Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/mvlh2Ck7tFx4kWwn1C3-W40kuSk.roa
File: mvlh2Ck7tFx4kWwn1C3-W40kuSk.roa (raw, json)
Hash identifier: uX8mruhgxib2WVt/u4QpZtpqrzmHiXoLHgeIeRDHdv0=
Subject key identifier: 9A:F9:61:D8:29:3B:B4:5C:78:91:6C:27:D4:2D:FE:5B:8D:24:B9:29
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A12A75F3CE19DAD3B4D346A95ED5610CAA
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/mvlh2Ck7tFx4kWwn1C3-W40kuSk.roa
Signing time: Sun 11 Oct 2026 10:15:35 +0000
ROA not before: Sun 11 Oct 2026 10:15:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219436
IP address blocks: 87.58.192.0/24 maxlen: 24
150.251.33.0/24 maxlen: 24
150.251.34.0/24 maxlen: 24
150.251.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:75:f3:ce:19:da:d3:b4:d3:46:a9:5e:d5:61:0c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Oct 11 10:15:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9af961d8293bb45c78916c27d42dfe5b8d24b929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:5b:b8:e7:e9:6d:59:64:c4:98:7d:b2:ec:
d4:96:ae:c4:70:7a:8b:ce:19:f2:7d:c1:4a:53:b5:
4b:12:6e:f6:1c:61:8f:47:fa:e8:a5:a3:75:21:59:
7f:bc:66:b7:24:db:89:27:a8:70:4f:bc:cb:85:1d:
82:b4:6d:58:31:3c:ad:65:18:97:31:31:9c:33:33:
de:6b:91:92:55:26:db:c4:31:c4:bc:87:aa:04:e4:
6b:c5:45:b1:13:ae:41:c5:aa:4f:0d:2f:f6:0f:d8:
0a:a6:ae:f5:a0:22:af:cb:4e:0f:69:42:a2:1b:02:
18:f4:09:ed:20:2b:6f:01:4a:d6:77:1f:a9:5b:6b:
39:31:1a:12:ce:9e:86:1d:e0:77:ee:e3:ac:5d:16:
bb:f9:80:74:a4:3e:2a:56:b2:23:3d:11:34:f9:11:
84:5d:d9:c7:61:27:92:40:35:c4:aa:4c:09:27:16:
7e:55:91:75:54:47:66:9e:a6:29:d0:b9:87:c0:63:
9c:c7:b1:b6:ac:57:24:f8:fd:ea:9d:0d:11:66:6c:
94:a3:86:10:c0:1c:78:02:6c:4a:9b:e5:3d:3f:8a:
9b:27:26:e5:4c:5a:f4:ee:2f:85:a6:2a:a1:c3:73:
56:9a:13:0d:db:55:5b:89:d4:1e:dd:06:d9:75:e2:
f1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F9:61:D8:29:3B:B4:5C:78:91:6C:27:D4:2D:FE:5B:8D:24:B9:29
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/mvlh2Ck7tFx4kWwn1C3-W40kuSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.192.0/24
150.251.33.0-150.251.34.255
150.251.150.0/24
Signature Algorithm: sha256WithRSAEncryption
89:6c:dd:fb:bb:34:a5:ff:c8:26:d3:75:b8:85:0e:60:ea:82:
5b:3b:e2:7d:c7:e4:f5:81:52:80:88:95:2c:79:9a:6c:17:5a:
e6:ed:d3:74:07:23:f2:d4:73:39:4f:d2:0c:b3:78:64:9c:ef:
09:60:ea:3d:17:13:1b:28:9d:db:51:ce:37:fd:d2:9a:33:b5:
2d:6b:fe:0d:3e:9c:ea:61:c9:0e:a8:d9:c7:b4:21:ff:8f:3e:
f6:20:04:98:e5:0f:4b:bf:27:36:33:6d:6d:fb:f1:ad:72:04:
ed:08:99:f7:db:7a:c9:e5:0a:50:e5:a0:76:2d:35:3d:79:f6:
9a:e4:db:7b:4d:5d:73:bd:cb:23:87:3a:5a:76:f7:8d:29:49:
18:35:55:46:e7:f1:1d:05:c3:f0:de:04:32:c9:0a:1f:b7:f3:
b2:90:45:84:7d:1a:69:fc:84:3e:d0:27:70:2b:cc:73:ad:43:
c6:29:95:ef:43:0a:f4:e9:90:ce:51:27:5b:84:91:89:ec:78:
8a:a3:50:fc:1d:30:14:70:1e:6e:9a:f3:19:7d:b0:ba:97:05:
c6:99:6b:f0:2a:12:a5:ba:9c:72:ee:49:78:3a:c1:c8:ac:b2:
6c:85:18:6c:5f:b2:57:9d:de:4f:aa:83:36:11:d9:16:34:0c:
7d:5c:de:44
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaEqdfPOGdrTtNNGqV7VYQyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk
M2FhNjgwHhcNMjYxMDExMTAxNTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWY5NjFkODI5M2JiNDVjNzg5MTZjMjdkNDJkZmU1YjhkMjRiOTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunlbuOfpbVlkxJh9suzUlq7EcHqL
zhnyfcFKU7VLEm72HGGPR/ropaN1IVl/vGa3JNuJJ6hwT7zLhR2CtG1YMTytZRiX
MTGcMzPea5GSVSbbxDHEvIeqBORrxUWxE65BxapPDS/2D9gKpq71oCKvy04PaUKi
GwIY9AntICtvAUrWdx+pW2s5MRoSzp6GHeB37uOsXRa7+YB0pD4qVrIjPRE0+RGE
XdnHYSeSQDXEqkwJJxZ+VZF1VEdmnqYp0LmHwGOcx7G2rFck+P3qnQ0RZmyUo4YQ
wBx4AmxKm+U9P4qbJyblTFr07i+Fpiqhw3NWmhMN21VbidQe3QbZdeLxewIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFJr5YdgpO7RceJFsJ9Qt/luNJLkpMB8GA1UdIwQY
MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt
MTMyZmZjOGJkZTQ2LzEvbXZsaDJDazd0Rng0a1d3bjFDMy1XNDBrdVNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2
LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAVzrAMAwD
BACW+yEDBACW+yIDBACW+5YwDQYJKoZIhvcNAQELBQADggEBAIls3fu7NKX/yCbT
dbiFDmDqgls74n3H5PWBUoCIlSx5mmwXWubt03QHI/LUczlP0gyzeGSc7wlg6j0X
ExsondtRzjf90poztS1r/g0+nOphyQ6o2ce0If+PPvYgBJjlD0u/JzYzbW378a1y
BO0ImffbesnlClDloHYtNT159prk23tNXXO9yyOHOlp2940pSRg1VUbn8R0Fw/De
BDLJCh+387KQRYR9Gmn8hD7QJ3ArzHOtQ8Yple9DCvTpkM5RJ1uEkYnseIqjUPwd
MBRwHm6a8xl9sLqXBcaZa/AqEqW6nHLuSXg6wcissmyFGGxfsled3k+qgzYR2RY0
DH1c3kQ=
-----END CERTIFICATE-----
Generated at Thu Nov 5 12:47:04 2026 by rpki-client