Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/mEhn-x7tkmLGeYlMpZdP2RjzVPY.roa
File: mEhn-x7tkmLGeYlMpZdP2RjzVPY.roa (raw, json)
Hash identifier: YARnW3hK0MAvwIlgDRpM5wiqLHphA51kgJTHfm2NanQ=
Subject key identifier: 98:48:67:FB:1E:ED:92:62:C6:79:89:4C:A5:97:4F:D9:18:F3:54:F6
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 019F99D2C374409C7F780498FC71A1F8A1FC
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/mEhn-x7tkmLGeYlMpZdP2RjzVPY.roa
Signing time: Sat 25 Jul 2026 15:09:14 +0000
ROA not before: Sat 25 Jul 2026 15:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206986
IP address blocks: 185.169.232.0/22 maxlen: 24
2a0a:7107:1af4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:99:d2:c3:74:40:9c:7f:78:04:98:fc:71:a1:f8:a1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jul 25 15:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=984867fb1eed9262c679894ca5974fd918f354f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:3c:18:e5:d6:37:bc:73:8b:ef:d8:9e:c4:
b4:1a:62:44:d6:a2:68:fb:3b:e7:26:be:97:e3:ca:
ee:73:65:d8:53:aa:27:f8:84:89:68:16:88:79:aa:
6a:9c:54:5e:3c:b6:53:54:98:06:55:92:28:dd:a7:
20:d2:b6:10:95:84:cc:a7:c9:fe:b1:15:1b:8b:16:
75:c2:23:d5:c0:46:2a:ac:5e:ca:6e:21:f2:1c:a6:
86:91:3a:b8:21:6f:8f:64:5a:60:19:94:57:ed:47:
72:ea:81:b3:5e:9a:af:72:8e:e5:0f:50:54:a5:8e:
13:09:6f:91:32:14:70:ac:cf:f8:82:e9:fb:89:96:
e2:41:0f:e4:2e:a4:52:48:73:f9:55:04:10:6f:89:
52:e2:79:f3:3b:38:f5:2e:4b:b2:83:be:6d:b1:b3:
1f:8a:ea:84:c3:22:56:f0:df:86:50:ca:c2:36:91:
c5:da:2f:1b:32:2a:8c:04:f8:fe:0e:56:3b:48:d8:
20:cb:35:6d:1d:75:8a:e1:24:3e:77:12:7e:c5:ec:
c2:82:fa:27:4d:b4:30:ee:d5:bb:95:4b:0a:03:7f:
7a:22:87:c5:47:45:64:64:a3:17:83:0b:af:df:5c:
24:06:89:6a:b1:f7:39:0b:11:a6:af:f3:b9:ed:65:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:48:67:FB:1E:ED:92:62:C6:79:89:4C:A5:97:4F:D9:18:F3:54:F6
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/mEhn-x7tkmLGeYlMpZdP2RjzVPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.232.0/22
IPv6:
2a0a:7107:1af4::/48
Signature Algorithm: sha256WithRSAEncryption
68:3c:26:10:9d:ae:8a:04:92:30:43:04:ef:76:73:63:0a:09:
0c:0d:9a:af:f6:93:71:02:86:d5:55:1a:16:2d:13:59:9c:3e:
c5:9d:d5:df:fd:0e:79:ff:d8:1a:a7:79:49:c3:a7:3e:73:2b:
58:eb:66:b3:7f:50:2c:fb:43:dd:90:f9:6b:cb:87:a9:a7:d0:
6f:cb:49:93:65:7c:38:e9:b0:8b:74:46:39:f0:7e:fa:70:da:
36:df:ca:8b:10:3c:f2:96:be:64:a1:e3:27:74:39:9f:c5:2f:
bd:cf:f6:0a:7a:36:0d:e1:70:ef:f2:d5:2d:8f:d7:60:af:22:
d6:48:44:fe:8c:ae:8b:e9:40:99:4a:b2:8f:43:0c:b3:ea:66:
1f:97:d4:f3:8e:2e:6d:00:fa:e7:f8:dd:1f:f1:9e:ee:2c:11:
ab:68:1b:9f:1e:8e:46:35:12:35:3e:a5:e5:ba:04:2d:76:3f:
30:fe:12:25:ec:d7:ac:15:8a:fc:2b:9a:d6:a4:18:1a:99:d5:
52:82:c3:40:dc:6b:36:0d:24:c0:47:db:da:7e:d8:98:b5:c7:
62:70:76:4d:ce:b6:ef:27:3f:e2:a6:e9:0c:f4:39:a9:8d:64:
1d:a3:a3:0b:7e:98:fe:06:03:3a:5e:77:da:6f:53:f0:bb:22:
84:ab:d8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:42:37 2026 by rpki-client