Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mrH_c6MDVmWh2smF48_en45gvRs.roa
File: mrH_c6MDVmWh2smF48_en45gvRs.roa (raw, json)
Hash identifier: WhBKEZlenjYwUuPr/djY3XEP43MqwbwZsVwmWtggjLI=
Subject key identifier: 9A:B1:FF:73:A3:03:56:65:A1:DA:C9:85:E3:CF:DE:9F:8E:60:BD:1B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D434E01A5D1652846484367EAE3EF2C1D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mrH_c6MDVmWh2smF48_en45gvRs.roa
Signing time: Tue 31 Mar 2026 09:51:18 +0000
ROA not before: Tue 31 Mar 2026 09:51:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200506
IP address blocks: 37.202.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Apr 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:4e:01:a5:d1:65:28:46:48:43:67:ea:e3:ef:2c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 31 09:51:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ab1ff73a3035665a1dac985e3cfde9f8e60bd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:f7:58:2c:b6:bd:8c:73:c2:88:15:ea:6a:
cf:26:58:44:fe:0e:59:61:bc:ea:6e:2b:4e:e6:85:
08:0e:ac:9f:3e:73:52:80:fa:53:ef:3d:e7:89:8d:
00:47:05:90:28:73:01:2d:6e:2b:6e:f3:60:f3:33:
dd:74:9b:d0:ab:27:1e:e1:6f:b5:73:61:39:4d:db:
a2:c8:a1:b0:3b:be:49:62:2e:19:f5:e6:de:05:0b:
ad:6f:80:ba:1a:a3:26:41:fa:fd:1d:81:1c:c8:33:
4e:f4:d6:6c:14:2a:1f:dd:06:d8:9f:58:26:5a:6b:
05:06:e1:a9:c3:e3:99:33:c1:43:20:93:78:21:c0:
e8:3d:30:23:5b:90:ab:ac:17:15:3b:b2:32:22:17:
c2:a9:9f:76:50:e0:a9:b3:da:a7:23:6e:c3:0d:fd:
26:c1:85:ab:90:b9:e7:1b:17:df:6c:86:32:a3:cc:
88:00:94:6e:f5:fa:68:92:b7:7c:a9:82:91:a0:14:
cb:92:16:4b:ec:be:a6:f8:0d:47:33:08:fa:6a:c4:
c0:d7:a0:35:28:01:2a:c4:14:e9:3c:0d:18:e1:4c:
47:96:cf:5c:c4:aa:22:98:09:2b:cc:62:be:05:ce:
75:cb:85:38:e0:8b:8f:80:12:29:b8:07:fb:83:bd:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B1:FF:73:A3:03:56:65:A1:DA:C9:85:E3:CF:DE:9F:8E:60:BD:1B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mrH_c6MDVmWh2smF48_en45gvRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.217.0/24
Signature Algorithm: sha256WithRSAEncryption
05:bc:89:c9:8b:96:a6:0e:0b:a3:73:52:f6:e7:35:6a:5d:13:
98:29:2a:c7:ce:64:45:cd:ed:5f:91:65:d5:ff:bf:54:c4:00:
c6:8f:cf:cc:6f:f9:35:6c:2a:c6:39:f1:9e:b0:64:eb:ab:27:
ca:f9:04:69:ba:55:1c:5b:ac:3f:91:b6:84:18:a2:23:d0:2b:
a8:db:69:27:1c:e9:9c:3b:85:20:ec:c7:20:85:ca:65:15:9d:
93:fe:14:a8:80:07:22:2d:94:21:ab:98:6b:8e:b0:08:fd:9b:
40:3b:54:3b:a8:ca:5f:3f:d1:7f:30:a8:c0:9c:a5:a3:70:ec:
db:40:4c:98:58:02:7c:73:2d:cd:e0:58:d2:86:01:86:41:97:
a4:0d:c3:8c:9f:b5:88:64:ef:d6:2b:db:2e:8c:7f:9a:10:d7:
14:71:9d:b8:01:ce:8e:43:c0:3a:da:8a:f2:29:88:b0:36:7d:
c5:9f:7f:ca:44:c9:ee:87:ea:cf:cc:92:68:ff:fc:3d:70:d3:
87:01:cb:23:83:9e:44:cc:4f:57:32:f9:2e:84:8f:ed:4b:3f:
69:32:e9:67:1d:41:64:35:f1:b3:6a:c3:03:cb:83:fd:3d:fe:
14:df:a4:43:e4:c3:db:55:e6:12:f6:b1:53:ee:2e:a7:f5:78:
4e:19:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 13:04:52 2026 by rpki-client