Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/MV9jYxZc4Pt5SR7yy233XyCWLl0.roa
File: MV9jYxZc4Pt5SR7yy233XyCWLl0.roa (raw, json)
Hash identifier: CCSfxKCBfU96JZOkhVpKkTvEVxdzHUgSCznNnbc32HM=
Subject key identifier: 31:5F:63:63:16:5C:E0:FB:79:49:1E:F2:CB:6D:F7:5F:20:96:2E:5D
Certificate issuer: /CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Certificate serial: 019F2368AB0CFA16E182C23F55270B2C11ED
Authority key identifier: BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/MV9jYxZc4Pt5SR7yy233XyCWLl0.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35916
IP address blocks: 188.208.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ab:0c:fa:16:e1:82:c2:3f:55:27:0b:2c:11:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=315f6363165ce0fb79491ef2cb6df75f20962e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:85:03:ad:21:4f:48:d1:79:41:38:da:5b:
a4:0f:fb:94:7d:8e:eb:11:b0:1f:35:40:e4:c0:cd:
0c:ce:15:a2:d3:9d:31:03:dd:3f:4b:28:db:0d:fd:
d3:02:92:65:59:5e:16:cd:8a:01:ce:08:6f:69:b4:
86:9f:ed:fe:24:84:b0:ad:9b:2f:35:3a:76:dd:97:
57:46:33:dd:86:23:49:c4:40:e4:03:11:37:4c:d4:
6b:c6:f5:18:1c:e8:c4:73:a2:4f:61:a7:f1:54:1a:
a0:fc:b8:81:7d:48:c2:46:ae:26:ab:1b:93:d6:52:
8c:fd:50:52:27:7f:b9:31:7a:29:ee:c5:71:21:be:
0c:4c:7a:4c:56:8c:fe:e6:7a:25:8a:24:03:c6:d9:
15:5e:77:63:45:d8:7a:b6:27:4e:17:8e:8a:58:74:
6f:fb:5b:38:22:aa:cd:1d:d1:34:bc:02:ae:6e:6a:
a4:ad:f9:ef:76:e4:13:54:e1:80:e8:34:fe:bc:aa:
16:a5:42:f8:31:ac:e1:1b:f8:91:40:2a:8b:46:b6:
a2:a8:7b:ef:64:19:55:21:35:6b:06:29:b8:8d:98:
77:36:ab:9f:c4:59:4c:51:7e:01:2a:41:53:21:02:
59:e1:80:da:6c:75:84:ed:dd:34:8f:9f:d9:75:7b:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5F:63:63:16:5C:E0:FB:79:49:1E:F2:CB:6D:F7:5F:20:96:2E:5D
X509v3 Authority Key Identifier:
keyid:BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/MV9jYxZc4Pt5SR7yy233XyCWLl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.142.0/24
Signature Algorithm: sha256WithRSAEncryption
35:31:b2:a4:b1:02:68:34:ba:ab:54:00:63:61:e5:3f:ee:01:
68:65:21:2f:a0:5b:44:1d:c7:c0:6a:65:2c:5a:4d:7e:c5:86:
03:04:88:fc:0e:55:22:e5:0a:c6:39:09:14:86:c9:3d:67:f4:
35:47:d6:60:02:3c:6f:56:d4:b2:f1:49:63:54:8a:09:07:5f:
0f:75:81:f9:05:02:a5:9b:f4:56:14:d9:48:25:78:d6:d6:26:
7f:ce:39:c2:12:69:6e:2b:3a:d4:4c:98:9b:82:65:6f:b5:e4:
42:4e:ba:27:6f:c8:84:37:94:78:1e:ca:b5:3f:91:4f:8f:82:
de:89:73:1c:81:f6:03:de:a5:89:2a:aa:58:54:87:4f:95:b8:
34:28:36:8d:f7:ce:56:aa:52:5a:99:cd:ac:a0:ce:c2:71:21:
cd:db:ae:2d:bb:81:53:3e:ea:25:d2:98:55:e3:7c:9c:3a:63:
d1:01:a6:e3:ce:91:f3:64:66:00:dd:e0:17:f8:8f:ca:6b:76:
63:2b:c6:0e:b3:ff:af:61:90:b1:a7:57:fc:80:6d:86:a5:58:
4f:4d:a9:f3:16:d9:8e:94:6e:bd:79:8b:59:2c:ce:06:b5:86:
20:29:cb:10:a4:0c:42:82:7c:11:5c:79:4c:51:bb:21:c4:9c:
62:2e:e2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:10 2026 by rpki-client