Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/1mxm4aA8mprO3SiuYpHL45SLZ6E.roa
File: 1mxm4aA8mprO3SiuYpHL45SLZ6E.roa (raw, json)
Hash identifier: f0DRKc/bZ2uPgiN6SskkmBBO+kuKWGaCsnu4rW9TsJw=
Subject key identifier: D6:6C:66:E1:A0:3C:9A:9A:CE:DD:28:AE:62:91:CB:E3:94:8B:67:A1
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 01A10B5E10C6D69EE2256293BB4E2A8D253F
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/1mxm4aA8mprO3SiuYpHL45SLZ6E.roa
Signing time: Mon 05 Oct 2026 09:21:16 +0000
ROA not before: Mon 05 Oct 2026 09:21:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 185.37.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:5e:10:c6:d6:9e:e2:25:62:93:bb:4e:2a:8d:25:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Oct 5 09:21:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d66c66e1a03c9a9acedd28ae6291cbe3948b67a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:da:d6:00:79:26:74:71:e5:55:6a:95:f4:
28:12:dc:ed:4e:1b:63:a7:2b:48:28:23:19:ce:97:
47:9b:52:ce:54:75:ba:0a:f6:7b:93:8d:2a:71:06:
14:4e:71:86:cc:7b:8d:ac:a2:80:71:a0:8a:16:0e:
94:40:d2:bf:4f:39:dd:b9:f5:ec:c1:43:93:4b:4b:
66:a3:12:a6:07:39:36:ae:58:07:3b:b9:10:72:86:
6f:f0:76:3b:14:b3:25:fb:e6:cd:fc:dc:e9:b9:1d:
05:3b:09:da:00:1d:71:14:3c:cf:93:66:52:a4:d4:
15:c7:c2:f5:89:de:2e:3a:fc:c6:60:d8:10:6f:5b:
05:ba:5c:56:35:63:51:a6:14:fa:08:7a:e6:7d:3a:
1b:18:92:aa:2e:ee:e7:d6:65:b6:a9:2e:d9:7c:55:
12:2d:6d:0a:e0:c3:d1:34:41:9e:93:5e:10:e5:94:
2c:6c:5b:fa:ce:c4:87:41:84:77:e1:8d:2e:10:fc:
a1:b2:d3:f5:7f:73:44:7d:33:c8:e3:ea:2a:51:00:
1f:d9:e1:d8:44:d0:ab:f7:fe:15:85:25:9b:ae:20:
5a:cc:3c:60:a6:ba:c1:c8:b4:31:7d:a6:33:41:7a:
a1:9a:ff:92:9d:b6:13:54:c3:72:0c:ae:66:ac:ef:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6C:66:E1:A0:3C:9A:9A:CE:DD:28:AE:62:91:CB:E3:94:8B:67:A1
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/1mxm4aA8mprO3SiuYpHL45SLZ6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.103.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9a:b6:ff:36:d8:13:a0:5b:3b:58:6e:06:e8:05:6b:12:d4:
c3:20:b2:1d:0a:3f:9a:91:a8:aa:40:49:a4:db:c1:e7:3b:bb:
04:2b:9b:c3:ec:c3:ec:d8:bb:2d:58:69:29:8e:e2:21:ce:0c:
95:f2:80:a4:60:05:2b:8d:92:c5:6c:12:43:80:92:e0:c8:e7:
dc:cb:4b:59:8c:34:ad:4a:19:e0:ce:21:2b:4b:d8:fe:f3:ce:
72:b8:6d:84:e0:39:77:da:c3:46:bf:47:68:19:66:f4:63:3d:
6e:66:48:66:91:a3:e1:90:7b:6f:5d:d0:d0:a6:08:79:07:cf:
da:43:3d:4c:9f:8e:25:2c:bc:e9:fc:f1:82:b2:a9:c6:54:1b:
08:f5:1d:5c:90:a6:09:a2:b7:4c:70:8e:fa:64:62:31:3e:0b:
e9:04:a0:46:e8:81:c2:00:2c:16:da:23:6e:6d:14:96:99:e0:
aa:7f:65:9e:d2:e0:a2:20:3a:bd:1b:77:4b:3d:29:27:97:f9:
b0:58:0e:52:0b:05:92:f4:13:f9:77:8a:8f:e6:97:f0:e3:c4:
5c:17:8c:b0:02:88:a5:36:43:2e:ac:5d:1e:b7:40:e2:4e:2c:
a6:d2:16:69:cc:ea:f4:29:6c:a0:6f:fa:0c:95:83:73:da:ac:
c4:c3:ab:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:46:14 2026 by rpki-client