Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/MhVQTxFUc7A-Ree4IaxOSdGurOs.roa
File: MhVQTxFUc7A-Ree4IaxOSdGurOs.roa (raw, json)
Hash identifier: hWhhvQnC5qf4cv8mKWBkTBtgpN9HWYE9lumqBqgyyoA=
Subject key identifier: 32:15:50:4F:11:54:73:B0:3E:45:E7:B8:21:AC:4E:49:D1:AE:AC:EB
Certificate issuer: /CN=e413a6c76b131448e30a0dc6a23000747014033a
Certificate serial: 01A0EC2E759FDFA544527AEC0BA699922934
Authority key identifier: E4:13:A6:C7:6B:13:14:48:E3:0A:0D:C6:A2:30:00:74:70:14:03:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BOmx2sTFEjjCg3GojAAdHAUAzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/MhVQTxFUc7A-Ree4IaxOSdGurOs.roa
Signing time: Tue 29 Sep 2026 08:01:02 +0000
ROA not before: Tue 29 Sep 2026 08:01:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133084
IP address blocks: 192.100.139.0/24 maxlen: 24
192.100.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BOmx2sTFEjjCg3GojAAdHAUAzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:75:9f:df:a5:44:52:7a:ec:0b:a6:99:92:29:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e413a6c76b131448e30a0dc6a23000747014033a
Validity
Not Before: Sep 29 08:01:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3215504f115473b03e45e7b821ac4e49d1aeaceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:b0:c7:a4:e0:83:53:0f:ea:f5:4b:9d:5c:
7c:cb:42:89:2f:19:af:06:c9:ae:26:db:dd:a9:d8:
17:e9:91:30:33:65:9a:65:22:6a:4c:09:d7:6f:6b:
20:3a:33:32:37:05:c7:9e:53:0e:22:80:d4:e4:17:
3c:36:c3:86:3d:cc:e4:a8:0f:f0:e1:73:ce:23:c8:
e6:16:f4:3f:b3:3e:70:10:5f:f6:8c:09:0a:57:6d:
75:ea:7a:53:a9:f3:3d:1a:4b:03:e4:dc:f1:7c:38:
91:82:2f:e7:d0:6d:b0:9c:b8:10:ab:01:23:f8:88:
c6:70:0d:cf:bc:f5:43:d6:df:69:1c:02:6a:99:33:
fb:cb:5a:91:cc:ed:c0:91:3e:73:0c:9b:fa:5c:81:
27:19:62:28:03:a7:0e:a9:a5:7c:c9:d2:b7:d5:21:
60:16:ba:b9:35:f0:e8:be:f1:aa:d3:68:14:b1:83:
d3:a1:54:3e:95:bc:9c:a0:78:e7:95:73:98:d2:9b:
fc:c9:c5:8e:69:01:73:b2:e3:ca:23:72:b0:c3:6d:
0d:b0:7c:d3:0c:5e:95:eb:77:77:c4:09:85:6d:31:
40:b3:1f:54:d9:c4:1d:37:f2:34:51:5f:ee:36:9c:
c0:9d:95:4c:58:a9:f8:d3:f2:f9:7a:e2:88:95:d7:
c4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:15:50:4F:11:54:73:B0:3E:45:E7:B8:21:AC:4E:49:D1:AE:AC:EB
X509v3 Authority Key Identifier:
keyid:E4:13:A6:C7:6B:13:14:48:E3:0A:0D:C6:A2:30:00:74:70:14:03:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BOmx2sTFEjjCg3GojAAdHAUAzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/MhVQTxFUc7A-Ree4IaxOSdGurOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.100.139.0-192.100.140.255
Signature Algorithm: sha256WithRSAEncryption
8d:be:14:cc:2c:41:9e:6e:15:ca:20:12:b6:34:2d:f3:8d:82:
c8:27:e2:cf:69:df:f3:2e:f3:48:1b:94:a0:53:39:06:d8:17:
12:67:aa:94:96:0e:cc:46:74:47:28:42:38:fb:c6:91:19:62:
73:f1:2c:4c:13:51:01:b4:00:5a:1a:bd:fe:04:bc:3a:71:85:
01:18:61:16:82:4d:de:09:57:83:e7:c3:88:79:12:ab:f1:f1:
24:89:0d:d7:d7:d7:86:06:47:9e:08:ec:8a:4f:cc:96:0d:d7:
2c:7a:cc:da:82:79:06:c2:4d:fc:3f:26:b2:df:87:48:70:5c:
50:b6:80:86:e6:6e:5b:b6:26:81:1a:c0:75:f1:8b:ac:aa:d4:
45:67:31:85:71:88:28:5a:71:c8:55:b2:a5:51:88:11:eb:5c:
62:91:25:7f:5b:51:72:2b:50:18:99:0e:5c:f0:c1:18:3c:98:
03:34:a2:8d:ad:70:f6:1c:91:1a:7f:d4:2d:12:e7:c3:b9:db:
16:e3:1a:eb:bd:7c:d4:a5:e3:e3:b0:ad:6c:a7:dd:e2:13:ce:
28:94:d3:22:8e:67:66:bb:92:f7:f3:a7:df:de:cf:57:f4:5b:
72:bc:9a:74:c5:fb:de:47:c4:12:a7:72:94:81:cc:79:e3:f9:
0d:ea:c6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:44:49 2026 by rpki-client