Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/mlTVDqhZXyZwKOtYDiD0LlD31Qc.roa
File: mlTVDqhZXyZwKOtYDiD0LlD31Qc.roa (raw, json)
Hash identifier: rQQ5Zv+tgVgL3IPTx2UrqyCJniYvNKXodcl0bFQmROg=
Subject key identifier: 9A:54:D5:0E:A8:59:5F:26:70:28:EB:58:0E:20:F4:2E:50:F7:D5:07
Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial: 019F93B6618DC0D072CBE9B646DCAF207758
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/mlTVDqhZXyZwKOtYDiD0LlD31Qc.roa
Signing time: Fri 24 Jul 2026 10:40:31 +0000
ROA not before: Fri 24 Jul 2026 10:40:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62563
IP address blocks: 185.230.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:b6:61:8d:c0:d0:72:cb:e9:b6:46:dc:af:20:77:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Validity
Not Before: Jul 24 10:40:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a54d50ea8595f267028eb580e20f42e50f7d507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:22:c8:93:2d:3a:d8:5f:90:0b:29:4b:af:
d9:17:0a:7e:60:7d:b4:b4:31:ff:40:83:fa:96:82:
b5:51:b1:73:4e:81:1c:4c:d0:d1:94:67:9a:54:84:
91:12:25:4b:8f:ff:45:19:da:df:7a:b6:23:60:91:
b0:47:5a:24:f9:01:7f:50:d1:d8:cb:c1:f2:58:60:
4a:0d:82:62:25:a4:66:6e:0a:96:73:03:f5:a5:87:
ab:5e:c5:4b:4d:28:5f:2c:50:0f:eb:7a:51:6d:a7:
a0:0e:61:6b:5a:af:bc:f6:70:ad:1f:f9:37:96:76:
95:cb:c0:fc:29:56:ed:94:50:c5:4e:ad:68:6d:b4:
72:68:5f:c4:69:b8:91:f0:46:40:21:72:00:6e:10:
9d:af:37:56:ff:ed:20:64:dd:bf:d5:dc:af:51:f4:
ad:ab:d6:f1:9f:be:eb:f8:ac:23:8f:cb:83:d3:2a:
bb:f4:0b:d5:9d:bc:f0:fc:82:19:7c:c1:fc:de:da:
dd:48:88:dc:e4:45:a4:0c:c8:8f:f3:0a:dd:9d:1c:
0c:2d:49:02:99:99:19:bb:bc:5f:cf:58:4f:14:09:
f9:ed:0b:03:fe:ab:2b:f0:e7:d4:bf:72:23:04:34:
2a:7c:fa:14:f8:39:22:39:1b:19:d1:4c:94:fa:6a:
9e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:54:D5:0E:A8:59:5F:26:70:28:EB:58:0E:20:F4:2E:50:F7:D5:07
X509v3 Authority Key Identifier:
keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/mlTVDqhZXyZwKOtYDiD0LlD31Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.231.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:0f:5f:8e:f1:e2:2c:b7:c2:62:f3:ef:35:ff:be:54:04:c9:
00:eb:33:59:08:97:ce:f1:c5:36:79:39:9d:ce:21:3f:b4:63:
25:d1:64:c1:69:29:14:55:be:e0:eb:0c:d8:53:b1:10:94:de:
15:74:6b:6b:2b:78:71:97:54:06:da:03:ce:a0:9c:ba:4d:dc:
c5:58:be:99:28:d0:15:80:0d:f4:f6:a0:a6:9d:09:2a:a7:20:
6f:35:75:ce:63:d8:1f:13:20:36:75:b2:a8:fe:c8:e8:eb:7c:
09:6b:c2:23:76:fc:4e:b2:ac:c6:d5:b1:12:ee:37:55:fc:83:
2d:ae:f3:02:51:b7:b6:19:ea:03:27:ef:d0:fc:5a:0d:53:76:
90:1f:70:16:36:f9:b3:05:2f:38:c4:54:dc:5a:aa:00:60:54:
29:d8:e7:ea:f6:ab:3e:53:ed:46:f2:7d:3e:14:52:ef:10:c6:
ab:92:ad:88:e6:81:6e:03:3e:63:2e:75:df:01:8c:6e:ed:d9:
a1:86:d2:85:db:dc:5c:7f:f7:be:12:e2:f2:0f:7d:35:8d:a0:
06:9b:31:5c:45:55:3f:ef:8c:6b:35:f4:11:86:96:fe:b9:83:
96:e4:3d:ba:a5:27:4f:47:53:46:6a:1f:2b:c1:fa:1b:90:6f:
5e:c3:54:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:43:06 2026 by rpki-client