Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/AMQlobx9HParaeDL7T0v3tR4_mg.roa
File: AMQlobx9HParaeDL7T0v3tR4_mg.roa (raw, json)
Hash identifier: DvsmpIh8xvNvja7LOYbDo2D2JDk07c51OKvsQR0zZ1A=
Subject key identifier: 00:C4:25:A1:BC:7D:1C:F6:AB:69:E0:CB:ED:3D:2F:DE:D4:78:FE:68
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019D8609C472521F6056AD9B37CA37C598E8
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/AMQlobx9HParaeDL7T0v3tR4_mg.roa
Signing time: Mon 13 Apr 2026 08:51:20 +0000
ROA not before: Mon 13 Apr 2026 08:51:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206675
IP address blocks: 85.232.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:09:c4:72:52:1f:60:56:ad:9b:37:ca:37:c5:98:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Apr 13 08:51:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00c425a1bc7d1cf6ab69e0cbed3d2fded478fe68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:f5:86:fc:9c:86:ba:0e:99:82:70:07:0b:
77:1c:c3:31:6d:72:22:2d:21:76:94:eb:9f:06:50:
0d:c5:a5:81:d2:09:7f:13:34:f1:13:4e:09:13:28:
57:37:d3:2b:cd:34:02:b2:b9:ec:06:a2:cc:ac:46:
77:a5:c2:1c:a9:91:7b:88:9b:12:98:e5:9d:78:e9:
f5:47:1e:41:20:af:41:23:31:c9:09:a6:af:05:3b:
8e:e6:cd:92:3d:01:25:21:08:bb:09:21:c9:73:86:
56:9c:6a:e8:ed:c3:40:8f:f2:eb:23:39:52:88:38:
ff:c4:9c:40:9c:15:c7:c8:02:7e:80:78:31:77:80:
0e:06:39:5f:53:72:62:1a:51:2b:a1:4e:a8:6c:f6:
53:04:2b:28:53:9e:36:86:97:92:d6:e9:f3:aa:a8:
a0:3b:32:a0:a8:4f:f4:81:28:50:33:00:26:24:e5:
f4:13:c6:6e:8e:2e:0e:9d:0a:8e:c5:ca:15:70:ab:
05:4d:9a:3b:d7:84:72:b0:bb:2d:0f:02:97:a4:a9:
38:3d:87:fb:2d:fb:25:2a:7d:76:41:bc:e6:cd:20:
69:77:05:3f:30:bb:f0:5c:5c:e5:68:a4:bb:aa:c0:
42:70:f5:1c:8c:ba:fd:f2:7f:67:35:07:fa:64:7a:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C4:25:A1:BC:7D:1C:F6:AB:69:E0:CB:ED:3D:2F:DE:D4:78:FE:68
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/AMQlobx9HParaeDL7T0v3tR4_mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.185.0/24
Signature Algorithm: sha256WithRSAEncryption
88:d4:a0:d3:34:45:2b:50:26:d6:3a:50:05:eb:2d:17:51:25:
7e:01:02:ae:8d:5e:13:5a:48:69:06:4b:fb:37:c4:fa:bb:33:
66:43:50:90:24:f0:16:b9:80:d4:fe:c8:a3:15:60:84:c9:5e:
9c:e5:6a:db:53:61:b9:c3:29:49:37:b2:57:3b:b1:7d:72:da:
65:7c:eb:88:d5:3a:c3:41:33:a6:48:43:3d:93:72:83:8c:7e:
eb:4d:a8:9b:4b:a8:9d:ba:e1:32:15:32:d5:17:8c:c9:80:ad:
7e:b4:b7:a8:e4:65:01:5f:cd:34:5b:75:1d:f0:fc:d6:5c:40:
15:cc:10:a3:ae:60:14:a8:6e:06:cf:87:b6:e0:46:1e:aa:0d:
07:35:91:5a:d5:d0:33:22:0d:f4:94:bb:a0:aa:ba:26:5f:0c:
95:c3:c8:23:70:0c:83:f0:e2:db:40:0d:0e:93:e8:c9:83:8d:
e4:47:66:62:37:a9:9f:31:75:0b:df:37:6e:ae:94:af:fc:0e:
26:bd:f1:23:6e:a2:2d:17:f8:b8:3c:ca:b3:91:84:d9:8e:da:
a0:0a:6f:5a:2c:b5:20:a7:59:b5:c8:12:eb:b7:8e:fe:07:b7:
5a:40:56:a0:11:24:54:18:2f:c3:86:61:62:41:b9:1c:ca:42:
29:d9:0f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:16 2026 by rpki-client