Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MhO_mFTPV5C6J6p3yzRANKxy60A.roa
File: MhO_mFTPV5C6J6p3yzRANKxy60A.roa (raw, json)
Hash identifier: 5jTpdkjQCCB7Ijbb+1w/6bKZOiqPY0PEZA1CniDrHRU=
Subject key identifier: 32:13:BF:98:54:CF:57:90:BA:27:AA:77:CB:34:40:34:AC:72:EB:40
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E465C5B25317D6F911C45AE5462AFB852
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MhO_mFTPV5C6J6p3yzRANKxy60A.roa
Signing time: Wed 20 May 2026 17:08:38 +0000
ROA not before: Wed 20 May 2026 17:08:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209557
IP address blocks: 2.26.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:46:5c:5b:25:31:7d:6f:91:1c:45:ae:54:62:af:b8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 20 17:08:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3213bf9854cf5790ba27aa77cb344034ac72eb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:4b:5f:4b:14:f1:e2:a6:69:e8:13:f3:8a:
fc:84:64:c9:39:0f:d3:3b:01:0f:6a:29:bb:ab:52:
85:75:df:c1:97:72:9e:a5:bb:4f:1d:70:e5:91:e1:
bb:8f:c3:d5:8c:54:75:53:64:fa:14:94:e4:7c:76:
2a:bf:2c:90:6b:da:61:1f:4b:80:c4:1e:82:cb:77:
ba:88:63:09:5d:46:5d:b5:c1:d0:32:d7:92:c6:bb:
8e:61:51:46:94:54:bb:1f:27:7a:d9:47:1e:b9:9f:
6b:7b:ae:40:2a:b5:45:c2:65:48:97:e4:3a:7d:6d:
70:bf:b6:7a:e1:33:b4:f0:18:18:1b:c6:ee:91:8d:
63:cf:59:d2:3c:73:2d:58:fd:ef:4b:f9:46:fb:a1:
4b:4c:31:83:4f:3e:91:e1:fd:98:52:5f:6f:6c:cb:
f5:e5:3c:ea:8c:1b:95:96:13:b2:11:d4:a7:24:33:
54:59:95:21:e5:a9:1d:08:75:87:2c:fd:b8:3d:ad:
df:e4:7c:18:af:75:c9:50:8f:b8:be:f5:c7:10:87:
75:a1:0b:0d:92:3f:37:e9:b7:bd:fb:1f:90:e6:23:
4e:a5:54:7d:0a:71:11:11:80:09:be:56:e0:da:71:
0c:da:db:96:cc:e1:84:fc:c5:a5:83:06:84:74:df:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:13:BF:98:54:CF:57:90:BA:27:AA:77:CB:34:40:34:AC:72:EB:40
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MhO_mFTPV5C6J6p3yzRANKxy60A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.175.0/24
Signature Algorithm: sha256WithRSAEncryption
95:2b:ef:36:3c:9e:94:4f:37:3e:92:c1:61:ec:72:30:db:b8:
72:3e:d7:4b:3b:50:8d:e5:35:60:60:05:58:0c:5f:94:54:d3:
69:4d:d1:5e:98:ab:56:01:06:7e:8c:01:9d:46:84:3d:02:ba:
fb:a0:a4:40:0e:ba:55:07:75:bb:19:8a:14:63:7a:d6:0a:89:
ed:51:ad:19:60:a5:e9:b2:fa:ef:e3:17:f0:14:13:ed:ed:81:
9b:5a:d4:a5:66:b4:ae:f4:0f:53:0e:07:ba:a7:85:1b:67:3b:
16:46:bd:c1:01:23:3a:a2:fe:89:c6:47:f8:4e:14:59:e1:60:
e7:45:9d:7d:70:76:31:3d:24:79:a4:eb:90:3f:c8:80:9f:ba:
1b:82:c4:8b:59:73:3f:94:6c:c0:f9:df:c3:5b:92:b2:c3:07:
92:fb:11:fe:21:36:ae:0b:f0:c3:82:e3:69:59:6b:fb:60:f8:
88:b6:47:55:4d:7f:72:3f:c4:77:cd:02:cb:f7:87:1c:fa:1a:
bd:b5:14:b6:5d:20:b8:74:4e:3a:bb:47:95:99:ab:12:2d:5f:
a3:56:23:01:35:57:68:96:c3:0b:3b:12:23:23:2b:c9:a2:09:
2e:58:20:d8:cf:38:5e:d8:b6:ff:91:35:7d:a2:b1:0c:95:5d:
67:51:03:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5GXFslMX1vkRxFrlRir7hSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNTIwMTcwODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjEzYmY5ODU0Y2Y1NzkwYmEyN2FhNzdjYjM0NDAzNGFjNzJlYjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqABLX0sU8eKmaegT84r8hGTJOQ/T
OwEPaim7q1KFdd/Bl3KepbtPHXDlkeG7j8PVjFR1U2T6FJTkfHYqvyyQa9phH0uA
xB6Cy3e6iGMJXUZdtcHQMteSxruOYVFGlFS7Hyd62UceuZ9re65AKrVFwmVIl+Q6
fW1wv7Z64TO08BgYG8bukY1jz1nSPHMtWP3vS/lG+6FLTDGDTz6R4f2YUl9vbMv1
5TzqjBuVlhOyEdSnJDNUWZUh5akdCHWHLP24Pa3f5HwYr3XJUI+4vvXHEId1oQsN
kj836be9+x+Q5iNOpVR9CnEREYAJvlbg2nEM2tuWzOGE/MWlgwaEdN/H9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDITv5hUz1eQuieqd8s0QDSscutAMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvTWhPX21GVFBWNUM2SjZwM3l6UkFOS3h5NjBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAhqvMA0G
CSqGSIb3DQEBCwUAA4IBAQCVK+82PJ6UTzc+ksFh7HIw27hyPtdLO1CN5TVgYAVY
DF+UVNNpTdFemKtWAQZ+jAGdRoQ9Arr7oKRADrpVB3W7GYoUY3rWContUa0ZYKXp
svrv4xfwFBPt7YGbWtSlZrSu9A9TDge6p4UbZzsWRr3BASM6ov6Jxkf4ThRZ4WDn
RZ19cHYxPSR5pOuQP8iAn7obgsSLWXM/lGzA+d/DW5KywweS+xH+ITauC/DDguNp
WWv7YPiItkdVTX9yP8R3zQLL94cc+hq9tRS2XSC4dE46u0eVmasSLV+jViMBNVdo
lsMLOxIjIyvJogkuWCDYzzhe2Lb/kTV9orEMlV1nUQOU
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:56:18 2026 by rpki-client