Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/Mva-wY41yQt9Nk6duc_ocpuKYFQ.roa
File: Mva-wY41yQt9Nk6duc_ocpuKYFQ.roa (raw, json)
Hash identifier: IlOPnKgUf7QQ4gsxLLInS5A3X12Bcn5JqM322MVFryE=
Subject key identifier: 32:F6:BE:C1:8E:35:C9:0B:7D:36:4E:9D:B9:CF:E8:72:9B:8A:60:54
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 01A086E54417A318C932628042A914AFA776
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/Mva-wY41yQt9Nk6duc_ocpuKYFQ.roa
Signing time: Wed 09 Sep 2026 15:59:27 +0000
ROA not before: Wed 09 Sep 2026 15:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 185.225.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:e5:44:17:a3:18:c9:32:62:80:42:a9:14:af:a7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Sep 9 15:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32f6bec18e35c90b7d364e9db9cfe8729b8a6054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:95:e7:0b:e9:7e:bc:fa:6a:22:05:77:3b:
ac:20:02:74:2c:53:f2:64:b0:8d:92:2e:00:69:17:
b1:79:7f:2b:32:e5:f6:04:cd:26:69:4c:ff:08:f7:
92:c0:57:b5:1b:da:33:5b:61:ce:ea:d3:63:17:ae:
97:f0:3a:3f:a6:b6:39:75:8d:29:42:93:66:b1:e3:
80:06:f8:52:a5:1d:50:b8:56:d7:71:d5:57:cd:37:
23:bb:b2:69:22:7f:39:44:bd:63:ba:ba:24:0b:17:
26:e3:4a:d0:e1:57:aa:26:4e:02:a8:a4:19:da:91:
bb:55:7d:d8:1d:b5:94:a7:ee:76:fd:d5:40:5e:57:
3d:7a:f3:f7:1d:55:2c:3a:27:8d:0a:8a:fc:e2:4e:
2e:8f:44:47:65:6f:73:f1:04:6d:90:96:6d:b8:84:
2a:03:12:fc:2a:ba:cb:47:f4:60:9e:fc:5d:fd:be:
b6:8a:df:4e:f3:40:4d:02:e1:a6:b0:d2:ba:73:05:
1b:9a:94:c0:f8:d8:be:d1:13:db:93:a2:97:e1:8c:
f6:cb:a9:51:64:af:68:83:36:fb:fb:2e:26:94:0c:
50:b5:26:d2:c5:e2:51:d7:53:29:bb:da:41:c7:f5:
b7:8f:ba:35:55:29:d1:b6:fc:5c:50:c6:b6:22:6b:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F6:BE:C1:8E:35:C9:0B:7D:36:4E:9D:B9:CF:E8:72:9B:8A:60:54
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/Mva-wY41yQt9Nk6duc_ocpuKYFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.99.0/24
Signature Algorithm: sha256WithRSAEncryption
08:93:32:be:e8:8c:59:56:41:e1:5c:87:8c:ef:de:18:7c:cb:
10:80:9d:ac:07:77:b1:b6:e2:36:d1:08:ec:d9:ff:63:1b:71:
03:a9:dc:cf:7b:f5:3b:6b:bf:9a:b4:ef:67:ce:6c:0d:2c:ac:
38:eb:db:06:42:3d:92:be:14:a0:da:0e:4a:e3:75:25:c9:c1:
5f:da:ac:44:14:84:9c:41:59:86:39:24:50:7a:13:d7:0f:3e:
14:3e:8e:39:6b:7e:8b:7c:db:8e:94:3c:ab:91:43:63:f2:2a:
a9:4c:64:54:90:16:c0:87:46:58:0c:df:fe:bf:60:57:7f:ce:
ca:ac:ff:68:a1:42:74:73:eb:0d:c6:22:e5:39:51:f5:44:3e:
4a:46:b7:01:94:fa:33:97:5c:25:d1:50:ce:a9:fb:94:2f:7d:
85:2f:8c:0f:3a:01:24:ea:6f:07:28:90:2f:96:3e:76:b8:fd:
20:5d:69:44:29:d4:d3:0d:b8:97:6d:88:9d:bf:9b:60:d0:57:
a5:7f:00:a9:47:b0:14:c8:fe:47:e8:91:84:65:2e:b1:0a:dd:
ba:6d:29:e3:4f:c4:41:10:45:51:03:ae:fb:3f:26:0e:29:b2:
21:f0:68:87:0d:6d:dc:77:70:6e:58:38:a8:57:c7:d8:ef:6c:
a6:e2:d8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:26:18 2026 by rpki-client