Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/mmjz2N0jeb-OAmne9BrUvTuOa8c.roa
File: mmjz2N0jeb-OAmne9BrUvTuOa8c.roa (raw, json)
Hash identifier: VeJ9ypVGjvPcQwVgo5MVdxvT0Ai6b0ILCQejvfCVvqo=
Subject key identifier: 9A:68:F3:D8:DD:23:79:BF:8E:02:69:DE:F4:1A:D4:BD:3B:8E:6B:C7
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 01A08ABC2407D20EBEA5266D2A1F34801E10
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/mmjz2N0jeb-OAmne9BrUvTuOa8c.roa
Signing time: Thu 10 Sep 2026 09:53:00 +0000
ROA not before: Thu 10 Sep 2026 09:53:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38186
IP address blocks: 195.238.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:bc:24:07:d2:0e:be:a5:26:6d:2a:1f:34:80:1e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Sep 10 09:53:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a68f3d8dd2379bf8e0269def41ad4bd3b8e6bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:64:09:71:cc:74:c2:67:8e:4b:f3:dd:f4:
2f:81:87:ea:e7:ea:51:c0:69:6c:b0:cc:b0:7e:94:
ae:18:10:3f:3c:ed:89:5a:a9:58:f6:b2:d1:96:1b:
3c:99:21:a4:59:e3:46:68:2c:16:3b:c8:17:e5:65:
0a:44:84:8b:e9:f9:f6:a3:28:0c:e3:c6:3f:e8:08:
89:70:79:3c:17:ed:b4:00:b9:f1:c3:57:97:ee:f4:
1b:54:b3:32:e2:5d:41:e3:d8:88:d7:02:cc:67:70:
46:58:d3:1b:df:9d:c9:82:57:cf:9a:e1:e0:3b:32:
97:66:81:c6:4e:47:08:34:4d:71:fd:ba:73:58:89:
a7:6f:62:1a:dc:d1:cd:31:9c:b4:d5:ca:f1:54:bc:
71:dc:fb:fb:8a:cc:b0:98:f2:e8:a9:c0:95:58:60:
8b:9b:7e:07:30:1e:85:60:97:fc:28:2e:24:1e:83:
33:28:9f:02:b0:9c:e6:7a:e8:4a:bb:19:93:62:0f:
1a:37:2c:d3:c8:4b:22:90:24:55:43:7e:42:45:c8:
48:a2:70:c5:d8:7a:08:ba:25:19:17:66:14:e6:30:
c0:31:0e:32:f8:e0:2d:cc:b2:c8:cb:5a:68:3a:dd:
28:91:f9:dd:08:92:6e:be:69:c7:aa:94:47:c3:74:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:68:F3:D8:DD:23:79:BF:8E:02:69:DE:F4:1A:D4:BD:3B:8E:6B:C7
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/mmjz2N0jeb-OAmne9BrUvTuOa8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.97.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:24:45:63:b0:98:77:1d:89:cd:11:c1:91:68:c1:4f:23:37:
67:97:20:cd:9d:f1:c4:c8:05:16:f1:3c:22:e6:dd:c5:70:5d:
e1:15:ae:05:a1:05:d7:9c:96:d1:49:22:fc:76:59:60:40:d4:
7f:01:65:15:d5:4a:16:3c:25:6e:d9:c0:58:ba:bc:a4:90:ad:
7f:73:48:aa:29:a2:2d:16:c5:ce:7e:14:87:18:7f:67:a3:e9:
37:cd:a4:6d:8e:f5:80:25:10:82:26:26:51:de:8a:78:b0:2f:
6d:b9:09:49:0d:be:0a:67:f4:26:fb:1a:7b:cc:3e:9e:3a:d1:
14:3c:89:55:39:dd:3b:ad:c8:83:4a:90:65:39:fe:d0:2c:64:
f9:84:0c:08:89:10:cd:4b:21:37:3b:c0:fd:b9:96:d3:ef:71:
be:14:fc:23:7b:91:66:95:b8:83:aa:ec:13:6d:02:dc:e7:e5:
ce:13:29:96:f6:dc:6a:ba:1e:10:bd:51:d6:1d:f7:85:c1:c4:
56:f2:29:90:cb:80:3e:87:fe:43:e8:7d:63:45:47:46:8f:4c:
3f:aa:49:3b:4c:a0:bb:4f:fe:e8:38:4f:2d:61:46:37:aa:b6:
cf:55:7d:83:e7:61:56:a4:f0:1f:b4:bc:22:38:14:ca:1d:d6:
f7:4d:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:30:35 2026 by rpki-client