Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mihT83Cl5rnXCSdr4xIi8zFTxnI.roa
File: mihT83Cl5rnXCSdr4xIi8zFTxnI.roa (raw, json)
Hash identifier: QBpxZ9w/ss25znzbGHzUjr/YrNGI06QJ072YWxXrIqc=
Subject key identifier: 9A:28:53:F3:70:A5:E6:B9:D7:09:27:6B:E3:12:22:F3:31:53:C6:72
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019F148213B0FC1F323B276E8F7E2F4E84C2
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mihT83Cl5rnXCSdr4xIi8zFTxnI.roa
Signing time: Mon 29 Jun 2026 17:51:36 +0000
ROA not before: Mon 29 Jun 2026 17:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206446
IP address blocks: 85.209.157.0/24 maxlen: 24
85.209.158.0/24 maxlen: 24
85.209.159.0/24 maxlen: 24
85.209.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:82:13:b0:fc:1f:32:3b:27:6e:8f:7e:2f:4e:84:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 29 17:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a2853f370a5e6b9d709276be31222f33153c672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:13:99:23:9c:1a:e8:63:2a:c0:f5:76:2b:
17:7b:19:1c:59:40:b8:bc:87:4e:7d:b2:66:fd:dc:
32:e4:45:f1:e0:e1:ea:8d:5a:5c:24:c8:5c:6b:a2:
ed:43:d5:6c:5d:50:21:ae:6a:33:62:55:0b:c4:9a:
25:26:f7:c0:5d:0e:63:d1:71:25:ef:a2:01:4d:31:
f1:8a:fb:fc:29:58:68:d5:b0:e0:c5:f6:03:49:35:
9a:16:28:dc:6d:74:8d:30:a1:05:92:de:c9:78:06:
4e:d7:1d:a8:03:b1:04:d0:89:59:e3:e1:9b:f9:ac:
dc:3c:d1:29:ee:7c:0e:fd:12:fa:3a:1b:1d:f9:53:
0e:0b:71:3b:db:19:53:d5:e7:20:c3:d0:99:91:c3:
ec:a7:93:e9:f8:98:91:93:75:1a:01:52:b3:75:1a:
72:7d:34:7d:f0:e3:2d:b8:b0:85:5c:9a:9e:7f:c4:
da:0d:b5:83:16:11:b3:52:a9:eb:9c:35:4a:54:89:
44:21:2d:f9:14:f4:b2:ee:6c:6f:ff:6b:0c:86:93:
da:2e:37:05:5d:cc:8e:a5:aa:24:77:58:50:02:34:
eb:fe:66:8d:4f:b4:60:0f:42:c2:34:63:31:ee:7f:
be:df:2b:c7:d9:a2:1b:61:ae:51:54:1a:7e:65:a8:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:28:53:F3:70:A5:E6:B9:D7:09:27:6B:E3:12:22:F3:31:53:C6:72
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mihT83Cl5rnXCSdr4xIi8zFTxnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.157.0-85.209.159.255
85.209.194.0/24
Signature Algorithm: sha256WithRSAEncryption
93:81:96:b9:48:4d:c3:b3:2f:d5:27:f4:eb:79:72:a5:13:bc:
62:5e:0f:8e:b5:dd:3a:52:d7:24:57:dc:20:3a:6a:75:38:49:
97:b5:fe:8c:9e:a1:62:fa:74:f8:75:5e:07:f6:0d:42:b1:d3:
35:49:40:dd:02:ff:57:bc:4f:0e:f8:19:50:8c:7c:8c:7d:a9:
18:48:3f:35:b5:65:60:8d:08:79:ab:66:e1:5d:e4:31:4c:8a:
4d:0b:c8:41:db:f1:a8:c1:02:d9:9b:e3:e3:79:dd:17:c9:6b:
60:94:34:c0:f5:9c:70:16:6c:7a:aa:14:93:b2:9d:b0:34:7c:
45:99:39:a6:53:2e:f3:ba:6a:c6:2f:50:3c:75:30:a3:06:74:
54:0f:3f:ea:3b:e2:c4:f3:84:7c:84:0d:88:42:42:30:3c:a4:
fb:71:12:df:25:85:a4:cb:6e:ca:d0:cc:b5:2b:16:c2:03:98:
18:b8:6e:df:2f:57:7a:83:85:d1:60:88:5a:2b:a8:a9:d3:b2:
6d:7b:01:fa:dc:96:e1:c7:eb:64:f7:d3:89:00:46:d4:b3:14:
a6:36:df:a8:6c:95:e0:a9:67:13:09:65:0c:85:99:af:82:32:
88:72:c2:2c:25:7b:50:ce:09:ef:93:fe:91:41:3c:cd:9d:d5:
fc:8b:ca:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:46 2026 by rpki-client