Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/mU_E--LterG0sPhTH6vDsOUc5Fs.roa
File: mU_E--LterG0sPhTH6vDsOUc5Fs.roa (raw, json)
Hash identifier: FdpeWbk95ISQCmEG6y5gus5CYoWoBix3bAPNNfx1Vgo=
Subject key identifier: 99:4F:C4:FB:E2:ED:7A:B1:B4:B0:F8:53:1F:AB:C3:B0:E5:1C:E4:5B
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A082126D0865EF5A6B33F4C5F0F0150C98
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/mU_E--LterG0sPhTH6vDsOUc5Fs.roa
Signing time: Tue 08 Sep 2026 17:30:40 +0000
ROA not before: Tue 08 Sep 2026 17:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154859
IP address blocks: 84.54.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:12:6d:08:65:ef:5a:6b:33:f4:c5:f0:f0:15:0c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 8 17:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=994fc4fbe2ed7ab1b4b0f8531fabc3b0e51ce45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:93:8c:1c:38:79:1b:17:b7:3f:a3:00:82:
ff:e4:8d:fc:69:41:70:d7:15:c1:ba:94:c2:25:4e:
25:4c:f0:21:50:cf:83:47:33:8b:62:41:a4:cd:15:
c8:c1:af:1b:94:64:6b:e0:30:e7:54:2f:04:72:bc:
02:77:3c:64:34:97:63:8e:17:75:6c:50:41:5d:1a:
c3:b4:e5:15:dd:c5:5e:47:10:48:77:ec:2f:70:68:
70:78:b3:da:7c:02:f6:cc:16:be:9b:10:d6:33:1a:
16:33:e4:9c:33:ae:77:96:6e:a8:24:f1:7b:05:7e:
aa:49:f4:29:e0:3f:a8:bc:50:2f:a0:7b:85:af:a0:
c6:c5:af:e1:dd:68:7f:fa:0f:e9:3c:89:2a:cc:7c:
2f:c7:35:2e:21:05:a4:2e:1f:61:5e:20:9d:77:b2:
ab:bf:91:d5:19:9f:4c:f1:91:19:d5:07:36:c7:dd:
a1:b9:3c:a9:ef:46:ec:7e:4b:e1:83:67:42:5b:c6:
a6:ce:b9:ca:19:98:6d:f0:57:b4:1a:48:9c:5a:94:
1f:13:d3:ef:c4:f1:a0:34:80:4b:60:cf:53:b0:5b:
e0:7e:75:49:58:4d:9c:f4:01:d6:e9:04:6e:0b:d7:
40:81:15:e8:62:18:fb:21:40:00:7e:53:b7:ce:ae:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4F:C4:FB:E2:ED:7A:B1:B4:B0:F8:53:1F:AB:C3:B0:E5:1C:E4:5B
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/mU_E--LterG0sPhTH6vDsOUc5Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.0.0/23
Signature Algorithm: sha256WithRSAEncryption
48:07:3d:ad:3f:99:09:90:03:a1:bb:32:31:22:7a:ca:4b:79:
f6:55:51:26:ac:71:e2:30:2a:33:e6:4d:f3:ea:6d:84:3c:d5:
06:c6:27:e3:89:c9:e7:8a:1e:44:54:5d:be:7f:5b:b6:64:8a:
c3:3b:d9:20:63:c1:56:eb:dc:35:bc:3a:a1:18:57:d6:7d:0b:
5e:e2:3a:87:55:ed:d3:27:2e:7b:3b:4f:1f:47:ec:9c:aa:1a:
d7:97:62:2a:31:b1:5d:57:53:20:14:00:e0:86:17:be:26:25:
c9:b2:17:dd:c2:4e:89:a4:e3:0c:c7:35:f7:0e:75:74:48:03:
d6:dc:3f:84:a6:4c:fe:22:17:bf:75:da:f6:ed:a0:37:60:f4:
03:db:0a:4c:29:e8:08:79:7d:1b:1d:c8:ee:7e:5d:a5:d6:c7:
1e:81:b9:42:a5:25:35:96:d2:8f:82:2a:c8:0a:56:f0:0d:5b:
b0:ec:91:da:f1:20:f7:88:78:52:fb:89:84:75:e5:f9:6c:11:
57:f1:98:a4:c4:18:e6:f7:d5:8b:37:26:7e:cb:70:1c:16:10:
bc:8f:96:e9:d5:ec:45:e7:92:6f:fb:9b:71:9f:33:c2:5a:0d:
64:d5:75:1c:67:69:86:34:83:9e:30:cd:f1:fd:25:bd:36:bf:
c8:8f:b8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:57:31 2026 by rpki-client