Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/mfKCIzYOA1MRX0WnVHNYXIYPDbA.roa
File: mfKCIzYOA1MRX0WnVHNYXIYPDbA.roa (raw, json)
Hash identifier: BLUaF2c9SynmHjIFPlE7zXQ5dkGPExYAyDAAn9NF3gU=
Subject key identifier: 99:F2:82:23:36:0E:03:53:11:5F:45:A7:54:73:58:5C:86:0F:0D:B0
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019FE5B9912409932B62E29021BE064283E3
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/mfKCIzYOA1MRX0WnVHNYXIYPDbA.roa
Signing time: Sun 09 Aug 2026 08:52:51 +0000
ROA not before: Sun 09 Aug 2026 08:52:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211743
IP address blocks: 206.109.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e5:b9:91:24:09:93:2b:62:e2:90:21:be:06:42:83:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Aug 9 08:52:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99f28223360e0353115f45a75473585c860f0db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:15:18:cc:37:ee:c0:c8:e0:30:ae:20:a2:
eb:be:90:e3:a5:eb:1d:4d:f3:2d:97:e0:34:74:26:
ba:9a:ed:34:dc:b3:3f:5e:41:0d:f4:94:77:68:7d:
4b:3c:12:ba:7e:cd:5f:e1:2f:f2:74:ce:09:7b:1b:
29:02:53:c6:db:8d:b8:a7:35:3e:6f:9f:56:d9:d0:
3f:d8:8f:9f:4c:06:9b:35:ce:62:35:8c:39:c0:04:
40:9a:79:38:58:b4:6c:b8:62:15:0d:10:f8:e7:b9:
14:dd:40:e9:2b:86:e2:70:3e:5a:20:91:db:49:24:
1f:90:e1:a8:b0:b0:25:b2:20:33:3e:02:54:70:a1:
77:a6:82:8b:fe:73:0b:69:63:4a:2a:9b:30:fb:65:
59:81:e7:fa:7e:cc:19:90:d0:48:b2:8f:2f:9d:01:
df:af:3c:c4:6e:ec:75:07:58:a7:40:57:67:4b:8c:
c1:7b:d3:3e:fa:42:cd:23:dd:1b:30:17:47:82:92:
f0:f5:ac:8f:c3:38:b1:1b:8d:de:c4:9f:3f:cf:7c:
ac:1d:63:b5:ab:c6:1a:8a:42:de:e7:34:b3:6e:e6:
fb:50:c7:f0:f4:8f:4e:8d:ac:b3:1a:a0:ab:3f:a3:
54:21:13:f3:a1:0c:b2:b1:a8:f0:79:54:27:f3:11:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F2:82:23:36:0E:03:53:11:5F:45:A7:54:73:58:5C:86:0F:0D:B0
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/mfKCIzYOA1MRX0WnVHNYXIYPDbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
95:39:7b:87:df:27:89:73:15:41:35:23:9b:33:aa:3a:b2:d0:
7d:19:cb:02:b5:48:72:d5:41:76:ac:15:d7:65:de:dc:45:f5:
be:a7:9e:99:ba:c9:5b:80:28:de:78:18:f7:60:82:d5:8e:e2:
36:5a:68:f8:b4:19:b5:76:4d:7e:0a:63:82:4b:f3:95:c3:fe:
aa:23:c4:78:eb:28:fd:0b:ea:2a:c3:f1:6b:7d:ac:d0:6f:54:
bf:c8:ec:56:e1:33:23:44:1c:d0:47:5a:33:27:22:7d:ab:a2:
6d:c5:eb:d1:8a:bc:5e:c0:07:1a:a8:33:1f:6e:9e:05:45:7a:
10:b7:d2:3d:93:f4:43:1c:18:2e:6f:e9:8f:2e:0e:27:72:f0:
28:c2:ab:4f:6f:97:a4:d0:16:54:2f:30:d3:e7:47:c6:9d:d8:
f3:e2:4b:7d:78:56:e3:a1:fa:c9:a8:e5:56:90:2b:8f:b6:46:
1b:5b:52:4b:99:bc:04:d0:90:44:39:63:e0:c4:3c:43:d5:9d:
6c:bf:d2:00:55:eb:02:75:0f:34:56:a6:17:e0:20:7f:0b:b2:
05:75:1e:52:d9:53:0d:c4:92:02:35:d8:8b:31:94:6c:c7:80:
23:65:33:0f:0f:8e:1f:9c:71:b2:04:62:28:dc:8b:09:1a:d0:
6a:fa:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:09:28 2026 by rpki-client