Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Mn3--GFEkOhN6uZ8vMFtpnYuZtc.roa
File: Mn3--GFEkOhN6uZ8vMFtpnYuZtc.roa (raw, json)
Hash identifier: LIF9eiDAvm7TdIS4M3TyTQwQbexxyCmCBkKZ3NjF1fM=
Subject key identifier: 32:7D:FE:F8:61:44:90:E8:4D:EA:E6:7C:BC:C1:6D:A6:76:2E:66:D7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0587A6B34EE09AAC6F17E276794E9129B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Mn3--GFEkOhN6uZ8vMFtpnYuZtc.roa
Signing time: Mon 31 Aug 2026 15:40:12 +0000
ROA not before: Mon 31 Aug 2026 15:40:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 191.222.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:7a:6b:34:ee:09:aa:c6:f1:7e:27:67:94:e9:12:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 31 15:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=327dfef8614490e84deae67cbcc16da6762e66d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:0c:8e:ca:83:93:38:c9:ca:32:bf:a2:01:
52:2b:ae:39:64:d4:14:2a:55:79:2c:fe:25:68:4d:
2b:d0:d3:da:d6:86:56:19:a5:fd:69:59:41:44:4a:
1d:32:1a:00:4b:fe:64:5a:46:a5:d9:a2:ed:05:2a:
68:44:2e:fa:65:0a:87:d9:04:f3:23:54:2e:ab:31:
d0:9e:28:d6:f5:7c:6d:bf:d5:da:25:98:90:c2:fb:
c5:12:3d:68:1c:68:31:09:26:f9:5f:52:52:5a:54:
2b:e5:d8:e8:c9:b9:45:f5:d1:9a:94:d8:a5:8e:06:
1d:8d:0d:93:2d:32:df:6d:d4:32:9b:e6:24:24:13:
05:ea:b8:d8:4d:da:ae:28:5a:d0:d3:37:36:06:d5:
c5:6b:94:89:eb:e7:d8:8e:9a:0f:21:66:c4:75:0f:
a2:6b:e1:4d:3c:9e:69:d1:3d:b0:09:1d:4f:39:65:
0e:63:d2:3f:d2:b7:1d:a9:c6:93:27:db:43:69:92:
90:32:6d:42:bf:95:42:57:65:a2:9b:a5:b3:42:2e:
4a:53:07:96:58:02:2a:11:0d:a3:f1:5d:50:5e:cc:
5e:93:e8:f3:31:28:e4:03:5d:db:e6:77:e3:95:f1:
71:27:ce:51:8d:cc:2f:60:6e:af:97:86:a3:9e:0f:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7D:FE:F8:61:44:90:E8:4D:EA:E6:7C:BC:C1:6D:A6:76:2E:66:D7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Mn3--GFEkOhN6uZ8vMFtpnYuZtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.222.255.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6e:f6:6f:48:8b:d0:f8:35:91:88:83:07:c8:31:c5:27:51:
5e:50:5d:32:58:b9:72:f5:00:9c:0f:1a:68:56:64:a4:62:cc:
4c:e7:7a:eb:45:32:5d:fd:72:c8:2c:52:f0:9d:83:86:00:0f:
d1:43:14:74:ee:ec:14:33:86:0a:3a:0c:4e:9a:cd:19:bc:83:
38:99:29:ae:d2:f9:a8:25:e4:e9:9a:a5:59:29:63:1b:c6:31:
8f:c5:6b:14:9f:75:b6:ea:90:78:c9:41:a3:84:6a:24:bb:ff:
d0:53:3c:d2:a0:8e:7e:81:4e:1c:8b:17:45:32:68:7a:28:ae:
ea:88:d3:f3:45:9b:f6:8a:a3:b6:14:76:16:50:20:14:12:b0:
51:f5:87:ab:a3:c2:ec:21:6d:90:df:63:e7:1c:21:76:03:13:
b4:94:cf:ab:3e:fe:b1:62:81:24:ad:16:16:7c:1e:5d:ca:99:
d3:15:6d:de:b8:e5:d4:4a:59:e4:15:89:3c:9e:6e:06:23:b9:
23:1e:bd:29:3c:67:51:ff:7f:cb:1c:52:1b:23:4d:2a:3a:5b:
0e:ea:1b:18:35:8c:d1:bd:34:8f:b6:0d:2d:19:d4:c5:e9:98:
dd:17:d5:5e:fb:b8:95:28:a6:64:fd:cc:f1:5e:f3:dd:e2:25:
ad:6f:fb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:20:54 2026 by rpki-client