Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/v_mdbw7jIHcL1g6aBJx8hPIeI7o.roa
File: v_mdbw7jIHcL1g6aBJx8hPIeI7o.roa (raw, json)
Hash identifier: v4eg5veNAvWityWa5ZKIIjCXC1Dxnwt6/VunwasGYGI=
Subject key identifier: BF:F9:9D:6F:0E:E3:20:77:0B:D6:0E:9A:04:9C:7C:84:F2:1E:23:BA
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 01A18434432FBF306961BEBFC9E723B452F5
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/v_mdbw7jIHcL1g6aBJx8hPIeI7o.roa
Signing time: Wed 28 Oct 2026 20:29:39 +0000
ROA not before: Wed 28 Oct 2026 20:29:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198969
IP address blocks: 86.110.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:34:43:2f:bf:30:69:61:be:bf:c9:e7:23:b4:52:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Oct 28 20:29:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bff99d6f0ee320770bd60e9a049c7c84f21e23ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:21:d9:6e:5e:67:f1:0c:18:02:e4:1c:57:
1b:a3:c2:a3:c6:44:58:ca:ca:aa:d2:fe:a2:9a:a4:
07:11:43:56:4e:ad:e1:ef:0c:2b:57:33:4d:0e:dc:
08:67:11:54:9b:5e:da:3a:df:10:b6:2d:ec:bd:0e:
93:0d:f6:63:d5:32:ee:68:f9:a1:0d:45:58:19:41:
c2:5b:a3:1a:88:be:04:5a:75:33:95:5c:6d:7d:52:
70:06:fe:09:a6:3d:82:02:91:49:44:e9:fc:0a:11:
65:2d:85:4a:a5:3b:98:87:24:f4:15:89:fd:ea:88:
be:b3:be:9c:e2:f3:25:17:1d:be:2a:c9:35:4b:00:
64:64:b1:6f:4b:e7:30:72:24:bd:bf:14:40:ea:b6:
19:8a:45:74:c5:d7:a1:e7:e6:d0:ed:a5:e0:b5:47:
3d:83:ed:a4:93:3d:27:14:ed:f2:20:ef:13:ae:fd:
e9:50:c7:45:1e:c3:00:ca:91:6c:2f:82:1d:0d:c3:
bc:3a:cc:86:11:f6:3d:fa:fb:ef:3d:f8:37:2b:16:
dd:e4:aa:b1:5d:48:51:6a:21:97:0b:6f:35:0f:50:
fa:7f:d7:71:3a:50:6c:9c:32:74:3f:b3:fd:29:71:
f2:07:d9:67:79:eb:2a:97:0a:8e:87:31:8a:ed:93:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F9:9D:6F:0E:E3:20:77:0B:D6:0E:9A:04:9C:7C:84:F2:1E:23:BA
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/v_mdbw7jIHcL1g6aBJx8hPIeI7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.34.0/24
Signature Algorithm: sha256WithRSAEncryption
87:10:9e:a6:86:33:87:7d:78:04:48:ef:9e:fb:d6:c1:38:2a:
32:0d:c7:72:23:36:86:2d:40:a2:84:c5:02:66:b8:1a:66:1e:
4c:7d:a8:9f:89:8b:4f:a0:5b:ef:92:5e:b7:c4:f9:c9:aa:af:
5a:ce:63:89:80:f1:11:37:61:28:85:aa:44:c0:63:cb:59:a3:
c0:b4:7a:12:73:7e:0c:96:4a:87:b1:97:fc:a1:ac:63:2a:29:
7b:d3:87:df:34:29:2e:8f:c8:d9:82:dc:63:38:fe:55:17:d0:
cc:e3:00:5f:16:67:fb:ee:27:88:3d:39:cd:ab:00:26:0c:d0:
df:e8:e3:f7:68:2e:8d:91:f2:4a:7a:67:8c:be:18:c5:98:2a:
c0:37:d6:f9:d6:0d:79:39:ef:4e:59:44:b0:b4:d0:52:3a:70:
8c:e4:37:8f:7c:4b:51:a1:48:cc:99:23:69:28:14:2b:c3:89:
97:20:b7:3e:96:5e:54:39:75:07:42:85:c8:c5:c4:b3:5b:1b:
a9:11:02:07:6f:ee:fd:a1:d9:90:50:95:46:22:89:ae:b9:a1:
a3:ab:04:55:ae:bf:d0:ff:b2:09:c8:aa:42:2d:5b:f5:65:18:
22:78:e9:0d:d5:48:e5:97:16:82:52:16:5e:ce:47:6b:b9:62:
e5:cd:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 08:33:34 2026 by rpki-client