Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/RMhcDisaRzIq0_4cDfkL8QT-WU4.roa
File: RMhcDisaRzIq0_4cDfkL8QT-WU4.roa (raw, json)
Hash identifier: ERC98YFMBM5135f8A2iZkODlDE8s7iT35+gDcMuLfP4=
Subject key identifier: 44:C8:5C:0E:2B:1A:47:32:2A:D3:FE:1C:0D:F9:0B:F1:04:FE:59:4E
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A07366ED8CA0FC2F01C16297DBC8C28559
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/RMhcDisaRzIq0_4cDfkL8QT-WU4.roa
Signing time: Sat 05 Sep 2026 21:08:40 +0000
ROA not before: Sat 05 Sep 2026 21:08:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 187.13.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:73:66:ed:8c:a0:fc:2f:01:c1:62:97:db:c8:c2:85:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Sep 5 21:08:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44c85c0e2b1a47322ad3fe1c0df90bf104fe594e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1f:2d:fd:f6:37:48:6d:16:42:29:d8:b8:c0:
9a:30:f5:73:39:02:b9:bc:04:cd:a1:cb:5f:38:27:
a6:b9:ad:f0:ca:31:7d:dd:a2:ee:40:38:fd:4e:dc:
a4:0b:42:ef:92:a3:f8:28:87:16:87:fe:32:b5:12:
a5:d3:87:05:c0:4d:54:23:39:8c:57:72:75:49:25:
58:00:18:b2:4f:fe:8c:46:f1:74:5d:ff:9e:8f:37:
08:37:07:21:63:f7:96:46:cf:80:7d:d4:bc:6b:d3:
32:12:4a:9d:0f:0d:88:8a:3e:02:47:d3:2a:3c:e0:
af:5d:c9:41:c7:c5:ef:d1:b6:73:19:40:77:15:5a:
53:c6:f5:b0:69:be:0f:8e:83:16:8e:ec:81:29:ed:
2a:6a:a6:f5:b6:c4:1a:1a:bb:17:df:a9:8a:d5:1b:
c3:f0:51:f0:38:05:78:e6:28:80:7b:a7:b5:02:31:
c6:77:14:c5:c4:98:f4:2f:fb:0b:73:c2:53:ee:dd:
49:f5:38:5f:ec:ed:c3:7f:97:75:47:33:6b:cd:f0:
1b:2c:46:9f:e7:85:83:a6:a9:5c:f3:8b:b7:97:11:
57:84:25:e6:b8:22:c2:cb:c8:c9:a1:25:a8:5c:3c:
9c:19:d3:e7:f3:c8:3e:dc:22:2d:f3:90:e0:97:d3:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C8:5C:0E:2B:1A:47:32:2A:D3:FE:1C:0D:F9:0B:F1:04:FE:59:4E
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/RMhcDisaRzIq0_4cDfkL8QT-WU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.13.74.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:22:9e:f9:d5:9f:a9:4c:95:e3:ba:b3:d3:23:ae:4a:9b:a2:
99:cf:e3:01:3c:75:a7:e4:92:75:24:bf:0b:73:8a:22:7c:ba:
d1:72:f4:5e:a6:ae:d7:ee:6d:53:84:4c:43:57:04:a5:81:fc:
8a:25:de:12:a4:78:f7:52:f4:7a:27:4a:be:cc:6a:3d:45:e5:
91:e4:fe:7f:d0:35:a6:fa:d3:f4:f6:cd:39:43:0f:82:3f:72:
6f:f1:e7:6f:31:c6:a8:ba:41:9b:fd:44:25:e2:49:5c:94:4f:
d0:ec:5f:0c:36:9c:f4:e5:b7:92:c7:4e:b3:4c:6f:84:cd:c8:
28:f9:54:93:a5:c1:85:76:cd:d2:d0:d9:5e:05:a1:4b:d2:1f:
88:d2:e2:66:05:f1:c2:36:ff:08:cf:5b:96:08:05:90:be:8d:
57:60:33:0f:33:cb:47:ce:02:87:6a:41:59:c4:18:79:13:34:
1b:f6:4b:68:73:8e:e2:9f:f2:5f:38:b7:1d:16:3a:66:69:48:
99:4c:77:8c:57:2f:8d:05:48:51:f8:cc:54:4f:ba:21:e6:a2:
7e:5b:84:31:9e:74:eb:38:71:c6:90:16:8f:a7:42:f1:cb:f0:
1d:23:98:02:17:b8:f0:ff:08:22:ae:1b:e8:ee:b5:7c:e8:17:
45:96:ca:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:09:54 2026 by rpki-client