:5c:71:45:2d:a0:93:2f:13:72:51:aa:59:d7:
f5:78:d6:38:ba:da:4f:db:18:97:92:c1:91:c7:8c:e4:9f:18:
f6:db:c5:f2:78:3d:8d:f1:84:2b:b4:7b:e7:5b:39:d1:da:9d:
30:4c:c5:12:19:4d:7d:78:76:3e:c0:f2:04:3a:f2:89:81:3c:
71:4a:22:c8:c8:ce:c7:2a:11:3a:65:c9:68:79:43:33:62:6c:
16:47:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:49:05 2026 by rpki-client