Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MhFVRx0kB8PBEvZ06OqRd5URMpU.roa
File: MhFVRx0kB8PBEvZ06OqRd5URMpU.roa (raw, json)
Hash identifier: 46KCfJ0SGFvaBRKczGbzuz7A5Bg6Wv+GBkOdjEOBR/8=
Subject key identifier: 32:11:55:47:1D:24:07:C3:C1:12:F6:74:E8:EA:91:77:95:11:32:95
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A005CAC04C69DA86CE3846E3E96FB4AC37
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MhFVRx0kB8PBEvZ06OqRd5URMpU.roa
Signing time: Sat 15 Aug 2026 14:19:28 +0000
ROA not before: Sat 15 Aug 2026 14:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219158
IP address blocks: 2a06:9801:f11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:05:ca:c0:4c:69:da:86:ce:38:46:e3:e9:6f:b4:ac:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 15 14:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=321155471d2407c3c112f674e8ea917795113295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:3a:a3:d2:dd:0e:d1:ce:1c:80:7c:a1:97:
74:a1:df:8e:f1:4c:be:20:52:83:ad:42:92:ba:14:
ae:da:4c:b1:52:11:34:fd:e0:33:8d:f1:ae:c5:b9:
3a:df:12:1a:99:6d:79:10:37:80:41:82:1a:20:92:
79:29:78:57:ef:28:43:26:c1:7f:e9:46:54:88:7c:
91:75:48:ba:13:48:e8:82:b7:da:98:e5:52:66:e1:
60:3c:90:a3:bf:c8:39:a7:a3:e6:1e:a9:f6:18:d8:
57:6c:f9:99:8d:11:ff:bd:ae:df:00:29:e4:d0:1b:
70:cc:0e:63:61:80:ed:4c:1d:34:e9:3d:27:35:88:
66:9f:4f:bd:78:be:4d:55:c6:30:34:85:5f:7f:10:
4c:51:c7:ed:17:ec:a1:5f:16:2b:eb:49:99:0f:c2:
a3:81:7d:49:01:0c:24:3a:89:fc:a1:8f:62:e9:12:
de:1b:b7:bc:c9:ae:17:6c:c7:70:f2:d6:dc:6e:31:
f8:cb:0f:32:3e:4d:c4:b0:f0:40:68:19:66:88:5a:
a0:e7:ac:cc:d4:8d:4c:2d:7e:a9:3f:de:a7:04:30:
28:b0:77:dc:04:2c:52:c3:ac:7c:73:09:18:04:0b:
77:ad:9f:aa:e8:e0:b0:3e:bb:7e:7a:e7:d0:99:09:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:11:55:47:1D:24:07:C3:C1:12:F6:74:E8:EA:91:77:95:11:32:95
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MhFVRx0kB8PBEvZ06OqRd5URMpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f11::/48
Signature Algorithm: sha256WithRSAEncryption
55:c0:a5:d9:ee:12:4c:8a:69:57:0b:cb:96:c8:45:06:d6:3e:
29:88:18:17:5b:d5:09:18:d0:c4:25:13:3c:e0:9e:5f:f5:9c:
17:40:b8:12:ee:c0:85:db:6a:eb:b8:3b:10:44:3a:ae:bc:34:
5e:87:ae:5b:e2:25:60:c7:f6:45:dc:47:33:ee:d3:1c:91:5f:
7e:a4:fa:c6:36:f0:1e:4e:60:ed:ca:6d:df:53:3d:8c:df:c4:
89:e7:e8:fe:4a:90:33:46:90:20:65:5b:cb:de:c8:95:00:7a:
44:f5:e4:dc:39:86:ff:a1:ef:76:ba:b4:6c:81:f2:c4:d3:c3:
d8:38:4d:10:bb:0e:3e:0d:c3:a4:07:9d:d3:7a:56:e4:ff:a4:
4d:e5:fa:cf:bf:4a:c8:06:62:16:86:f7:20:14:37:62:9d:bf:
29:ed:14:9f:5f:33:41:6b:eb:db:12:60:aa:ca:5f:6d:15:e7:
45:93:db:46:f7:b0:5c:fe:70:4c:20:ea:97:42:c9:87:ff:7d:
b1:33:96:dd:7e:a1:86:c7:b0:6f:b7:b4:17:61:1b:71:80:5c:
18:da:9a:04:10:25:2a:cd:b2:94:7e:42:a1:4e:8e:98:e4:b7:
1b:16:6a:fc:c0:5a:06:98:32:69:58:51:be:0f:62:c9:3a:79:
89:e1:84:e0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaAFysBMadqGzjhG4+lvtKw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwODE1MTQxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjExNTU0NzFkMjQwN2MzYzExMmY2NzRlOGVhOTE3Nzk1MTEzMjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRo6o9LdDtHOHIB8oZd0od+O8Uy+
IFKDrUKSuhSu2kyxUhE0/eAzjfGuxbk63xIamW15EDeAQYIaIJJ5KXhX7yhDJsF/
6UZUiHyRdUi6E0jogrfamOVSZuFgPJCjv8g5p6PmHqn2GNhXbPmZjRH/va7fACnk
0BtwzA5jYYDtTB006T0nNYhmn0+9eL5NVcYwNIVffxBMUcftF+yhXxYr60mZD8Kj
gX1JAQwkOon8oY9i6RLeG7e8ya4XbMdw8tbcbjH4yw8yPk3EsPBAaBlmiFqg56zM
1I1MLX6pP96nBDAosHfcBCxSw6x8cwkYBAt3rZ+q6OCwPrt+eufQmQmezwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDIRVUcdJAfDwRL2dOjqkXeVETKVMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvTWhGVlJ4MGtCOFBCRXZaMDZPcVJkNVVSTXBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQ8R
MA0GCSqGSIb3DQEBCwUAA4IBAQBVwKXZ7hJMimlXC8uWyEUG1j4piBgXW9UJGNDE
JRM84J5f9ZwXQLgS7sCF22rruDsQRDquvDReh65b4iVgx/ZF3Ecz7tMckV9+pPrG
NvAeTmDtym3fUz2M38SJ5+j+SpAzRpAgZVvL3siVAHpE9eTcOYb/oe92urRsgfLE
08PYOE0Quw4+DcOkB53Telbk/6RN5frPv0rIBmIWhvcgFDdinb8p7RSfXzNBa+vb
EmCqyl9tFedFk9tG97Bc/nBMIOqXQsmH/32xM5bdfqGGx7Bvt7QXYRtxgFwY2poE
ECUqzbKUfkKhTo6Y5LcbFmr8wFoGmDJpWFG+D2LJOnmJ4YTg
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:08:20 2026 by rpki-client