Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/_MGbRQDu2ns3ZgtHHgodxQrWr6M.roa
File: _MGbRQDu2ns3ZgtHHgodxQrWr6M.roa (raw, json)
Hash identifier: jDV5qNzh/x2GH+Pt80kizBcWmWTRDyTfwoJ6oLaNVg0=
Subject key identifier: FC:C1:9B:45:00:EE:DA:7B:37:66:0B:47:1E:0A:1D:C5:0A:D6:AF:A3
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 019C52226CBC5E3C891E4D1D39564140F95C
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/_MGbRQDu2ns3ZgtHHgodxQrWr6M.roa
Signing time: Thu 12 Feb 2026 13:55:13 +0000
ROA not before: Thu 12 Feb 2026 13:55:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 185.218.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:52:22:6c:bc:5e:3c:89:1e:4d:1d:39:56:41:40:f9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Feb 12 13:55:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcc19b4500eeda7b37660b471e0a1dc50ad6afa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:08:f0:15:a4:fa:03:a3:e8:06:0a:af:59:
31:03:b0:c3:5e:fe:a8:65:e3:d0:c9:80:5e:39:20:
8c:76:7e:32:b0:72:6d:3c:a7:d8:0f:68:c1:2a:08:
b8:f1:ac:1c:c4:fe:b6:6c:19:41:a2:79:96:ba:e0:
9d:cd:d8:f9:e2:12:84:5d:80:10:68:de:61:5b:69:
a9:3e:88:82:e1:2a:4e:95:bb:fd:f7:bf:a2:30:7c:
4d:cb:29:5d:0e:a3:54:09:61:2d:1b:2d:43:d7:f9:
1e:bf:0c:ba:d2:82:0f:bc:37:cf:61:7d:b4:fc:2a:
e2:26:92:3b:15:fc:9a:96:6e:0b:cc:89:7e:c5:1b:
cf:c6:d0:8e:74:29:36:fe:66:11:31:3a:fc:f1:c6:
8b:a3:e2:62:8c:f4:6c:a1:a2:93:ec:64:be:12:f4:
35:12:cf:98:57:9a:f8:29:9f:f2:54:f0:1c:ed:ab:
37:e2:56:e9:50:eb:32:50:c1:c5:43:69:90:b6:95:
b8:47:d5:c5:9a:57:e6:2f:dd:ac:06:8b:9a:9b:0d:
f8:05:02:95:e8:99:56:0f:6f:e0:9f:a1:d4:0b:f9:
aa:2d:02:ec:61:9e:84:0a:28:88:03:d6:2e:1c:20:
f0:39:be:24:4d:1c:bb:33:f1:1a:39:21:4d:6c:01:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C1:9B:45:00:EE:DA:7B:37:66:0B:47:1E:0A:1D:C5:0A:D6:AF:A3
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/_MGbRQDu2ns3ZgtHHgodxQrWr6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.184.0/24
Signature Algorithm: sha256WithRSAEncryption
52:89:83:04:6c:d3:59:b0:6b:ef:cc:e9:32:b1:96:47:91:17:
37:de:e4:84:10:07:9b:c4:77:d0:60:eb:f7:82:40:fa:11:86:
06:d2:52:61:80:90:25:d2:d6:20:37:ac:53:ab:15:22:eb:68:
cc:93:ee:75:12:96:78:48:63:62:51:3b:d7:46:96:c2:57:93:
43:27:bd:c4:cf:a9:37:d2:00:2b:ec:e7:e9:29:eb:43:51:01:
ce:54:27:90:a1:6d:16:a7:24:19:5b:c3:45:9d:0f:b2:c9:2b:
9c:eb:8f:34:8f:af:d3:4f:e5:ed:b0:e4:83:c9:52:9c:41:b8:
34:f4:58:f2:d9:e6:0f:d3:96:a9:b7:6f:9d:cf:c6:ac:c4:5d:
21:a6:67:40:24:3e:ca:32:94:22:f9:1a:e4:70:7a:fd:b3:1d:
59:ad:ed:eb:16:b0:2f:95:c2:19:d5:f2:18:63:09:27:90:22:
19:4f:a0:dc:11:1d:dc:9b:ef:6e:2b:15:9a:52:a5:dd:a5:64:
18:dc:4c:53:24:a1:ef:f7:c4:22:d0:4e:6c:fb:0c:2a:69:ba:
9a:59:fa:ba:7c:11:54:52:e5:b8:6c:93:54:a0:52:2d:ec:64:
ff:4a:d2:0a:5b:3d:03:85:21:f3:77:24:59:19:5c:b2:a8:12:
01:95:78:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:29 2026 by rpki-client