Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mAAl2FyJbusU4CEHbwrIF6x9WuU.roa
File: mAAl2FyJbusU4CEHbwrIF6x9WuU.roa (raw, json)
Hash identifier: mKK+lgRgBKDWg4QD3I4ujm04QNhKVN/a8It4N7j084U=
Subject key identifier: 98:00:25:D8:5C:89:6E:EB:14:E0:21:07:6F:0A:C8:17:AC:7D:5A:E5
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019EB0CF8AF7AD5CAA26BEEEC447231BB2A0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mAAl2FyJbusU4CEHbwrIF6x9WuU.roa
Signing time: Wed 10 Jun 2026 09:14:11 +0000
ROA not before: Wed 10 Jun 2026 09:14:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 45.67.99.0/24 maxlen: 24
45.91.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:cf:8a:f7:ad:5c:aa:26:be:ee:c4:47:23:1b:b2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 10 09:14:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=980025d85c896eeb14e021076f0ac817ac7d5ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:e9:e5:a4:e2:e9:38:ff:1e:0c:a3:fc:03:
b8:a6:a9:13:93:1c:dc:b5:08:2f:db:39:75:8b:48:
f3:78:2a:05:c1:0e:e3:dc:86:6d:ba:f9:f2:19:2d:
2e:30:6b:0e:87:ec:9f:53:91:53:45:4a:78:a6:ae:
6a:84:b0:a1:73:f8:ff:8b:6a:ea:ed:7c:19:cf:44:
29:25:c4:db:14:3f:cd:bf:cd:ef:52:b0:95:6f:49:
54:05:4f:ea:6f:41:d8:42:d7:5c:99:ed:d4:5e:d5:
d2:0a:c7:68:e3:c1:76:5f:3e:a0:09:9e:74:54:0c:
de:d0:26:ea:9f:21:03:33:ff:46:87:6a:45:9f:b3:
1e:5f:cc:89:f0:12:7c:69:fa:38:cc:e1:e5:cc:55:
83:cc:fb:2d:42:52:25:1d:b9:1b:48:87:b7:89:3d:
c3:a8:a4:75:ad:94:67:52:20:87:7b:3f:8c:03:d6:
7b:9c:60:25:5c:c8:cb:ff:fa:e3:bd:8e:99:1f:05:
7f:7c:84:cb:af:77:ad:f0:92:94:29:b5:42:8f:45:
6f:70:f7:78:a4:5c:2b:4c:0b:a7:36:b6:5c:a8:f6:
a9:de:55:82:ac:b2:ef:33:52:75:d8:17:f8:c8:c0:
d1:9d:90:0a:94:c3:00:1d:99:25:a4:b0:13:50:9c:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:00:25:D8:5C:89:6E:EB:14:E0:21:07:6F:0A:C8:17:AC:7D:5A:E5
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/mAAl2FyJbusU4CEHbwrIF6x9WuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.99.0/24
45.91.50.0/24
Signature Algorithm: sha256WithRSAEncryption
94:34:0d:3f:9d:b0:f1:63:22:8a:bb:10:d6:f8:f0:35:05:a7:
0f:8c:32:ee:2d:3a:ad:6d:a4:e9:cd:7c:c8:cf:98:94:03:7d:
a6:26:f9:f8:5d:73:2a:38:15:05:b5:0e:10:dd:43:a1:e1:9e:
d1:17:7a:a2:e4:e5:e5:d7:45:fc:13:22:29:f0:58:3c:2a:f3:
c7:7c:01:cf:f6:53:c2:50:89:3f:70:c6:ce:3e:3f:2b:c0:62:
9b:31:4a:4c:b1:30:d2:b3:14:5f:d9:2e:74:bb:ca:4b:7f:2b:
dc:a8:be:e2:06:b3:3c:8b:8c:61:af:56:08:0a:b6:5d:c3:49:
ac:bc:74:44:0f:9c:8a:3c:93:92:08:31:5c:6e:47:50:fb:3a:
f1:04:48:5c:1b:f5:d3:06:6c:d8:2d:50:fd:73:34:35:93:d1:
c3:29:0d:9d:4f:c4:5c:55:3f:16:74:0e:56:73:ac:af:34:e9:
b7:8e:b1:97:5d:8a:b4:25:38:ff:1e:5d:b7:df:18:92:05:df:
bf:09:37:4b:42:21:32:cf:28:86:ba:aa:ec:c7:6c:2c:ed:89:
be:1e:76:e1:43:77:74:4a:a2:43:3c:5c:53:51:ae:23:fb:72:
41:8c:92:a7:f3:8a:38:aa:e7:e2:c9:26:26:ba:c6:4c:f5:e8:
20:ea:1e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:19 2026 by rpki-client