Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/mKeMsR2QrnSBHWDrAB633iC9wkU.roa
File: mKeMsR2QrnSBHWDrAB633iC9wkU.roa (raw, json)
Hash identifier: foj5YbHBhBGk2YpBJaz/TDOqgfzkdxrbsm0c98jIv+U=
Subject key identifier: 98:A7:8C:B1:1D:90:AE:74:81:1D:60:EB:00:1E:B7:DE:20:BD:C2:45
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 019E7265FD20CBBD6729DE78C81F531AF097
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/mKeMsR2QrnSBHWDrAB633iC9wkU.roa
Signing time: Fri 29 May 2026 06:22:27 +0000
ROA not before: Fri 29 May 2026 06:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.251.80.0/23 maxlen: 24
185.251.82.0/23 maxlen: 24
194.4.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:72:65:fd:20:cb:bd:67:29:de:78:c8:1f:53:1a:f0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: May 29 06:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98a78cb11d90ae74811d60eb001eb7de20bdc245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:fb:86:3c:b6:b8:46:cb:9d:7b:06:56:bf:
ca:41:69:58:e4:72:6c:a7:04:8e:9f:99:66:28:9e:
47:c4:a9:01:50:2c:d8:f3:cf:22:85:89:dc:9d:41:
25:4b:6b:20:17:30:48:8c:92:5c:7e:0e:fd:aa:cf:
2b:8a:6e:2a:30:c2:4f:91:18:77:7c:08:27:85:b7:
cf:78:c4:55:4d:a1:4b:63:de:85:d7:ac:f7:7a:90:
4e:44:76:22:14:12:34:3f:70:90:53:74:3c:6e:f6:
0f:0c:af:a6:a3:40:96:6c:e0:e1:e3:af:e8:c6:42:
9f:6c:93:7a:94:aa:28:6d:a2:59:34:be:0f:b2:b8:
f5:a0:34:96:f9:d5:b7:df:a2:51:6d:28:5f:9d:c1:
e4:4f:09:06:3e:f7:9b:5b:36:72:0b:82:1b:5c:e2:
05:0d:bb:69:c9:cf:d9:09:f9:6e:70:f7:61:24:63:
9f:e6:39:e4:a6:c6:df:07:73:47:31:77:9b:c8:4e:
7b:f3:4e:6a:73:67:66:88:c2:4e:e0:6b:a2:ed:35:
9f:ec:ee:95:81:b3:3a:a2:1b:a0:c5:be:d7:2e:9e:
f9:6c:3b:3f:f4:0f:35:3a:a9:d5:00:a7:0e:44:eb:
a6:3a:ed:af:91:09:c0:ad:a5:0b:9f:91:56:67:6a:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A7:8C:B1:1D:90:AE:74:81:1D:60:EB:00:1E:B7:DE:20:BD:C2:45
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/mKeMsR2QrnSBHWDrAB633iC9wkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.80.0/22
194.4.55.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ac:c1:88:21:81:33:fb:14:d8:c0:2c:7c:57:9d:95:62:b7:
c3:56:6a:bc:97:60:6f:09:5e:5e:4e:00:93:17:f4:a0:81:35:
fc:62:a7:a5:31:12:36:02:4a:23:cb:7a:08:43:c6:41:bc:4e:
ba:51:e4:49:19:ce:af:1a:1f:4d:91:a2:d4:82:74:e0:ae:42:
63:30:57:bc:d8:23:d7:02:db:9e:73:47:09:8e:e9:41:ab:34:
3c:33:3c:61:4d:86:5c:f8:96:56:b7:44:61:fd:00:12:2e:27:
fa:06:a0:73:66:61:4f:ec:34:71:30:88:1a:29:7e:fc:60:82:
07:c4:1a:99:74:c0:9b:ed:dc:d1:96:82:d9:22:43:75:15:bb:
5d:70:bf:a2:b8:b2:b8:8f:5d:80:e8:5f:76:a0:ce:00:9b:85:
6c:73:aa:73:11:f9:6c:6c:e7:8c:06:92:49:c1:24:2c:5d:2c:
fb:5a:dc:cf:0c:ec:74:54:af:47:bf:cd:9d:ca:87:7b:10:b1:
36:e2:fa:2f:1e:fc:14:3f:6d:0e:98:ba:58:9f:5e:25:8b:ee:
12:6c:2c:0c:ac:23:75:8b:0a:b8:a7:93:44:57:95:3c:84:4a:
37:54:b1:9e:12:e7:e8:6c:f7:0f:b5:c7:d7:eb:25:c9:4b:ec:
fd:11:e6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:14 2026 by rpki-client