Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/m_nKiCuVzTi2TKccGiONJSKEB70.roa
File: m_nKiCuVzTi2TKccGiONJSKEB70.roa (raw, json)
Hash identifier: S3r/rA3wAxsL4UrMnk+l9Ka3WgxOB/UdzMyaqt2gqiY=
Subject key identifier: 9B:F9:CA:88:2B:95:CD:38:B6:4C:A7:1C:1A:23:8D:25:22:84:07:BD
Certificate issuer: /CN=5382c03702f7d6dd6cef666ce2053153c9afe94b
Certificate serial: 019E4B4D977FCE76A0CF7AB0CB0B8D743B7D
Authority key identifier: 53:82:C0:37:02:F7:D6:DD:6C:EF:66:6C:E2:05:31:53:C9:AF:E9:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/m_nKiCuVzTi2TKccGiONJSKEB70.roa
Signing time: Thu 21 May 2026 16:10:36 +0000
ROA not before: Thu 21 May 2026 16:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200808
IP address blocks: 217.180.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:4d:97:7f:ce:76:a0:cf:7a:b0:cb:0b:8d:74:3b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5382c03702f7d6dd6cef666ce2053153c9afe94b
Validity
Not Before: May 21 16:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bf9ca882b95cd38b64ca71c1a238d25228407bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:e4:15:60:d0:15:1a:9b:73:63:3c:c0:33:
84:cf:19:c2:41:57:9c:2f:02:f3:5c:12:37:fa:94:
78:a8:2f:e7:d8:56:ed:c1:4b:05:80:1e:da:0f:11:
f0:38:24:59:1c:d2:4f:11:fc:12:66:5f:9b:78:54:
a5:bd:24:18:de:43:aa:99:17:d1:4e:a3:a8:d3:8f:
86:51:8f:1a:f7:48:55:47:e6:bb:15:c7:b8:d7:de:
2d:0e:d9:c7:5d:88:43:6c:b0:b4:2c:77:5c:c1:e9:
dd:e4:ab:f6:c8:f7:db:1f:89:7b:57:6c:9d:6d:35:
c9:da:f6:57:8d:20:f2:76:76:84:af:df:9b:af:fb:
55:d6:d2:1e:af:20:3b:2d:53:97:aa:c2:9b:6f:c6:
82:3f:ad:08:36:a5:c0:42:ab:cf:7e:bc:a5:28:af:
89:22:ad:6e:72:fb:9f:bd:bb:e9:9c:95:29:01:3d:
90:b5:9d:59:af:29:c9:2b:98:8b:b2:9f:9a:a8:dc:
00:b4:d8:d4:20:79:b4:b8:cb:b3:99:10:a3:2d:a9:
91:d4:fd:f8:a4:3f:87:81:d2:19:b3:4d:94:47:b3:
c8:c3:5d:bf:f1:6e:f1:8f:a7:40:80:d3:57:21:fc:
e2:0e:06:44:3b:78:d3:24:47:46:15:b1:73:e3:fb:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F9:CA:88:2B:95:CD:38:B6:4C:A7:1C:1A:23:8D:25:22:84:07:BD
X509v3 Authority Key Identifier:
keyid:53:82:C0:37:02:F7:D6:DD:6C:EF:66:6C:E2:05:31:53:C9:AF:E9:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/m_nKiCuVzTi2TKccGiONJSKEB70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.54.0/24
Signature Algorithm: sha256WithRSAEncryption
87:02:90:ae:56:57:f9:58:17:a8:f0:91:00:d4:59:20:23:fc:
79:08:34:e0:b0:67:00:cd:2d:58:5d:fe:b7:20:30:7e:34:f6:
7f:03:61:48:4d:c3:b6:94:2f:ed:cc:c8:59:87:36:32:97:0f:
06:79:9a:36:6d:29:fc:73:87:c1:78:f8:cd:c5:c2:4f:9b:16:
17:ec:ed:6a:a3:6b:53:2b:0a:a0:b2:4a:88:cf:5e:81:de:d0:
c1:5a:3e:6b:53:1b:2e:47:56:c3:40:cb:6a:7b:59:1d:5c:25:
f0:54:ec:a7:15:c0:a3:a3:58:2d:a2:8b:48:78:f6:33:d9:a6:
66:f4:d0:f0:b4:a5:77:ea:d4:d6:13:fb:a1:6e:7b:d0:55:4b:
30:c3:e6:4a:b8:9f:3f:af:52:97:2f:92:70:9f:29:2b:c9:3f:
eb:da:2d:1c:03:de:55:f0:f7:21:a7:21:03:8c:13:3f:3b:50:
6c:73:10:f0:43:32:a4:b6:98:f5:f4:2e:34:cd:e7:bf:04:f8:
8f:ba:b0:28:0d:a2:00:80:4a:f2:04:62:c6:57:44:4d:f3:18:
5f:64:7d:1d:b7:78:79:ba:96:eb:1f:16:b9:0a:ad:56:7e:6d:
fd:c8:0f:03:ee:d5:3e:41:51:ec:56:f4:ec:b3:b5:c6:82:61:
cb:f2:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 12:41:56 2026 by rpki-client