Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/mahoof4m7VQsfHWs8J1qWV__YZQ.roa
File: mahoof4m7VQsfHWs8J1qWV__YZQ.roa (raw, json)
Hash identifier: fJTBlPt7bZTm/FjsAsBry9UuObsDLmAxGPqwEBr5S84=
Subject key identifier: 99:A8:68:A1:FE:26:ED:54:2C:7C:75:AC:F0:9D:6A:59:5F:FF:61:94
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019D01004B756A41DD1BE16A6C7DBDDFA63A
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/mahoof4m7VQsfHWs8J1qWV__YZQ.roa
Signing time: Wed 18 Mar 2026 12:51:29 +0000
ROA not before: Wed 18 Mar 2026 12:51:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 195.216.176.0/23 maxlen: 23
213.182.196.0/24 maxlen: 24
213.182.197.0/24 maxlen: 24
213.182.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:00:4b:75:6a:41:dd:1b:e1:6a:6c:7d:bd:df:a6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Mar 18 12:51:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99a868a1fe26ed542c7c75acf09d6a595fff6194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:fe:b8:c7:56:cb:14:af:79:d3:81:b6:f9:
1d:2c:5c:1f:10:0a:b8:06:de:0f:58:dd:d8:5f:47:
a9:72:f2:97:71:e0:9a:71:10:36:6f:e3:6c:1b:98:
8d:bf:d5:93:46:98:61:16:23:59:8d:62:67:e8:14:
11:5d:18:27:30:06:77:f8:4e:82:5c:46:80:43:66:
57:22:08:13:97:f7:57:c6:ce:44:2f:46:c1:b2:32:
2a:d5:96:c5:64:dc:46:b7:82:93:0f:23:0e:3e:30:
37:e2:de:44:f7:10:e9:a3:a3:36:87:66:71:ae:6c:
0f:41:7a:0b:22:1c:ea:c6:d5:6e:79:6f:f2:cd:b1:
22:b0:65:05:42:0d:2f:00:fa:87:12:f6:c6:d0:a9:
19:dc:d9:80:8a:40:bb:9c:59:6f:7b:21:22:66:45:
10:27:97:74:d6:bb:6f:e7:35:5a:cf:63:7d:57:21:
93:dc:6b:4d:62:69:af:91:f1:90:d3:84:1e:24:ef:
b4:1e:27:7c:17:db:c8:ae:2f:03:13:f0:67:cf:54:
0f:50:f4:dc:b9:01:ec:01:cf:32:bc:57:30:e6:f1:
78:28:e4:7e:cf:21:d4:0b:1a:e9:e6:6e:07:75:4e:
f9:2a:d1:58:f3:b1:40:f3:e8:61:8c:fc:3f:d4:5f:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A8:68:A1:FE:26:ED:54:2C:7C:75:AC:F0:9D:6A:59:5F:FF:61:94
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/mahoof4m7VQsfHWs8J1qWV__YZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.176.0/23
213.182.196.0/23
213.182.218.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:01:8f:69:4b:94:47:cb:f8:5c:62:98:5d:e6:dc:d6:02:a9:
2b:69:7e:43:3e:12:55:db:c2:fa:57:00:4a:bb:d6:5d:ae:42:
92:8f:62:37:7b:3b:f9:97:f4:55:b0:07:ff:82:e2:2f:e3:21:
ae:b1:14:e4:aa:31:36:8d:54:56:e9:ca:7b:90:af:0b:71:a2:
65:6f:02:af:70:86:1e:1e:89:8e:85:06:26:24:38:e1:7c:86:
67:c7:1a:4d:59:82:70:13:a5:fd:49:af:d9:03:1d:d3:ea:df:
1f:48:da:95:06:7c:f0:3d:ec:bb:9c:6d:5a:7e:ec:21:57:7a:
e8:b1:7c:0f:73:77:ae:2e:39:eb:42:99:92:bd:1e:5b:81:45:
fe:2d:82:5f:54:9e:28:3f:4c:ee:e0:06:3c:48:98:70:40:da:
8c:b8:01:0a:6e:5d:22:d5:97:b5:31:5b:78:b1:09:ef:44:fb:
25:1f:fa:6b:8b:46:40:a5:80:97:8f:86:5a:aa:a6:4a:0b:26:
a6:9b:97:74:b1:69:ad:6b:4e:aa:22:51:79:34:df:00:a5:3f:
a4:1d:40:18:28:41:22:f9:54:72:78:46:8a:e4:11:b6:d8:56:
b4:cc:3b:3c:2c:98:ed:69:50:bc:62:0d:c6:b2:e1:b0:d6:2f:
df:7d:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 06:43:16 2026 by rpki-client