Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/mFKdtVkkECRXbr5SxYYEthhWJyg.roa
File: mFKdtVkkECRXbr5SxYYEthhWJyg.roa (raw, json)
Hash identifier: h3A2tFpBQ3HB5luNdGxkXQa7G5lY/mxXHrD+ln0oC5I=
Subject key identifier: 98:52:9D:B5:59:24:10:24:57:6E:BE:52:C5:86:04:B6:18:56:27:28
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019FF1404E653442AE59E8238A3D9EE22D80
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/mFKdtVkkECRXbr5SxYYEthhWJyg.roa
Signing time: Tue 11 Aug 2026 14:35:51 +0000
ROA not before: Tue 11 Aug 2026 14:35:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218988
IP address blocks: 187.13.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:40:4e:65:34:42:ae:59:e8:23:8a:3d:9e:e2:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Aug 11 14:35:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98529db559241024576ebe52c58604b618562728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:17:4f:2e:aa:88:5e:53:46:a3:40:a8:60:
43:76:3a:c9:40:77:22:89:22:84:45:e0:80:90:7c:
e5:91:45:a9:86:ab:d4:e2:39:3d:4f:ed:5b:93:12:
8e:0f:22:f2:29:78:dd:72:39:08:22:da:84:83:7b:
48:88:45:e8:1b:cc:ba:86:8b:e9:6d:f9:f6:24:96:
c4:18:cb:fc:d1:5a:d0:ec:46:b8:c0:1d:6c:a3:19:
b1:93:5e:fb:a4:a0:83:e4:4c:0b:22:af:7b:e1:3c:
b9:8e:22:f2:16:01:70:e3:98:0a:b1:30:96:45:31:
64:ce:65:67:cc:ff:c1:f7:b4:5a:2f:e2:7a:62:8f:
ea:10:21:8a:6b:39:3b:1a:0e:a1:10:88:e6:35:84:
96:f2:e1:23:3c:f7:4f:2f:34:69:1b:be:2d:da:50:
ae:68:ae:d5:ef:7c:cd:d4:b8:c3:ec:42:c6:70:34:
49:30:dc:ef:62:30:3b:0d:bc:d7:1e:d9:02:be:62:
bd:6b:5b:98:12:07:fd:33:fd:a5:e5:7e:56:cf:9c:
92:74:48:a9:fe:af:37:ab:c7:26:92:e2:16:5c:c4:
91:38:2b:2b:79:82:17:d5:92:b2:33:25:6c:e9:a9:
61:77:0f:64:f1:ec:e1:3a:16:e8:83:c1:c3:8e:b2:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:52:9D:B5:59:24:10:24:57:6E:BE:52:C5:86:04:B6:18:56:27:28
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/mFKdtVkkECRXbr5SxYYEthhWJyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.13.64.0/23
Signature Algorithm: sha256WithRSAEncryption
38:04:b5:56:56:a9:23:5b:c6:38:37:23:56:4a:cc:5d:00:f0:
cd:c4:4c:40:a4:33:df:67:50:a6:90:1c:74:06:5d:ca:ea:00:
c2:0e:ba:c6:c3:e0:53:24:0b:3b:14:d1:ee:cb:fa:d4:c1:63:
61:dd:e7:a0:5e:25:5a:89:42:25:84:42:b5:f7:40:51:9a:40:
eb:15:b9:60:01:39:a2:b3:06:8f:d9:77:a9:9c:35:5e:2a:aa:
94:e3:0d:9a:e5:a7:b2:b7:b1:c0:45:82:7c:82:17:02:cb:ba:
3a:ef:6c:24:b6:6f:da:b4:3c:0d:d1:20:5d:0e:ad:d3:46:fa:
ca:2a:be:44:95:d5:02:a0:b7:c8:85:19:b6:be:6f:a0:46:2d:
69:71:b6:60:87:92:76:c7:21:0d:87:8f:df:16:b1:7d:50:26:
bc:a5:2b:02:0b:07:b1:b4:92:ef:be:71:14:e9:31:ef:97:41:
2c:e4:9b:35:06:06:18:14:f0:ed:7a:cf:0f:55:d9:f1:8a:02:
b0:6e:b8:f9:a5:82:48:02:a4:1c:ec:51:52:6c:d8:55:5e:32:
a6:dc:de:df:df:59:71:a5:56:cd:c2:26:da:6b:1f:ea:81:27:
b1:67:e9:3f:1a:1a:bb:ee:cd:30:2b:c5:6c:c3:59:14:5c:88:
e4:a3:9c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:30 2026 by rpki-client