Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/mX5yBu9SXhlcsrImPSehotm7bas.roa
File: mX5yBu9SXhlcsrImPSehotm7bas.roa (raw, json)
Hash identifier: +AwpNCGeeHcy8ov56jxqSP8MLjuzljj6nR9dFS6V4jM=
Subject key identifier: 99:7E:72:06:EF:52:5E:19:5C:B2:B2:26:3D:27:A1:A2:D9:BB:6D:AB
Certificate issuer: /CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Certificate serial: 019F236911BB90CAB8F82CBF206FCD4AFB1D
Authority key identifier: 55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/mX5yBu9SXhlcsrImPSehotm7bas.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 31.210.148.0/24 maxlen: 24
31.210.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:11:bb:90:ca:b8:f8:2c:bf:20:6f:cd:4a:fb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=997e7206ef525e195cb2b2263d27a1a2d9bb6dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:7c:19:76:db:d4:91:3c:0e:ef:a7:fd:1e:
13:37:d4:fe:5b:09:05:3a:a9:44:17:86:a1:bf:66:
25:b3:ee:d1:04:25:31:45:67:e3:20:12:75:cd:db:
0c:a5:ff:82:a0:6e:22:fe:0c:7e:8f:41:37:74:85:
ba:92:b1:12:52:7b:1d:b4:32:14:13:23:90:cf:3d:
13:74:40:16:99:94:fc:5a:c6:bf:45:36:50:fa:f8:
57:f9:99:b3:5d:99:e8:3f:27:6d:c4:00:d0:22:b6:
e5:18:e8:26:41:5e:12:df:9b:37:cf:34:a7:35:47:
db:66:66:3b:fa:61:67:f6:fe:35:15:66:7d:91:a3:
ad:9e:52:10:30:ea:99:58:e8:96:3e:34:5e:58:85:
50:8c:0e:cd:bd:53:96:8b:1a:fa:94:73:11:51:78:
78:89:3e:c6:26:21:84:3d:04:74:08:20:81:dd:b7:
08:ce:9d:f4:ff:16:ff:88:25:43:8e:1d:70:01:00:
c3:3a:e0:6e:fa:a5:50:75:2c:fb:df:bd:81:90:1c:
f9:f0:ae:9d:ae:6a:a8:7f:95:78:fc:98:9c:a6:b0:
c9:1a:de:92:8d:33:df:ec:bf:00:41:86:74:4c:0a:
f3:e2:d3:3f:b5:06:2b:74:a0:33:f5:9c:db:41:0e:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7E:72:06:EF:52:5E:19:5C:B2:B2:26:3D:27:A1:A2:D9:BB:6D:AB
X509v3 Authority Key Identifier:
keyid:55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/mX5yBu9SXhlcsrImPSehotm7bas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.148.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:49:b7:2e:99:b2:f2:ec:fe:d8:62:cd:22:c3:43:21:7c:63:
59:0a:79:ca:69:1d:e6:76:bc:fc:fc:73:e8:49:da:8f:d7:7c:
75:ee:4a:70:af:1a:07:83:2b:d9:2b:c4:cb:53:f2:55:c6:01:
51:14:b7:ef:63:84:1d:9b:4e:d9:e9:b0:fd:12:d6:a4:54:25:
da:6e:69:a0:26:d6:fb:f0:6a:27:31:96:8f:05:2f:ab:66:7c:
9d:0f:5c:20:f3:4a:b4:6c:f1:dd:cc:36:b8:42:70:b6:c4:85:
dc:52:ac:a1:08:a3:7b:e9:11:a9:36:62:11:51:5d:e4:15:b6:
6d:de:cb:dc:59:e3:f0:82:de:4f:45:9d:a6:1e:a0:7a:90:93:
e3:5c:ce:89:f6:ea:08:db:bf:9c:ff:3b:47:06:71:9d:18:db:
42:19:a1:ab:29:01:6f:91:7e:7f:87:2a:8a:2c:b3:1a:b0:98:
1e:87:a2:6a:73:b2:91:aa:08:5d:cb:b8:93:47:00:cb:60:a0:
f9:65:e6:2a:cf:67:4e:d5:b5:c6:37:40:43:6c:3b:1e:61:d3:
3b:13:fe:e6:d8:93:bb:78:62:d5:ed:ee:e8:d0:a1:95:4e:2d:
a2:91:11:d6:f7:1e:46:39:10:70:0f:17:51:fd:68:bf:3b:35:
42:b0:9c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:53 2026 by rpki-client