Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/8mmg-DqoTaLl8UWoKiZNbBVl_j4.roa
File: 8mmg-DqoTaLl8UWoKiZNbBVl_j4.roa (raw, json)
Hash identifier: M7YHb21vTzCkeEhMD68ZFvaAlzZ63ni1sBAtuh5+KP8=
Subject key identifier: F2:69:A0:F8:3A:A8:4D:A2:E5:F1:45:A8:2A:26:4D:6C:15:65:FE:3E
Certificate issuer: /CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Certificate serial: 01A0FC8E7919CDD7B5B6C065D4727EB10B56
Authority key identifier: 3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/8mmg-DqoTaLl8UWoKiZNbBVl_j4.roa
Signing time: Fri 02 Oct 2026 12:19:50 +0000
ROA not before: Fri 02 Oct 2026 12:19:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 91.231.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:8e:79:19:cd:d7:b5:b6:c0:65:d4:72:7e:b1:0b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Validity
Not Before: Oct 2 12:19:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f269a0f83aa84da2e5f145a82a264d6c1565fe3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:7a:03:e7:56:b2:77:91:37:44:75:31:fa:
40:73:f4:98:b9:29:77:dd:b1:8d:27:fe:98:21:ad:
07:81:32:fb:07:18:ad:66:cf:10:4d:9a:b4:e5:10:
bf:77:aa:e1:c2:0b:c3:d1:89:e9:bd:8e:32:93:30:
ca:fe:fa:c9:27:24:92:c3:bf:3d:50:eb:74:e2:8f:
82:ab:ab:a7:09:45:7e:d0:91:80:ac:19:49:08:bb:
4d:17:06:cb:5d:4d:1a:38:7b:62:62:82:28:75:17:
84:e3:16:f8:88:ba:de:85:ca:09:cb:5a:6d:40:e6:
e8:78:77:20:29:34:df:a6:dd:1e:05:56:8f:61:7e:
cc:24:8c:68:f2:7b:9e:af:74:14:ff:5e:21:46:b6:
06:07:8e:3a:ea:2b:5e:46:73:3c:c7:75:a0:2a:fc:
9f:68:d9:26:92:b5:bf:74:36:7f:85:5f:e3:90:3c:
a0:6a:85:79:23:bd:11:a4:b9:c9:3f:c9:60:2a:83:
35:de:5f:fa:67:fa:ec:8d:08:8f:96:49:e8:20:2f:
ff:5f:54:89:c8:7f:25:61:0c:ad:43:bf:f0:46:a0:
4c:ea:74:93:6e:20:ff:e6:db:af:23:de:c2:e3:cf:
7b:b1:4c:c6:cb:47:b3:cd:41:8f:9b:7b:72:5c:46:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:69:A0:F8:3A:A8:4D:A2:E5:F1:45:A8:2A:26:4D:6C:15:65:FE:3E
X509v3 Authority Key Identifier:
keyid:3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/8mmg-DqoTaLl8UWoKiZNbBVl_j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.145.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e8:13:af:72:79:b8:3b:6c:49:02:a5:d4:37:fd:15:2d:bd:
a2:58:a3:91:cd:31:7d:95:53:b0:2e:fc:a0:b7:5a:97:3f:79:
5f:17:19:41:37:89:2c:3c:94:3a:85:06:b2:a4:ba:3a:cf:1b:
f1:eb:9b:82:32:70:d0:59:07:43:b0:06:78:17:05:82:01:dd:
98:e8:ac:b2:bb:c0:9e:c5:57:ce:d0:54:72:0c:a3:cf:fe:81:
74:87:69:67:64:12:18:73:1c:bf:df:ab:3b:da:47:84:ed:d7:
d5:1b:fd:8a:71:a0:8a:a1:19:f6:c1:3d:22:98:7b:02:1b:c3:
de:16:e9:f8:89:1d:d9:30:b9:a0:98:01:20:29:8a:b2:a6:43:
c0:ae:ef:c7:0a:04:4a:94:1b:0d:f4:96:85:f4:83:95:32:df:
bb:ee:7c:30:86:df:ec:8b:6a:a2:3a:d8:b3:9d:dd:64:1a:96:
67:66:20:c9:d1:55:41:04:28:67:ff:c0:85:df:76:8c:41:99:
d7:b1:7a:84:38:01:8e:cf:e4:7c:ad:df:e8:8a:42:32:4a:b7:
4f:2b:55:0c:c2:bf:3a:52:ec:4d:bd:2a:b1:fc:34:43:e0:36:
1f:ef:53:44:53:b1:b6:6c:82:4c:c5:63:2c:3e:e9:8d:65:de:
1d:96:2a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:26 2026 by rpki-client