Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/mcJa5BsloYm8JusCxlLHO776lHs.roa
File: mcJa5BsloYm8JusCxlLHO776lHs.roa (raw, json)
Hash identifier: HbfY+iVV1KBbAx/qXvr16mnDJ38KJqAs31bIwxnI0SQ=
Subject key identifier: 99:C2:5A:E4:1B:25:A1:89:BC:26:EB:02:C6:52:C7:3B:BE:FA:94:7B
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 019FDC90E489A5B6417E753270E0C7A6D8F7
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/mcJa5BsloYm8JusCxlLHO776lHs.roa
Signing time: Fri 07 Aug 2026 14:11:51 +0000
ROA not before: Fri 07 Aug 2026 14:11:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208115
IP address blocks: 45.157.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:90:e4:89:a5:b6:41:7e:75:32:70:e0:c7:a6:d8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Aug 7 14:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99c25ae41b25a189bc26eb02c652c73bbefa947b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:4d:2c:b6:14:34:04:e3:8b:38:89:1c:6f:
57:67:50:31:ba:e2:ee:03:27:12:82:bb:c3:d9:ab:
f4:dd:3a:5b:bc:a0:ac:97:80:04:ac:12:29:26:8b:
35:e1:87:f2:68:bc:da:81:f1:4b:70:15:af:12:91:
b7:9a:60:4a:1e:b0:7b:e0:6a:05:d1:29:ff:50:97:
60:94:76:21:fc:04:d9:6d:1b:90:5b:6e:c6:59:45:
87:fc:2b:57:3a:ef:ad:d3:e0:9d:64:e4:3a:57:38:
11:72:f2:1d:85:38:1e:96:7d:11:dc:75:b9:ba:d0:
46:e3:a7:eb:56:7a:5e:8f:a4:3f:04:3b:43:63:7e:
5d:60:1f:b1:0b:cf:d7:1c:3c:8f:03:6f:00:5c:6a:
28:39:c2:bb:3e:f9:0c:7a:7a:7c:79:3f:fb:b5:e4:
2b:51:6e:79:f1:b3:8b:b5:27:0f:4e:01:e9:d4:7d:
c7:83:bf:f7:ca:37:e4:0e:54:43:48:25:54:29:11:
60:f4:ea:99:c6:33:6f:2a:e0:72:b4:aa:57:09:4b:
c8:af:08:aa:07:6e:61:eb:34:e6:91:05:ff:24:52:
3d:58:60:90:a9:85:c7:87:17:d8:9d:a1:ba:35:fe:
c3:14:29:97:24:c4:f5:a0:9c:77:28:7e:6e:04:ca:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C2:5A:E4:1B:25:A1:89:BC:26:EB:02:C6:52:C7:3B:BE:FA:94:7B
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/mcJa5BsloYm8JusCxlLHO776lHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.52.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:e8:46:e1:c6:c6:e4:0d:7b:5c:82:86:57:2c:02:d6:1e:b0:
d0:be:01:89:84:63:83:8d:aa:04:28:86:1e:e6:dd:9d:6c:05:
c1:3f:5a:26:93:0d:75:62:72:d3:66:b8:a3:11:ba:a3:99:b1:
6b:b9:4b:d6:7e:66:e2:8b:d4:f1:38:8a:59:c5:97:e0:7c:fb:
4b:65:50:f3:fc:eb:fc:cd:a5:e8:52:d4:43:40:61:21:89:31:
c3:5a:fe:b0:15:f7:93:c4:f1:5a:ec:51:05:0e:57:72:ea:f4:
b0:a7:36:a8:53:1b:5b:17:08:4e:88:9c:a5:3a:60:e6:c5:66:
4c:29:74:c6:6b:70:a2:a4:22:10:49:69:48:d8:70:6f:7e:5e:
c8:c5:de:db:7f:05:6e:f6:c3:93:66:76:d5:a8:89:f7:3d:5c:
0e:69:5c:a5:25:7f:12:8e:29:5b:07:a3:dc:da:15:25:53:98:
94:e3:bd:47:0d:de:9f:d0:56:a5:d9:bb:28:12:7d:3f:34:e8:
9c:de:79:a5:c0:ec:b4:d0:12:c6:ab:9c:c2:0c:e6:f3:5a:fa:
a9:c1:a3:4b:a6:3f:02:12:b1:61:84:c5:c8:d8:da:83:92:06:
79:1f:c1:01:36:02:ce:16:1a:8c:5a:fa:8d:cc:14:44:cb:d7:
ea:89:c8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:17:52 2026 by rpki-client