Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/mIJkdI_D_OLqojcSa_oOxsMYHXI.roa
File: mIJkdI_D_OLqojcSa_oOxsMYHXI.roa (raw, json)
Hash identifier: /rw37thuWBvovhA/vpu0eqLvxv8XNv0W36vkyYoUMlU=
Subject key identifier: 98:82:64:74:8F:C3:FC:E2:EA:A2:37:12:6B:FA:0E:C6:C3:18:1D:72
Certificate issuer: /CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Certificate serial: 019B7DC9F9FFFCF1388296340FF0BF95BE2C
Authority key identifier: 20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/mIJkdI_D_OLqojcSa_oOxsMYHXI.roa
Signing time: Fri 02 Jan 2026 08:19:07 +0000
ROA not before: Fri 02 Jan 2026 08:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61365
IP address blocks: 185.184.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:f9:ff:fc:f1:38:82:96:34:0f:f0:bf:95:be:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Validity
Not Before: Jan 2 08:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=988264748fc3fce2eaa237126bfa0ec6c3181d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:f3:92:2b:f6:ae:27:ae:65:a6:f8:2f:9a:
93:72:4c:21:76:35:3b:71:e7:43:72:ef:a1:d8:93:
c7:b1:41:67:c1:08:60:b9:be:67:52:36:33:fa:f0:
b2:8a:02:82:5c:2a:b2:cb:7d:9b:de:d4:48:b5:ec:
d4:de:9f:99:70:c8:db:bc:3d:19:98:fb:92:02:7e:
1f:4a:6f:e1:5a:61:52:77:82:8e:ea:1b:bb:9f:58:
c4:05:9c:35:dd:2d:09:15:85:e9:d3:37:5d:a3:31:
01:e8:6a:bb:f5:cd:8d:81:9b:e5:d5:8b:d5:9f:f6:
b9:0e:7a:c0:c2:a5:9c:a0:af:71:91:ce:9d:13:bd:
5e:c6:bb:00:38:ec:09:d1:26:b2:0e:0d:4e:e0:16:
85:7b:ab:c6:19:b2:55:ca:39:f5:37:16:07:15:94:
dd:2e:82:2c:12:b9:cb:67:7b:34:21:9c:b2:ac:2f:
05:65:c4:21:f5:7c:0f:ec:35:bc:cd:7e:05:c6:b4:
96:15:ff:52:d8:20:c3:b4:fb:0f:af:64:bd:89:0a:
07:aa:8d:18:b8:39:ba:9c:65:bf:43:e0:4a:85:fd:
5b:1a:5a:0f:ba:7d:2c:37:d5:2b:d2:96:1d:1c:9f:
d4:0b:69:2b:26:51:f3:b4:7f:e1:48:ed:0d:e1:fa:
cf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:82:64:74:8F:C3:FC:E2:EA:A2:37:12:6B:FA:0E:C6:C3:18:1D:72
X509v3 Authority Key Identifier:
keyid:20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/mIJkdI_D_OLqojcSa_oOxsMYHXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.16.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:1e:3d:7c:42:14:df:b3:e1:19:76:d3:a9:b5:80:bd:fb:30:
9a:ef:ab:8b:fd:b1:9e:d7:a2:e4:57:7c:57:e7:3b:b9:a9:c7:
ee:ec:ca:37:db:74:86:7d:06:12:ca:a0:4a:b8:37:f2:7c:fd:
9a:45:c2:3b:69:8f:8a:10:dc:6f:67:40:0c:cc:71:ef:d5:91:
b7:25:c9:12:9a:7c:ac:95:a1:31:fa:2a:4a:d9:dc:96:44:a7:
dc:1d:66:70:02:5a:8a:17:4b:64:8e:d1:80:f5:72:54:41:40:
60:f0:06:9d:ac:b3:f9:50:1d:cc:20:90:db:4d:71:12:78:99:
39:ce:90:28:3d:02:66:e1:a3:69:dc:7c:d2:4c:01:e5:9a:ca:
c8:40:26:81:70:8e:57:f9:e3:64:a3:f4:f9:e8:48:44:dc:55:
d8:c4:f6:f0:88:cf:c7:95:74:ae:ad:dd:a8:f8:0c:e2:3c:10:
16:12:c6:25:0b:88:78:bd:ac:33:6f:0f:4a:ad:e9:6e:21:17:
52:54:f0:2a:98:9b:24:94:00:c9:6a:04:62:f2:bc:f0:92:f8:
71:b3:ad:1e:c1:e0:ff:6b:b6:7e:e2:c1:c7:a0:d0:69:76:fd:
22:4e:f5:84:c0:3c:e7:fa:5c:c4:de:ec:15:ac:dd:1f:e6:3e:
60:9c:a4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:04:58 2026 by rpki-client