Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/Mkx5QqJBBdzFi4K_8jHAK9jxROo.roa
File: Mkx5QqJBBdzFi4K_8jHAK9jxROo.roa (raw, json)
Hash identifier: /xYXG6nHZmfuKlJ26GtGjcJ2e4BfFGtrbLlscDJbCtk=
Subject key identifier: 32:4C:79:42:A2:41:05:DC:C5:8B:82:BF:F2:31:C0:2B:D8:F1:44:EA
Certificate issuer: /CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Certificate serial: 019B7F83142F7D6C01FA9F593E8C432BAA6A
Authority key identifier: C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/Mkx5QqJBBdzFi4K_8jHAK9jxROo.roa
Signing time: Fri 02 Jan 2026 16:20:55 +0000
ROA not before: Fri 02 Jan 2026 16:20:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56408
IP address blocks: 91.223.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:14:2f:7d:6c:01:fa:9f:59:3e:8c:43:2b:aa:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Validity
Not Before: Jan 2 16:20:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=324c7942a24105dcc58b82bff231c02bd8f144ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:58:6a:c2:e1:dc:2f:3b:21:b1:44:4e:b8:18:
a1:83:8e:75:ba:68:22:38:91:2c:2f:c5:fc:24:d2:
4d:ff:e9:98:81:c5:4d:17:95:97:d1:b6:07:61:f9:
87:9d:2a:14:9e:eb:7b:e9:0b:40:16:0a:d1:54:28:
a9:42:bd:a0:2e:23:cf:f4:31:20:4e:b2:38:5d:65:
97:e0:44:2c:c8:eb:ff:63:21:1a:e7:18:1e:0a:15:
b8:66:0e:c6:0c:43:89:5c:c4:d0:2a:b2:a1:95:ce:
6b:25:10:7f:fa:d1:23:51:ce:d7:ce:aa:6a:77:32:
52:70:00:98:ac:02:55:61:3c:8a:e7:52:fe:9a:34:
be:75:e0:91:fd:52:66:c5:08:8f:7d:42:4f:16:b8:
2b:85:c4:09:2f:41:96:f1:a6:41:71:60:35:ab:d1:
f6:0b:a3:85:50:1a:70:f8:4d:0a:93:c3:36:69:96:
ff:6e:5e:23:82:14:e9:af:cf:d2:21:3d:c6:a6:33:
27:82:38:0f:4a:4f:43:f4:00:30:f8:5b:a2:26:8e:
09:d8:3c:3b:7f:03:c1:a8:8b:98:80:34:ff:90:02:
b7:6b:4e:07:75:00:69:0c:eb:fe:16:7e:7b:39:79:
4b:71:7a:c0:28:87:ab:c1:88:7c:b5:21:94:d0:5e:
81:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4C:79:42:A2:41:05:DC:C5:8B:82:BF:F2:31:C0:2B:D8:F1:44:EA
X509v3 Authority Key Identifier:
keyid:C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/Mkx5QqJBBdzFi4K_8jHAK9jxROo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.130.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f1:50:1d:61:ae:ce:48:aa:21:62:95:3e:26:c7:36:28:f4:
fb:c6:f7:6f:4c:1c:87:5a:96:78:b5:cb:e0:ab:bb:a4:ae:e0:
5f:0a:c5:e9:d6:4b:15:ae:08:96:4e:6c:9b:30:05:b3:cb:28:
bb:4b:c4:47:91:41:bd:57:e2:4f:fd:1f:ee:d8:2d:92:84:d0:
fb:6b:63:42:6a:16:dc:90:6f:ba:d8:22:55:18:37:71:a3:ba:
55:0e:2e:07:d4:24:9b:05:76:67:5c:57:24:f7:a3:39:6a:a7:
2c:86:97:ee:42:4c:75:a3:bc:aa:fa:a3:17:61:7b:d2:62:27:
e8:f7:d3:5e:ad:50:4c:e7:c5:b1:a6:60:ef:af:02:d7:ba:fa:
34:97:8a:d3:c3:6c:8e:62:fe:f4:5b:08:ac:e2:11:b1:66:b7:
5e:fc:80:74:6b:18:34:6e:99:ff:12:b4:9b:4c:b9:b7:ba:1b:
25:42:c8:0e:c5:61:d1:38:bd:9b:53:5a:77:40:44:63:5b:61:
1d:f6:d1:fc:b4:fe:cc:b1:1b:87:8a:1c:fd:cb:c3:80:9a:9b:
5d:75:68:21:88:69:02:4b:38:3b:a4:02:7f:b1:50:8d:76:be:
64:98:4b:23:e5:5a:e6:89:d4:e5:d7:3b:85:c4:63:fc:95:34:
93:6d:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:38:00 2026 by rpki-client