Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/MQH_dvgH12yVjtMmNX5zhHNaJNM.roa
File: MQH_dvgH12yVjtMmNX5zhHNaJNM.roa (raw, json)
Hash identifier: gE1pNkt0EIY5xF4y1Y6FsY5jWZyScuncAkQ397qfFGg=
Subject key identifier: 31:01:FF:76:F8:07:D7:6C:95:8E:D3:26:35:7E:73:84:73:5A:24:D3
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 01A05E47D25DEDFF14CE5377725174D0A785
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/MQH_dvgH12yVjtMmNX5zhHNaJNM.roa
Signing time: Tue 01 Sep 2026 18:42:40 +0000
ROA not before: Tue 01 Sep 2026 18:42:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.255.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:47:d2:5d:ed:ff:14:ce:53:77:72:51:74:d0:a7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: Sep 1 18:42:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3101ff76f807d76c958ed326357e7384735a24d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:e3:3b:ab:ec:ce:5f:00:e0:b4:1b:7a:57:
3e:25:51:d8:74:5a:3a:6f:13:1d:b7:0b:62:7c:d9:
51:16:ec:36:a0:05:97:49:cf:d5:12:94:49:ca:1a:
be:e5:75:13:a2:1f:c4:f1:ce:7f:12:f9:a2:eb:5e:
75:4b:e5:81:b2:47:01:02:22:51:f9:c8:99:08:be:
20:0c:fb:8a:23:05:2c:7f:07:b3:79:1b:d8:f9:06:
f9:b4:ca:d1:a7:92:3c:19:bf:00:c7:65:bd:54:28:
fc:e7:3c:e6:11:4a:16:f3:e3:7a:2f:91:d6:65:88:
7b:be:f2:18:1b:04:bd:c4:e7:5f:87:91:d5:48:b6:
ff:91:05:54:ec:71:05:b9:56:88:1a:3f:1d:03:60:
5a:58:69:27:39:e4:47:94:6f:55:fe:c9:df:db:24:
a5:93:02:a6:4f:12:a1:ab:10:0e:87:d6:55:02:34:
64:f9:e9:54:43:53:bb:09:27:e2:d6:db:4f:ea:b7:
7a:64:16:4f:eb:96:29:04:78:4a:50:c5:73:6d:94:
78:79:e3:46:87:9e:c6:3b:3c:c1:87:79:50:fc:36:
6d:17:36:d3:89:e9:24:6f:41:15:d2:ce:be:21:0d:
8b:b4:13:e1:07:02:38:45:8c:fd:1c:68:89:89:4a:
4e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:01:FF:76:F8:07:D7:6C:95:8E:D3:26:35:7E:73:84:73:5A:24:D3
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/MQH_dvgH12yVjtMmNX5zhHNaJNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.56.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ef:c7:22:10:03:bf:4c:99:00:f6:21:e8:dc:f5:47:e9:c4:
a7:61:ee:9d:1d:67:6c:59:09:7b:c3:e0:09:32:bb:db:37:b9:
f8:28:af:05:ad:02:1d:7b:83:e1:04:27:1d:00:bf:72:25:de:
b4:92:08:f8:99:4e:fd:d2:fa:b0:9b:fb:9d:b9:ff:7d:d4:28:
0d:bb:63:3e:dd:71:87:50:47:8e:2b:f9:cc:82:ce:66:a9:e0:
af:85:ff:ca:af:18:a2:51:e4:78:ad:aa:db:38:27:5e:84:c1:
fc:74:47:e4:92:f3:c6:31:c8:d3:32:db:9f:bf:5f:e8:c8:0d:
bd:7f:e4:94:88:9a:94:98:04:b1:68:a8:1e:19:8e:bb:ff:49:
3d:b0:2c:42:d6:c9:41:77:25:a5:d0:0b:05:82:d5:ae:e8:d7:
9f:4b:5f:a9:bd:f7:fa:e1:60:f4:d2:88:11:d4:26:8b:4e:49:
3e:e4:42:e6:45:18:b5:75:4c:10:83:67:e0:03:90:60:cc:74:
09:97:df:f5:b1:9d:8c:07:02:af:43:da:cc:6f:5c:0e:5f:1e:
b7:ec:99:c6:2a:35:03:eb:39:0a:2f:5f:cb:05:c2:4a:c7:21:
64:48:28:4f:21:6a:d1:4f:29:99:71:f1:e0:77:6d:89:33:e8:
a6:0f:a4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:36:58 2026 by rpki-client