Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/MrWmH_MbABsdkBqCFs3M8fCwO6k.roa
File: MrWmH_MbABsdkBqCFs3M8fCwO6k.roa (raw, json)
Hash identifier: PV4gzaqHFzi+Hhp8rNjt2QZxGgJeNB9fPcuuG+pb/N0=
Subject key identifier: 32:B5:A6:1F:F3:1B:00:1B:1D:90:1A:82:16:CD:CC:F1:F0:B0:3B:A9
Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial: 01A0ED82FCB6B0E45FEEE6FF2AD7380D4D89
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/MrWmH_MbABsdkBqCFs3M8fCwO6k.roa
Signing time: Tue 29 Sep 2026 14:12:59 +0000
ROA not before: Tue 29 Sep 2026 14:12:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24768
IP address blocks: 91.244.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:82:fc:b6:b0:e4:5f:ee:e6:ff:2a:d7:38:0d:4d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Validity
Not Before: Sep 29 14:12:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32b5a61ff31b001b1d901a8216cdccf1f0b03ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:55:19:64:0e:1d:84:6d:11:5e:3c:b1:88:
2e:58:4e:28:62:72:2b:3a:30:67:df:44:ec:01:6b:
93:e9:1c:6b:72:83:75:7f:6f:6d:35:33:c3:90:c1:
24:8f:0e:e0:b9:72:d2:ea:73:f2:fb:65:ee:0e:52:
c3:72:18:fb:e2:1d:9f:6f:41:12:b4:b3:59:81:7d:
70:f8:a6:a6:2a:80:a0:96:49:15:03:f3:ca:22:2e:
51:5a:96:5f:ba:3a:d1:40:89:13:e1:c8:a5:b6:40:
66:d4:a3:0e:2a:b8:99:f1:23:52:e7:20:3f:aa:80:
31:8a:68:0a:bf:21:9e:63:56:9e:bc:fa:5d:2d:e5:
92:9f:1e:7a:59:d8:96:ee:05:7a:7c:bd:21:51:29:
75:53:27:5f:f3:7c:30:e7:8c:49:1c:9c:c5:0a:75:
89:e7:9f:9c:e8:1c:78:ec:2a:c3:33:f1:af:fb:58:
4b:cb:32:8e:ca:7f:b5:59:82:1c:4f:f9:78:ed:09:
54:7c:88:d3:ad:90:39:6e:da:0f:60:ff:50:3d:ad:
38:d0:e5:c7:a5:47:6c:e7:23:41:fc:9e:83:f3:56:
28:e9:d7:73:40:f7:2c:a5:aa:b3:2b:03:41:53:33:
36:84:20:01:a3:a1:f1:27:52:fe:df:aa:42:6a:03:
bf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B5:A6:1F:F3:1B:00:1B:1D:90:1A:82:16:CD:CC:F1:F0:B0:3B:A9
X509v3 Authority Key Identifier:
keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/MrWmH_MbABsdkBqCFs3M8fCwO6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.152.0/22
Signature Algorithm: sha256WithRSAEncryption
79:81:82:65:93:a9:04:d2:5d:b5:39:cc:2a:6e:a0:e9:4a:ee:
04:e1:75:53:9e:3f:c6:0e:88:8b:74:f7:a1:65:7a:3c:09:36:
bb:24:50:e8:22:83:6d:40:58:5e:b3:bc:a6:33:8a:2c:1a:7b:
82:30:f0:a2:70:49:e0:b8:41:20:40:cc:af:92:58:54:de:6e:
fb:33:ad:d2:9b:c8:4f:42:45:ae:61:cd:42:17:6a:e4:d0:31:
00:db:79:a0:a1:c7:63:00:dd:d7:1b:6a:4b:68:c8:1c:0e:0a:
cb:42:04:d5:d3:ba:4c:33:fd:63:ab:17:5a:d5:ee:15:27:35:
b2:5d:0a:76:58:86:a4:77:83:46:1c:30:4c:57:85:7a:d4:16:
e9:85:c1:cd:61:cf:ed:6b:39:90:0d:00:8d:ac:f0:5c:0b:97:
65:39:a6:c8:dd:94:61:38:21:7c:8e:d1:1b:dd:e9:97:1f:52:
c8:12:bb:3c:23:34:a0:87:c7:a6:4e:fd:89:42:08:65:61:8f:
27:a5:91:8a:4a:26:06:b6:ff:8f:b5:04:65:65:5d:1c:dd:27:
67:68:2a:1f:fa:7d:77:78:9c:44:d1:82:68:3e:ba:c1:bc:66:
0f:09:78:0e:b3:47:c2:98:5e:91:da:6f:56:39:90:f5:a4:d8:
61:04:3a:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDtgvy2sORf7ub/Ktc4DU2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZGEzMTU4ZWIxYmM2YTBhOTAyN2NmNTllNjAzNjg3ZDZk
M2U5NzQwHhcNMjYwOTI5MTQxMjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmI1YTYxZmYzMWIwMDFiMWQ5MDFhODIxNmNkY2NmMWYwYjAzYmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxpVGWQOHYRtEV48sYguWE4oYnIr
OjBn30TsAWuT6RxrcoN1f29tNTPDkMEkjw7guXLS6nPy+2XuDlLDchj74h2fb0ES
tLNZgX1w+KamKoCglkkVA/PKIi5RWpZfujrRQIkT4ciltkBm1KMOKriZ8SNS5yA/
qoAximgKvyGeY1aevPpdLeWSnx56WdiW7gV6fL0hUSl1Uydf83ww54xJHJzFCnWJ
55+c6Bx47CrDM/Gv+1hLyzKOyn+1WYIcT/l47QlUfIjTrZA5btoPYP9QPa040OXH
pUds5yNB/J6D81Yo6ddzQPcspaqzKwNBUzM2hCABo6HxJ1L+36pCagO/3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDK1ph/zGwAbHZAaghbNzPHwsDupMB8GA1UdIwQY
MBaAFPHaMVjrG8agqQJ89Z5gNofW0+l0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iODg0N2EtYjBmNS00YWZmLTk5ZGMt
YTllOThiNzNiNTU2LzEvTXJXbUhfTWJBQnNka0JxQ0ZzM004ZkN3TzZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iODg0N2EtYjBmNS00YWZmLTk5ZGMtYTllOThiNzNiNTU2
LzEvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW/SYMA0G
CSqGSIb3DQEBCwUAA4IBAQB5gYJlk6kE0l21OcwqbqDpSu4E4XVTnj/GDoiLdPeh
ZXo8CTa7JFDoIoNtQFhes7ymM4osGnuCMPCicEnguEEgQMyvklhU3m77M63Sm8hP
QkWuYc1CF2rk0DEA23mgocdjAN3XG2pLaMgcDgrLQgTV07pMM/1jqxda1e4VJzWy
XQp2WIakd4NGHDBMV4V61BbphcHNYc/tazmQDQCNrPBcC5dlOabI3ZRhOCF8jtEb
3emXH1LIErs8IzSgh8emTv2JQghlYY8npZGKSiYGtv+PtQRlZV0c3SdnaCof+n13
eJxE0YJoPrrBvGYPCXgOs0fCmF6R2m9WOZD1pNhhBDpC
-----END CERTIFICATE-----
Generated at Sun Oct 25 07:59:47 2026 by rpki-client