Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/mrJFWfBuPaQqz2vdocNsksjPzis.roa
File: mrJFWfBuPaQqz2vdocNsksjPzis.roa (raw, json)
Hash identifier: pCwAF4UVoJ+/Nih0QnM1FsYNl1evJbIWxTafM9x7Wsc=
Subject key identifier: 9A:B2:45:59:F0:6E:3D:A4:2A:CF:6B:DD:A1:C3:6C:92:C8:CF:CE:2B
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019D0556D51794A3DC8762F6BD36FFC7713E
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/mrJFWfBuPaQqz2vdocNsksjPzis.roa
Signing time: Thu 19 Mar 2026 09:04:29 +0000
ROA not before: Thu 19 Mar 2026 09:04:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216458
IP address blocks: 216.236.8.0/21 maxlen: 24
216.236.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:56:d5:17:94:a3:dc:87:62:f6:bd:36:ff:c7:71:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Mar 19 09:04:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ab24559f06e3da42acf6bdda1c36c92c8cfce2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:3d:c2:c5:20:63:77:d8:af:16:cc:7e:15:
b6:97:b2:ff:10:c6:07:63:cc:59:78:35:eb:54:73:
db:47:f8:93:c2:3c:7b:2a:49:1e:b7:dc:0a:1e:d8:
db:3e:b6:b4:eb:89:9e:46:c5:ef:e8:d6:b7:54:fa:
13:31:f7:32:b7:4a:71:bd:0e:35:a4:a3:1c:b2:2f:
fb:15:98:03:52:b6:32:c5:7c:fa:2e:ba:c7:b8:ef:
bf:10:39:9e:65:24:d4:1f:b5:13:6c:b9:4a:2d:f1:
3d:07:28:30:2a:08:83:45:6a:c8:40:dd:e2:d7:13:
ff:65:e2:2b:cd:73:46:c7:b7:57:58:44:85:ad:36:
a4:1c:9d:eb:f6:b2:a2:0b:dc:91:fd:c8:7d:9a:5b:
2e:a5:44:28:48:e4:23:94:74:3e:f1:22:5a:6e:32:
22:1f:e4:de:d2:b5:c1:c1:0e:e5:eb:25:3a:a3:a7:
fd:6c:3e:83:46:7e:02:08:63:4a:1d:d1:27:21:90:
5f:5b:7d:a3:70:0c:3a:44:00:76:04:8c:eb:25:80:
b1:bb:04:da:98:58:37:5e:21:7d:e4:b3:7c:dc:35:
04:3e:18:5f:fe:d3:a9:6f:d7:a3:cc:a1:11:f9:7f:
e4:c0:15:f7:3b:ed:bd:1b:da:90:14:ec:72:f7:7b:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B2:45:59:F0:6E:3D:A4:2A:CF:6B:DD:A1:C3:6C:92:C8:CF:CE:2B
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/mrJFWfBuPaQqz2vdocNsksjPzis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.236.8.0-216.236.23.255
Signature Algorithm: sha256WithRSAEncryption
8b:72:75:0a:9f:80:e9:d5:5d:fd:b8:95:97:2a:18:4e:63:95:
e0:f5:c3:90:34:e9:26:59:93:42:91:ae:09:95:f7:cd:eb:5f:
36:ba:83:62:1d:1b:a7:6a:0c:a6:30:c7:33:51:42:48:74:c7:
9d:87:37:59:f6:ed:40:34:ca:01:f9:ba:49:c3:50:fd:3f:c4:
28:d7:a3:b3:30:0e:d8:58:17:12:c2:35:29:2d:cd:78:f9:83:
53:d7:8d:84:16:9a:1f:02:af:de:5d:08:8b:64:8a:d6:11:76:
65:e3:bb:d0:a6:bd:a5:32:57:8a:69:51:11:18:d2:7c:f5:0b:
33:91:1d:0f:73:6b:04:b7:8a:aa:03:ca:b3:a1:81:4f:38:51:
3e:2d:43:af:71:44:e7:14:8a:79:c4:7b:c2:4c:40:c0:9b:df:
d4:a7:a9:0a:30:79:87:ee:aa:e9:c7:5b:44:87:05:ad:21:46:
12:1c:95:79:2d:16:d5:5c:6f:80:67:e5:f9:3f:85:47:e0:e5:
c1:a0:54:9a:38:a9:02:2b:e4:57:21:7c:78:94:23:11:1c:a3:
13:44:ce:d3:c1:d8:aa:69:6b:41:cc:52:3d:0c:6c:98:db:06:
95:d7:c0:31:f9:82:15:98:96:4c:43:75:35:9e:7f:66:d9:6a:
b9:f1:3d:2e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ0FVtUXlKPch2L2vTb/x3E+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm
ZDVlNzgwHhcNMjYwMzE5MDkwNDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWIyNDU1OWYwNmUzZGE0MmFjZjZiZGRhMWMzNmM5MmM4Y2ZjZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVU9wsUgY3fYrxbMfhW2l7L/EMYH
Y8xZeDXrVHPbR/iTwjx7Kkket9wKHtjbPra064meRsXv6Na3VPoTMfcyt0pxvQ41
pKMcsi/7FZgDUrYyxXz6LrrHuO+/EDmeZSTUH7UTbLlKLfE9BygwKgiDRWrIQN3i
1xP/ZeIrzXNGx7dXWESFrTakHJ3r9rKiC9yR/ch9mlsupUQoSOQjlHQ+8SJabjIi
H+Te0rXBwQ7l6yU6o6f9bD6DRn4CCGNKHdEnIZBfW32jcAw6RAB2BIzrJYCxuwTa
mFg3XiF95LN83DUEPhhf/tOpb9ejzKER+X/kwBX3O+29G9qQFOxy93uPMwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJqyRVnwbj2kKs9r3aHDbJLIz84rMB8GA1UdIwQY
MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt
ZjEyMzdmNGM1Y2Y2LzEvbXJKRldmQnVQYVFxejJ2ZG9jTnNrc2pQemlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2
LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPY7AgD
BAPY7BAwDQYJKoZIhvcNAQELBQADggEBAItydQqfgOnVXf24lZcqGE5jleD1w5A0
6SZZk0KRrgmV983rXza6g2IdG6dqDKYwxzNRQkh0x52HN1n27UA0ygH5uknDUP0/
xCjXo7MwDthYFxLCNSktzXj5g1PXjYQWmh8Cr95dCItkitYRdmXju9CmvaUyV4pp
UREY0nz1CzORHQ9zawS3iqoDyrOhgU84UT4tQ69xROcUinnEe8JMQMCb39SnqQow
eYfuqunHW0SHBa0hRhIclXktFtVcb4Bn5fk/hUfg5cGgVJo4qQIr5FchfHiUIxEc
oxNEztPB2Kppa0HMUj0MbJjbBpXXwDH5ghWYlkxDdTWef2bZarnxPS4=
-----END CERTIFICATE-----
Generated at Sun Mar 22 10:17:18 2026 by rpki-client