Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/MAfy7GCztZapHG3Mba4fGQ7n6jo.roa
File: MAfy7GCztZapHG3Mba4fGQ7n6jo.roa (raw, json)
Hash identifier: fHGd3BCJwRMKjNKFXuS7tP7gKEFDjkZoKbV0ULV1RLY=
Subject key identifier: 30:07:F2:EC:60:B3:B5:96:A9:1C:6D:CC:6D:AE:1F:19:0E:E7:EA:3A
Certificate issuer: /CN=b8b9a2696fd1327684a26387bd27cc47de55f35c
Certificate serial: 01A0904602CBC89F94BCD0825801B552DC1F
Authority key identifier: B8:B9:A2:69:6F:D1:32:76:84:A2:63:87:BD:27:CC:47:DE:55:F3:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLmiaW_RMnaEomOHvSfMR95V81w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/MAfy7GCztZapHG3Mba4fGQ7n6jo.roa
Signing time: Fri 11 Sep 2026 11:41:42 +0000
ROA not before: Fri 11 Sep 2026 11:41:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50625
IP address blocks: 91.232.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/uLmiaW_RMnaEomOHvSfMR95V81w.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/uLmiaW_RMnaEomOHvSfMR95V81w.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLmiaW_RMnaEomOHvSfMR95V81w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:46:02:cb:c8:9f:94:bc:d0:82:58:01:b5:52:dc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b9a2696fd1327684a26387bd27cc47de55f35c
Validity
Not Before: Sep 11 11:41:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3007f2ec60b3b596a91c6dcc6dae1f190ee7ea3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:53:97:4b:9e:06:40:0f:e2:09:84:0c:40:
cf:35:a0:22:9c:a3:5f:d7:6c:b3:38:3f:fb:c8:f2:
d3:b9:f4:74:0a:09:34:fe:3c:8c:12:d2:9e:a9:bc:
cf:00:9f:49:54:4c:22:29:10:6c:c0:2d:68:1f:2b:
9a:a4:34:0f:d4:84:5a:e1:d4:68:f9:0d:df:51:dd:
3c:a1:7e:6f:c3:0f:bd:bb:9b:93:91:20:57:5d:0a:
e7:1b:b2:87:9b:40:67:62:fd:37:89:0c:70:34:fb:
f5:24:e3:f7:41:58:81:65:81:b1:4d:34:d3:96:25:
18:62:3e:ef:b8:1a:c1:c9:48:69:ef:7a:6e:3f:31:
92:d7:12:bf:d3:e5:fc:75:ca:c5:a6:d6:c7:5c:58:
26:20:11:46:05:cf:27:a5:08:d2:36:da:e7:2c:93:
92:cd:72:9a:81:bc:9c:17:ec:88:a7:de:e8:85:68:
7d:e2:25:a2:01:4c:99:db:96:ce:f7:e3:01:0c:6f:
a1:49:27:8f:63:e2:c2:3a:fe:2e:b4:27:da:9f:09:
47:81:e7:7d:56:94:4c:7f:c0:00:f9:6f:15:9c:f8:
91:b7:7c:ab:8c:2e:bc:28:10:ba:71:36:fb:35:19:
cf:f6:e2:8e:03:dd:68:58:1a:10:af:01:91:f0:0b:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:07:F2:EC:60:B3:B5:96:A9:1C:6D:CC:6D:AE:1F:19:0E:E7:EA:3A
X509v3 Authority Key Identifier:
keyid:B8:B9:A2:69:6F:D1:32:76:84:A2:63:87:BD:27:CC:47:DE:55:F3:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLmiaW_RMnaEomOHvSfMR95V81w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/MAfy7GCztZapHG3Mba4fGQ7n6jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/uLmiaW_RMnaEomOHvSfMR95V81w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:b3:6a:a4:d6:e1:f0:22:ca:5c:d7:8f:c4:4f:32:e6:95:2c:
da:6f:f2:99:a1:e9:d7:92:d6:66:ea:71:ea:f0:2d:b4:3c:41:
09:e8:fa:2a:d6:0d:20:44:c7:a8:97:60:5d:f8:0c:f8:fd:e5:
e4:17:89:9c:21:ae:f8:28:95:dc:f1:ac:9f:93:3d:26:83:c7:
eb:33:f7:f8:de:70:76:12:23:b5:ae:03:80:f3:98:3f:85:84:
53:2c:2e:53:d0:1d:ef:cd:03:00:d2:83:7a:42:c4:92:dd:46:
20:ad:83:13:65:71:e6:52:74:7e:31:f9:77:b4:de:b9:a7:3a:
91:08:f5:39:68:5c:ce:a8:1d:2a:9b:ab:a0:ed:4c:a8:6b:af:
66:ef:91:1c:0a:7b:1e:1d:c0:f5:71:aa:7a:24:24:2d:34:b4:
11:96:f9:b9:d0:dd:c3:33:e2:5b:fa:12:73:21:77:f9:fb:cd:
be:ee:8f:5b:e9:38:cd:b0:a6:67:4e:c8:a5:ea:41:b5:e1:e0:
83:51:80:ed:e9:e1:62:2d:07:26:04:ca:42:20:f5:80:3b:89:
f4:54:3f:34:0b:3b:53:b8:61:ae:ee:bf:14:db:f8:f2:d4:f8:
89:05:e4:6b:56:47:3e:0c:d8:f8:76:24:8a:39:af:a8:0b:f8:
73:26:0c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:21:44 2026 by rpki-client