Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/muGh5hpB_RU_p4rzwlUObcUcFQs.roa
File: muGh5hpB_RU_p4rzwlUObcUcFQs.roa (raw, json)
Hash identifier: KecOh/vigIUzzck3G9nUreMmxeNLkSfUxanDGf54pw0=
Subject key identifier: 9A:E1:A1:E6:1A:41:FD:15:3F:A7:8A:F3:C2:55:0E:6D:C5:1C:15:0B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019EDA10B5C566A3A6AEC5AC684DD0F6B44E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/muGh5hpB_RU_p4rzwlUObcUcFQs.roa
Signing time: Thu 18 Jun 2026 09:29:48 +0000
ROA not before: Thu 18 Jun 2026 09:29:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141429
IP address blocks: 193.8.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:10:b5:c5:66:a3:a6:ae:c5:ac:68:4d:d0:f6:b4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 18 09:29:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ae1a1e61a41fd153fa78af3c2550e6dc51c150b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:58:19:07:03:06:92:66:97:c3:16:c9:bb:92:
b2:64:ee:9e:6d:4b:99:6f:cf:4e:f3:49:de:b2:e5:
40:d6:7a:e5:6d:76:4a:93:95:d0:bb:96:ee:9b:82:
64:d9:6f:79:68:ab:7e:24:cb:e6:50:b4:48:67:22:
c6:de:97:40:98:4f:ad:17:f7:b4:03:b8:71:98:b2:
83:58:97:c8:9c:1a:34:eb:d9:8a:b0:e4:77:f3:52:
88:c6:b5:43:f7:b0:f1:51:03:cf:22:33:2c:85:f2:
60:1d:9e:d5:a6:94:02:ef:21:51:2f:64:79:22:c6:
e5:a1:e7:22:d2:61:32:dd:08:a0:10:c9:58:cf:77:
21:cf:62:7c:de:0d:2d:86:21:0f:4d:33:bc:c3:6e:
e3:df:24:80:b9:25:7d:1c:51:82:32:56:66:94:23:
cc:19:48:97:8e:f6:e4:7c:90:c6:12:cd:a6:f9:53:
bd:38:d0:ca:5b:d7:c0:f3:18:51:db:4f:9e:d5:84:
13:19:78:31:e0:92:b0:94:e1:71:b9:c9:6b:2a:7b:
1d:98:a4:9b:fd:5d:c9:a7:30:2b:f9:e5:07:a0:43:
07:6f:b7:31:24:ef:62:b5:39:cc:2d:74:2e:81:ea:
15:b8:40:d1:9b:08:f1:26:82:ef:08:5f:66:ac:38:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E1:A1:E6:1A:41:FD:15:3F:A7:8A:F3:C2:55:0E:6D:C5:1C:15:0B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/muGh5hpB_RU_p4rzwlUObcUcFQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.114.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4e:6d:16:fb:32:39:70:4e:ff:c5:b9:d1:af:05:0a:96:7a:
43:89:0d:74:d5:19:97:56:9b:6f:b5:80:52:ce:a5:5e:5b:a6:
d4:ff:a1:ef:ec:c3:69:c2:b3:d4:b2:1d:9b:e7:12:ac:9d:10:
ee:b6:71:47:e9:7f:0d:fc:9e:ce:09:31:39:10:e9:c0:5e:c2:
8c:dd:1d:84:6b:36:2a:a2:1c:22:3d:a5:2a:70:f1:bd:d3:ca:
1b:d0:d1:37:40:7f:c1:6c:23:6a:b5:31:96:17:c5:d7:14:ab:
e7:59:ef:0f:06:65:b1:52:7f:e1:19:1f:dd:80:44:8d:1d:5c:
34:89:09:7a:cb:d4:47:90:51:01:3a:a1:7e:5c:1c:35:28:0b:
cf:4b:8d:f0:fa:72:d7:00:ca:1d:cd:6d:17:05:5e:65:e8:d2:
32:2d:a6:16:8e:69:de:af:a1:45:7d:35:f9:2e:b5:ff:60:c9:
a7:b1:e6:e1:02:c7:90:78:82:11:f0:8a:6f:9a:24:f6:98:4e:
92:5a:53:90:3e:ff:e8:37:45:17:fd:ca:32:e1:49:b9:c6:50:
83:b7:6b:13:12:63:02:91:2b:7f:85:49:4b:eb:55:41:69:4d:
f9:52:bd:c5:14:3a:4c:a2:90:f9:2a:95:7b:07:75:e3:2f:4e:
27:b7:ff:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 12:14:13 2026 by rpki-client