Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/mkmn6SSgI2oTDU0btnWD9EXhyn8.roa
File: mkmn6SSgI2oTDU0btnWD9EXhyn8.roa (raw, json)
Hash identifier: 5aH3enppcWT07CFQdo+2cDYPfk8m64lndd4WFLS2fGo=
Subject key identifier: 9A:49:A7:E9:24:A0:23:6A:13:0D:4D:1B:B6:75:83:F4:45:E1:CA:7F
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01A05DB62786006A3E579187CA82E291B141
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/mkmn6SSgI2oTDU0btnWD9EXhyn8.roa
Signing time: Tue 01 Sep 2026 16:03:33 +0000
ROA not before: Tue 01 Sep 2026 16:03:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206446
IP address blocks: 46.232.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:b6:27:86:00:6a:3e:57:91:87:ca:82:e2:91:b1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Sep 1 16:03:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a49a7e924a0236a130d4d1bb67583f445e1ca7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4a:f4:0f:bc:ae:c1:1c:ea:ac:c4:7a:b5:86:
90:86:0c:42:58:7e:40:15:d0:fa:22:fe:f8:10:74:
64:be:a8:af:93:a2:03:e2:61:f9:96:31:a3:21:ea:
0a:f3:c6:8e:52:46:aa:8b:67:1b:7d:27:f7:e3:87:
c1:81:e5:89:b2:65:a8:43:cd:47:59:a7:eb:b1:ea:
ce:d2:6c:c0:ab:60:cc:0c:b6:3f:d0:56:99:0a:e7:
6f:73:f6:80:b2:1c:76:cd:b8:e1:63:36:a0:ac:1c:
6e:9f:6a:89:56:61:22:50:34:da:11:53:d7:0b:a6:
5e:2b:5b:28:1a:fc:65:e1:68:f9:c6:6d:36:1f:f1:
fb:2d:10:b2:8f:14:ae:7b:1c:20:a5:ff:19:8d:03:
bb:22:48:d0:bb:fd:4e:c4:cb:02:8a:e0:a4:3c:13:
5b:4e:16:23:57:04:49:98:74:46:a5:1f:e2:11:06:
21:9e:94:62:c6:40:f2:ae:00:0e:ff:35:79:19:22:
d7:68:53:e3:05:63:07:61:ab:cf:1a:88:0c:d6:4e:
49:98:51:3d:ad:3d:b0:66:9a:43:ea:4f:a1:29:2f:
32:de:04:45:f8:c9:37:3a:c9:fa:97:d2:d1:b4:b6:
57:c9:b0:65:96:d8:99:d0:9a:c6:4d:67:b5:19:72:
9a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:49:A7:E9:24:A0:23:6A:13:0D:4D:1B:B6:75:83:F4:45:E1:CA:7F
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/mkmn6SSgI2oTDU0btnWD9EXhyn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:da:b5:10:0f:26:b1:9e:69:0b:62:2e:0d:ae:89:d0:4d:f6:
e9:de:a2:a0:ec:ae:f2:d7:6f:9a:a9:e7:a5:25:a8:fa:d4:7a:
9b:50:8f:16:80:e5:41:19:c3:aa:8e:e8:6c:f3:9a:68:d2:d0:
09:3d:70:59:72:7a:fa:dd:db:45:6f:9b:3b:76:a7:c1:4d:85:
49:36:cd:cc:7a:a5:ef:60:71:be:68:91:88:91:29:70:90:56:
cc:ac:59:96:21:0f:e7:a6:35:ee:52:f3:a5:17:a6:91:78:b5:
5f:8b:42:3f:4a:e1:83:0b:ad:40:eb:2d:2b:1a:42:f6:eb:bf:
84:87:c6:09:ee:5a:10:21:a9:c9:f4:55:cd:e0:ee:ad:38:ca:
f4:75:cc:d0:34:d6:e3:b9:0f:09:c6:e1:fd:7e:46:c7:a6:cb:
74:bf:cf:dc:b6:d3:04:2b:8a:56:4d:2b:4b:23:92:a1:18:f0:
77:a2:6e:36:16:13:ea:db:52:1f:37:e4:15:70:90:43:ee:c0:
a8:65:3e:9d:69:c8:77:6d:cd:30:d4:75:60:43:66:03:6c:9b:
5e:a4:61:b1:59:5c:cf:6a:72:f5:96:3e:1f:8e:ed:9d:01:a2:
e8:f4:90:a0:91:30:eb:b1:74:7f:13:a8:b9:ba:0e:29:d0:3d:
db:1d:10:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:49 2026 by rpki-client