Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/mE5DN157XZf7igs7Qp5o_mpfYoY.roa
File: mE5DN157XZf7igs7Qp5o_mpfYoY.roa (raw, json)
Hash identifier: OK0s5oWuJ3ewBiMYcBCwgUB2nCoplpS+aaStS616Tlc=
Subject key identifier: 98:4E:43:37:5E:7B:5D:97:FB:8A:0B:3B:42:9E:68:FE:6A:5F:62:86
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A0B8E4084001CD36103E6AF7BD73EFA6C2
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/mE5DN157XZf7igs7Qp5o_mpfYoY.roa
Signing time: Sat 19 Sep 2026 08:59:07 +0000
ROA not before: Sat 19 Sep 2026 08:59:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 185.113.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:e4:08:40:01:cd:36:10:3e:6a:f7:bd:73:ef:a6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Sep 19 08:59:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=984e43375e7b5d97fb8a0b3b429e68fe6a5f6286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:cb:68:9d:81:07:c7:a5:4d:fe:0f:b7:5a:
91:8b:64:80:fe:8e:03:e6:d4:34:ad:7a:2c:76:63:
f0:fd:b3:f6:27:b6:7a:58:69:ce:fd:37:6b:b0:23:
c6:85:b8:02:6b:80:86:d1:1a:82:e1:17:34:46:80:
24:30:61:18:9d:8f:a2:ce:78:f0:e2:fb:2a:15:d6:
25:88:23:d1:96:ae:c5:c4:3c:cf:a8:3b:0f:67:a3:
30:6f:b4:3f:b2:8b:a0:6d:11:b5:4d:ae:7e:af:32:
72:48:8c:f1:0f:8f:d7:8f:74:9d:60:b6:2e:27:b9:
a7:f6:f6:31:db:f8:de:be:56:ec:86:f9:14:84:f8:
9e:3e:a6:1e:b1:16:39:14:a3:90:92:47:3a:e0:9b:
60:1e:05:03:73:e7:d7:50:aa:b5:a5:c1:87:c6:fe:
c6:42:5d:86:ff:90:02:5e:76:75:2e:aa:ba:b1:84:
d9:d8:51:20:bb:d6:da:7e:a0:1e:36:0a:b0:e9:16:
96:aa:16:97:24:48:da:0a:a8:4e:be:7d:a1:6e:b5:
1c:73:bb:0b:60:7c:8b:de:01:6f:03:db:74:f2:56:
0d:59:4d:99:16:e1:6a:ea:ef:ff:c8:0d:42:9a:d8:
a5:9e:a2:d2:8c:05:ed:2c:e2:83:27:79:f7:7d:da:
cb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4E:43:37:5E:7B:5D:97:FB:8A:0B:3B:42:9E:68:FE:6A:5F:62:86
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/mE5DN157XZf7igs7Qp5o_mpfYoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.10.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:5b:b9:3e:da:55:7e:5b:30:20:a0:7a:c0:52:4d:7a:26:a0:
a6:b0:62:8b:d0:a0:21:4a:0a:57:ac:4d:1d:c7:2d:6f:5c:ef:
11:6d:4f:3e:4e:d1:67:35:97:f2:af:70:db:e5:28:68:b5:5a:
12:17:a5:77:ed:92:b5:7b:f1:1a:a3:63:84:0f:12:00:8f:e2:
55:33:4a:2e:d2:fb:0e:02:4b:f1:41:cd:cd:58:09:c1:ba:bd:
54:f2:81:86:1f:43:c5:b3:44:d6:21:89:1b:f7:78:e6:3b:49:
2f:6e:19:d5:01:80:1e:60:c8:f2:dc:c5:50:29:da:25:79:47:
b5:b0:4a:46:e2:da:ac:81:2e:bf:06:86:1b:01:da:5b:c1:b2:
f2:6e:7d:2f:fd:76:fb:5f:98:8d:e3:0d:44:c6:36:fa:96:8e:
a2:9b:96:f6:6d:7c:8c:ae:8e:4a:98:77:80:b5:f9:57:7a:42:
86:69:50:8a:09:3f:02:fc:ed:9c:a6:d6:99:99:7d:0b:a2:f9:
fe:63:60:5e:38:ac:dd:b3:69:ff:86:d5:c3:9a:82:fa:91:7f:
39:18:60:be:a3:c3:78:64:ca:3d:66:b6:c6:c3:15:83:83:28:
c2:3e:90:51:3c:87:67:f7:80:72:a2:31:6e:35:1a:6f:63:67:
d8:1a:ba:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 19:54:30 2026 by rpki-client