Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/mdbl8KjN_pI2P-96efcrIi9qHxw.roa
File: mdbl8KjN_pI2P-96efcrIi9qHxw.roa (raw, json)
Hash identifier: 4vgyCEYY3RfdpxSNxZ4oJoblwT+Dwn9gfMa1VoZI1dc=
Subject key identifier: 99:D6:E5:F0:A8:CD:FE:92:36:3F:EF:7A:79:F7:2B:22:2F:6A:1F:1C
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019E4B2CBBF512EC4BD8E088A2E513FB9495
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/mdbl8KjN_pI2P-96efcrIi9qHxw.roa
Signing time: Thu 21 May 2026 15:34:43 +0000
ROA not before: Thu 21 May 2026 15:34:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213402
IP address blocks: 46.32.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:2c:bb:f5:12:ec:4b:d8:e0:88:a2:e5:13:fb:94:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: May 21 15:34:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99d6e5f0a8cdfe92363fef7a79f72b222f6a1f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:c8:11:6e:e5:8f:74:7d:d4:cd:14:02:95:
81:24:a4:97:e1:fd:28:84:e0:1a:a6:4d:b8:41:a3:
9c:2e:dc:ef:1c:34:f8:8f:74:fd:8a:05:aa:a7:82:
7b:9a:ac:07:60:4e:a4:2b:5d:10:2c:ec:63:5a:ac:
ee:d1:f8:7c:68:ee:1b:7d:78:27:3c:6e:92:9d:f9:
9d:d4:e1:80:67:2c:26:7d:3e:46:36:b8:60:4d:7a:
7b:81:dc:6d:13:6f:10:a7:54:aa:d5:30:ae:fa:b8:
a2:20:d5:fd:7e:2e:c4:46:8a:f6:08:5c:a1:d6:b6:
eb:d2:64:59:59:e4:3a:eb:d6:89:b3:96:78:65:a3:
d4:04:64:b0:0b:2a:c4:8d:5f:0c:2f:0a:86:c2:7f:
b0:54:2d:cd:33:f7:69:61:8a:6e:17:1a:0c:94:27:
5f:d3:9e:ee:b3:b2:0b:81:2d:ff:ad:3a:34:e9:1b:
af:26:36:c1:99:78:ba:d1:50:ea:8b:42:93:03:2b:
d9:73:98:7a:53:91:01:11:2f:ed:3f:a0:e7:f8:36:
15:77:c1:69:e9:84:e2:97:23:c4:99:46:f8:71:82:
37:a0:91:22:ab:6e:42:18:d4:4e:af:06:50:63:37:
03:5c:48:44:41:2a:6a:06:20:7b:87:b5:a2:1a:5a:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D6:E5:F0:A8:CD:FE:92:36:3F:EF:7A:79:F7:2B:22:2F:6A:1F:1C
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/mdbl8KjN_pI2P-96efcrIi9qHxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.172.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ec:27:89:ab:8c:3a:65:77:97:7c:de:3b:9c:3c:be:3d:91:
a8:a2:ef:bc:63:a8:98:83:6c:6a:cc:fa:6a:75:a8:64:f7:ba:
64:10:92:09:41:cc:04:a3:c5:13:7d:d0:bd:b2:96:c7:e4:c5:
e4:04:b8:66:e9:96:77:93:8b:a2:51:83:c7:d7:f4:14:9c:df:
23:be:d9:bd:a4:03:35:81:ce:03:fa:bb:a5:b2:ca:77:6b:ec:
94:6f:67:9b:6e:85:fb:f7:37:34:58:6f:a4:10:1f:13:f5:aa:
64:bb:ab:83:b1:e7:ac:2e:2f:e0:b8:58:23:37:5d:79:f9:c6:
18:94:29:85:6d:e6:5f:b8:85:a5:a6:08:0d:f0:64:e7:32:9c:
cb:6f:9c:ad:a3:4b:7a:dc:02:fd:a5:45:7f:ef:f4:5b:e3:5f:
cd:95:6b:52:e2:7c:4c:81:12:9b:54:0f:2f:62:06:6a:2a:d7:
3f:92:0a:6b:cb:65:66:a7:1b:3a:b3:bb:e9:ab:cf:e4:af:76:
ed:2e:52:3f:79:03:6f:97:7f:31:77:38:fd:ad:52:ba:35:02:
1b:49:c9:a6:30:c1:5f:08:e4:a5:05:45:0f:95:c1:c2:61:01:
ae:88:dc:65:aa:04:c8:a1:77:77:99:bc:b1:e3:27:62:13:b6:
5b:83:ab:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:39 2026 by rpki-client