Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/mrnDtphbbgZwZf-CuWUesDzm0Js.roa
File: mrnDtphbbgZwZf-CuWUesDzm0Js.roa (raw, json)
Hash identifier: FQbSBlNPLvVWSO5m3FdDSPJ6IZIyXy0Skqvm1LkWdOc=
Subject key identifier: 9A:B9:C3:B6:98:5B:6E:06:70:65:FF:82:B9:65:1E:B0:3C:E6:D0:9B
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01A0AF28E1D516BB2BB04E8B60A05C91707C
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/mrnDtphbbgZwZf-CuWUesDzm0Js.roa
Signing time: Thu 17 Sep 2026 11:38:07 +0000
ROA not before: Thu 17 Sep 2026 11:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 94.231.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:28:e1:d5:16:bb:2b:b0:4e:8b:60:a0:5c:91:70:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Sep 17 11:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ab9c3b6985b6e067065ff82b9651eb03ce6d09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:10:3c:75:3e:a4:b6:70:c6:09:22:6e:eb:
0a:4d:68:1e:4e:26:82:80:56:84:d2:13:de:98:bb:
c1:bd:05:b4:1e:67:16:e4:36:ae:84:e4:43:9e:ed:
54:71:0c:35:22:4e:6b:65:a6:23:ac:87:50:5a:b3:
a4:78:2e:ce:d3:14:87:9d:5f:f6:34:e1:f7:44:f6:
de:98:b5:13:16:55:e3:d8:91:0b:af:d2:8d:a9:52:
3b:1c:3f:41:38:66:60:11:0a:51:45:4a:30:4e:22:
b2:e4:76:47:7b:5a:bc:f7:cb:ac:dd:f9:2c:43:df:
38:bf:47:09:cd:50:31:d8:50:ce:7d:b6:f8:a0:73:
ef:9c:28:c2:20:ed:48:e1:33:0d:5c:bb:8d:37:9e:
f5:d5:b4:84:1a:6c:51:03:32:52:30:24:cb:72:2e:
b0:80:6b:09:ef:fa:77:23:4f:00:40:6b:cf:6e:57:
ff:55:0f:86:1c:20:ee:83:0d:64:e0:21:9e:5f:13:
e5:4a:41:55:e4:0a:8c:8f:d7:fd:97:8b:e8:cb:f9:
0b:9a:df:8a:59:50:5c:da:06:77:a1:48:36:5f:98:
eb:1e:69:f2:af:38:e9:12:18:8e:2a:9d:1b:66:09:
1b:9b:d1:4a:ff:6e:8b:ac:87:f8:b4:0d:65:e6:e9:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B9:C3:B6:98:5B:6E:06:70:65:FF:82:B9:65:1E:B0:3C:E6:D0:9B
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/mrnDtphbbgZwZf-CuWUesDzm0Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.224.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a7:8b:94:23:7f:f6:ee:a5:1f:5f:47:ac:a7:37:fd:14:4a:
4a:df:0d:fb:09:09:6c:46:8a:f0:da:51:ec:49:9a:c6:32:89:
98:50:67:58:df:63:7c:3c:95:50:7f:82:2c:e2:0c:c0:73:5d:
19:cb:23:ab:12:56:5f:e7:d7:49:27:00:f5:04:64:3f:cc:91:
a9:58:6e:4f:25:78:f3:1b:f3:3a:fb:d1:71:3d:73:d7:8e:02:
7d:7b:ac:ea:e4:56:65:85:fa:ca:9d:ff:36:2e:e6:42:5f:eb:
e5:aa:f9:68:c7:e9:bd:31:19:10:f6:c3:7e:d8:08:3d:06:09:
25:d8:7a:21:c4:93:71:85:d0:c3:17:20:06:fe:54:d8:f4:36:
cb:93:9a:2a:16:61:ce:a3:76:25:2d:c5:0e:bd:32:ae:49:2b:
e9:d4:4c:30:17:47:6b:bf:99:d1:37:1a:0e:d3:b1:2a:88:aa:
53:b3:65:3c:0e:0d:33:f7:5f:f3:2b:71:b1:15:70:c6:55:71:
74:0d:7c:42:71:2b:7c:05:25:b7:77:80:28:a0:58:ad:06:73:
69:25:b6:fc:2f:cd:41:a8:61:aa:df:2e:fb:b4:ac:40:48:c0:
4e:be:fe:f5:56:fe:35:f0:e8:50:3b:13:50:a5:10:af:7b:31:
91:c3:a7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:44:54 2026 by rpki-client