Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/mJk_Xpc6FqE9QvqMWlon7ehl3VM.roa
File: mJk_Xpc6FqE9QvqMWlon7ehl3VM.roa (raw, json)
Hash identifier: 0ia0i5pVqvHZ2g2yYPBTiYuEPqPqvjr/6kjSV6KWwjg=
Subject key identifier: 98:99:3F:5E:97:3A:16:A1:3D:42:FA:8C:5A:5A:27:ED:E8:65:DD:53
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A0AF2623CCE1584C075B2F968D955FC010
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/mJk_Xpc6FqE9QvqMWlon7ehl3VM.roa
Signing time: Thu 17 Sep 2026 11:35:07 +0000
ROA not before: Thu 17 Sep 2026 11:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198926
IP address blocks: 94.184.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:26:23:cc:e1:58:4c:07:5b:2f:96:8d:95:5f:c0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 17 11:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98993f5e973a16a13d42fa8c5a5a27ede865dd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:e0:85:78:7e:b8:17:9a:d6:10:63:58:d7:
aa:6f:fa:86:d2:5d:8b:27:a4:6b:80:b6:25:25:f6:
09:cd:9a:e0:d5:60:51:48:64:2d:bd:c3:d5:aa:14:
76:ca:66:c2:2e:e2:4e:d7:8d:39:d4:81:66:99:e4:
84:8b:77:c1:6b:a3:2f:bd:af:3d:06:62:86:47:bf:
77:99:43:6f:09:33:29:03:dc:b2:43:1f:2a:67:8c:
e5:bf:3d:25:df:05:bd:16:f2:c2:ed:c4:51:9d:a3:
32:eb:6c:91:e1:f6:dc:24:f5:b6:e0:25:a7:fd:c9:
9b:33:5b:ce:00:9f:89:cd:75:d3:9b:ba:b3:1b:20:
27:23:eb:d2:46:83:8b:57:0c:d2:8c:5a:ba:56:c4:
88:fa:bb:14:2f:28:f3:4a:25:bd:ba:dc:70:ee:92:
d5:16:0e:74:90:70:aa:48:37:3e:82:f7:59:bc:e8:
eb:fd:39:38:27:dc:f8:ec:c5:68:4b:c7:e3:7d:7d:
79:2b:69:6d:e2:71:0e:f0:64:a7:79:62:d1:f8:d4:
4f:8f:dd:ff:cd:bb:68:a5:a7:21:49:fd:8b:14:7f:
08:3b:da:d9:8b:d2:de:ee:5e:b7:c4:cc:54:ed:d0:
df:1e:bb:c0:eb:89:95:f6:a2:b8:a5:ed:d8:a9:6c:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:99:3F:5E:97:3A:16:A1:3D:42:FA:8C:5A:5A:27:ED:E8:65:DD:53
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/mJk_Xpc6FqE9QvqMWlon7ehl3VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.39.0/24
Signature Algorithm: sha256WithRSAEncryption
09:58:de:e2:96:eb:e6:f5:85:7b:96:67:1f:35:8f:98:64:c0:
27:66:a1:ea:0f:ec:de:c9:b8:a8:55:85:3c:76:b8:83:9a:5e:
6e:ba:6c:a5:09:9e:58:79:2b:54:67:9b:84:d3:5b:86:aa:41:
2c:18:64:1d:d0:f1:bc:c3:00:70:a7:2a:46:00:f9:4a:8b:bf:
f0:f0:6b:ed:97:ac:1a:70:93:c0:93:09:0e:42:3b:5c:00:fa:
ef:0c:ac:fe:9f:17:0e:58:9b:16:90:7e:d3:e9:28:5d:b4:52:
d1:96:c8:b3:8a:d2:8e:6a:2b:3c:63:57:75:73:0c:84:ba:ff:
3a:a8:18:e7:d2:b9:fd:67:1b:5f:92:e7:26:16:5e:50:8e:b9:
84:5e:87:96:0e:90:20:9f:5e:94:53:8e:06:62:9f:72:da:46:
ce:69:4b:3e:a4:9f:d8:be:69:24:cf:a2:06:6b:f0:5a:f7:d5:
7f:68:c8:8a:90:39:32:7b:f2:2a:2e:c2:4e:d1:8e:de:9c:dc:
36:7e:72:31:03:c0:df:8e:d2:91:02:b0:73:91:10:f0:fb:30:
46:84:44:1d:bd:3e:e6:98:95:b0:ce:81:e4:2b:d3:23:33:b3:
e6:19:76:f2:b1:e1:83:d1:60:cb:c6:af:59:cc:88:da:b0:95:
c6:bf:ca:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:18:40 2026 by rpki-client