Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/MhfX9C4ZbXwdis7NznIwj7yi0qE.roa
File: MhfX9C4ZbXwdis7NznIwj7yi0qE.roa (raw, json)
Hash identifier: 2dmQ/os7cHVw6FEvIc2vKQKDv6iA9qqqEBGNjaEdMK4=
Subject key identifier: 32:17:D7:F4:2E:19:6D:7C:1D:8A:CE:CD:CE:72:30:8F:BC:A2:D2:A1
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019EB1971F61F9A3DCBBB97986526AE13653
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/MhfX9C4ZbXwdis7NznIwj7yi0qE.roa
Signing time: Wed 10 Jun 2026 12:52:11 +0000
ROA not before: Wed 10 Jun 2026 12:52:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 144.56.35.0/24 maxlen: 24
144.56.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:97:1f:61:f9:a3:dc:bb:b9:79:86:52:6a:e1:36:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jun 10 12:52:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3217d7f42e196d7c1d8acecdce72308fbca2d2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:a7:b2:a5:95:a3:c2:e8:4e:9d:62:4d:fb:
0a:c5:28:50:a3:f8:49:b4:09:d3:c3:1f:32:1a:74:
e9:04:b5:f1:dd:1c:5f:19:35:f2:2c:8e:6f:69:bc:
e9:8c:44:e8:0f:52:88:40:b9:9a:ef:6a:46:99:d6:
ad:27:3e:6c:ec:76:8f:13:bf:66:d8:3a:35:82:d5:
68:fc:5b:34:e9:54:3c:ac:dc:2a:1d:eb:8b:7b:79:
8e:a3:eb:32:35:2d:cc:55:fd:a6:6b:12:1b:21:fc:
c4:71:09:62:22:ae:7d:b1:2a:4a:bd:6c:d1:02:c9:
45:a5:dc:34:09:fc:76:bd:49:db:10:de:fc:88:d2:
e7:05:73:c2:45:1d:35:d0:d2:bc:94:bf:46:81:16:
33:d4:6a:56:59:c5:f5:77:d2:8e:98:3a:4f:9b:e8:
48:81:3f:4f:a7:7b:64:65:b1:b0:0e:3f:a8:11:4a:
9b:33:ad:fd:bd:e5:b6:2b:6c:19:b0:ea:0e:b4:d1:
69:fc:51:ec:43:e3:99:a9:2b:35:24:38:9c:15:17:
4a:ba:58:95:7e:0f:9e:c0:5a:49:c7:48:86:20:94:
9a:9e:4b:3f:76:6a:d3:c2:d6:21:57:a9:77:ab:e3:
8f:d1:97:98:fd:f9:8e:65:7b:1c:ee:8f:5a:51:cb:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:D7:F4:2E:19:6D:7C:1D:8A:CE:CD:CE:72:30:8F:BC:A2:D2:A1
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/MhfX9C4ZbXwdis7NznIwj7yi0qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.35.0/24
144.56.114.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f4:1b:f8:03:d2:32:30:c3:34:c4:2a:a7:7c:02:ed:1b:d3:
b1:5f:40:cd:c1:21:4a:e8:1b:17:53:0c:fa:58:34:fd:22:b9:
f2:b4:a6:6f:70:d3:86:41:8d:f4:74:e5:de:35:3c:29:24:e9:
49:ec:bf:a8:20:66:b2:1b:d3:1d:66:b0:08:47:83:cc:a6:46:
f2:a4:ec:38:52:31:01:a9:f1:91:4b:29:17:72:26:84:01:c0:
23:04:ab:45:bf:48:aa:58:b3:4c:51:a7:c6:fa:05:6b:41:0c:
c7:33:0d:bc:17:ea:2a:0b:a7:dd:52:09:75:d1:c9:14:29:ec:
b3:53:14:57:50:b7:8d:48:e1:a9:ae:fe:ea:a8:de:e3:b8:b0:
54:39:ad:fc:93:1d:a5:00:47:a1:1a:8b:54:67:0f:17:f1:d8:
66:de:ea:77:45:bf:51:78:a9:07:b1:8c:d1:60:6f:4b:15:f0:
1f:88:2a:92:fd:a3:ca:26:f9:39:c3:e0:61:84:f3:0d:1d:e1:
25:0f:3f:09:1b:45:9a:08:10:8d:71:0b:be:b5:98:5d:60:4c:
cf:f9:12:bb:b9:c1:15:1d:15:b9:5d:e2:b6:f5:16:d1:dd:a6:
f8:6f:ba:e9:b9:df:03:f8:7f:41:d0:f5:63:64:e7:e7:6d:a5:
b2:af:19:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:52:55 2026 by rpki-client