Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/m0Bh1C1qv45oD3Fv_XEZf4FdFHs.roa
File: m0Bh1C1qv45oD3Fv_XEZf4FdFHs.roa (raw, json)
Hash identifier: YygWOuEcPoVAZGPk4MC2yutSxnaPO6j+qgTwNkjXMhQ=
Subject key identifier: 9B:40:61:D4:2D:6A:BF:8E:68:0F:71:6F:FD:71:19:7F:81:5D:14:7B
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019D3015F37218592900DB1CBCD8FCB69757
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/m0Bh1C1qv45oD3Fv_XEZf4FdFHs.roa
Signing time: Fri 27 Mar 2026 16:17:18 +0000
ROA not before: Fri 27 Mar 2026 16:17:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48881
IP address blocks: 80.97.27.0/24 maxlen: 24
81.181.166.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:15:f3:72:18:59:29:00:db:1c:bc:d8:fc:b6:97:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 27 16:17:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b4061d42d6abf8e680f716ffd71197f815d147b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:6b:81:68:83:a3:b6:dc:be:dd:29:b1:bf:
2b:b3:81:46:1e:29:29:bc:67:3b:bf:c2:18:25:9b:
c9:c1:90:b2:12:37:7b:84:d2:29:dd:e3:12:00:40:
d2:6c:20:24:69:85:0f:28:b5:bb:57:4b:7c:5b:58:
3a:54:95:f2:8a:b3:3d:a2:46:a8:c0:09:83:16:a0:
f8:33:ee:e8:49:c9:6c:73:51:c9:17:28:6a:63:7c:
8f:f9:1f:5b:04:d5:e7:68:44:a2:a2:8d:0e:5f:ac:
48:39:7c:3c:19:59:9c:7b:85:3e:aa:21:50:2e:1d:
ec:d0:82:13:13:63:c4:7a:1e:7c:0b:2e:7c:47:87:
80:a1:d9:a7:f3:00:5d:0b:e4:84:ca:49:f1:64:2e:
56:dc:b0:de:91:ee:f3:61:d3:4f:4d:3e:91:96:90:
12:20:48:46:b5:68:7f:84:21:ec:73:58:3e:c5:8b:
db:d1:f6:35:d2:0f:42:d8:08:f7:70:4b:0e:73:e9:
28:59:70:a3:33:54:9a:65:31:bf:e4:84:ee:ba:00:
23:b3:52:aa:a0:cb:8f:cd:8e:12:64:55:d3:8f:41:
f1:c7:1a:a2:7a:2c:c3:94:83:7c:ac:10:8c:f2:3f:
5c:e5:2d:76:86:a4:96:e2:0d:59:01:5b:f5:f3:06:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:40:61:D4:2D:6A:BF:8E:68:0F:71:6F:FD:71:19:7F:81:5D:14:7B
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/m0Bh1C1qv45oD3Fv_XEZf4FdFHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.27.0/24
81.181.166.0/24
217.156.93.0/24
Signature Algorithm: sha256WithRSAEncryption
41:6a:85:a0:40:3b:ce:f0:da:2d:f9:32:5c:9e:ca:2c:0d:5e:
07:30:a3:22:69:7c:38:6b:95:ff:7c:e0:c8:bc:ea:c1:44:66:
cc:81:70:28:ed:d5:b0:f2:25:f8:d4:69:04:97:5b:f4:c7:9e:
6e:c1:fa:72:dc:16:83:ae:b1:cf:59:6e:38:ed:f4:97:7e:76:
86:c3:2b:6d:51:8a:fd:5a:30:c0:34:82:6a:0c:9c:ec:4d:ff:
30:9a:bb:da:31:1d:33:34:6c:4d:27:d0:4b:ec:00:72:e6:8f:
e6:f3:00:d9:8b:97:1e:0b:ca:70:ee:22:70:a8:f5:da:6c:0d:
c3:59:b7:c7:2a:59:a3:e8:76:1c:dd:52:b9:77:56:56:e8:7c:
1b:c9:3c:f0:65:7c:0c:c1:ef:46:98:a2:fd:65:bc:da:a0:52:
ac:e8:d0:be:b1:13:c9:9e:ed:29:58:9a:20:93:d8:36:8c:aa:
6e:f5:cb:ad:40:84:5f:33:f9:af:58:c3:0c:6b:ee:d7:4a:92:
e6:31:d8:c1:9c:60:f3:90:11:da:0b:18:86:b9:d7:a6:f2:c3:
56:39:d9:24:67:75:8d:1f:38:0a:ba:2d:f6:e0:59:a3:cb:9b:
09:e1:23:57:1d:50:d4:f4:a3:67:a2:9b:c4:b7:56:af:40:3f:
54:11:72:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:41 2026 by rpki-client