Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/mI3qnrq6SLm_VsmkKACilXewKTo.roa
File: mI3qnrq6SLm_VsmkKACilXewKTo.roa (raw, json)
Hash identifier: Q4wc/dtQ8g68gQZvC3Ka6nudxiroE6HA9EnDTB3krUA=
Subject key identifier: 98:8D:EA:9E:BA:BA:48:B9:BF:56:C9:A4:28:00:A2:95:77:B0:29:3A
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 019C74D1330933FD501239EDE93D9FEA53E8
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/mI3qnrq6SLm_VsmkKACilXewKTo.roa
Signing time: Thu 19 Feb 2026 07:33:13 +0000
ROA not before: Thu 19 Feb 2026 07:33:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207661
IP address blocks: 194.32.161.0/24 maxlen: 24
194.32.163.0/24 maxlen: 24
2a05:5100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:74:d1:33:09:33:fd:50:12:39:ed:e9:3d:9f:ea:53:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Feb 19 07:33:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=988dea9ebaba48b9bf56c9a42800a29577b0293a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:c1:a8:5c:c3:d6:3a:38:a1:6e:95:0b:37:
f2:48:f1:2b:01:4a:c6:8e:87:cc:09:e3:1f:ce:99:
93:27:16:db:10:70:2d:c3:65:04:33:db:06:da:39:
84:40:80:09:a1:c1:63:2e:b1:b9:d2:b5:87:9d:bf:
03:9c:12:61:b1:e3:a4:08:96:95:46:9f:f1:46:f0:
ac:62:e6:97:47:14:c2:91:f5:3a:80:93:24:88:2a:
ee:cd:51:02:1f:f9:13:75:3d:ab:7d:4d:5a:54:15:
0f:29:5d:64:ef:3a:59:22:8e:af:85:e1:58:42:d3:
0f:e1:1f:58:ea:f1:62:9a:08:b2:39:87:bf:cb:57:
76:2e:f7:b6:b9:eb:0f:80:b2:33:77:7d:e8:0e:4b:
5e:2f:5c:c2:ac:f4:96:4e:c7:38:16:26:e3:43:0b:
cd:9b:32:b9:02:73:72:40:88:b6:ba:33:4c:8a:1a:
3c:87:ad:a9:1f:88:4b:da:57:a9:99:82:4e:08:1c:
43:b9:47:c8:e9:f7:f3:24:8d:44:7f:09:59:43:8a:
81:d1:fd:09:78:ae:1b:12:ec:4a:4b:13:98:d4:ff:
d6:2d:24:b0:11:fd:d8:38:7d:e5:0a:c6:8f:7a:91:
89:9b:54:f1:46:37:57:3f:ba:b9:83:02:71:f8:e9:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8D:EA:9E:BA:BA:48:B9:BF:56:C9:A4:28:00:A2:95:77:B0:29:3A
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/mI3qnrq6SLm_VsmkKACilXewKTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.161.0/24
194.32.163.0/24
IPv6:
2a05:5100::/48
Signature Algorithm: sha256WithRSAEncryption
90:b5:b5:85:4b:17:19:6b:97:28:b0:4b:1f:f4:29:e3:fc:d5:
0f:4f:fa:e2:2f:6b:74:81:94:43:17:92:ad:e8:d6:9c:1e:19:
69:47:c6:98:51:cf:55:1b:3d:68:48:3a:f0:20:d7:78:18:02:
2b:b7:1b:e7:29:73:b3:be:b2:71:ad:61:82:7e:b1:33:19:da:
61:94:0d:9f:a6:41:af:34:85:03:c2:cd:b9:0c:41:b6:2d:f6:
b0:5c:93:b0:40:fe:11:ec:05:e2:e6:bf:35:77:c1:f8:1c:18:
a5:a2:06:ab:43:13:cf:19:f3:5e:e9:a8:cd:0c:08:f2:4f:e0:
b8:84:9f:ff:91:fa:d5:e5:39:32:fc:f8:29:0c:33:de:15:e0:
3b:a5:bc:73:f4:35:60:71:a0:c1:17:cd:ca:24:0e:8c:85:f1:
14:1e:f7:54:a0:2b:74:8f:da:ec:41:44:d7:cf:19:50:ca:50:
0d:48:84:c0:0b:e7:34:5a:d7:1a:9c:fa:3f:61:80:d6:e9:ab:
c8:b7:68:1f:f6:aa:78:3d:0e:14:1e:b1:50:19:f7:a9:50:16:
2b:9e:ee:67:98:c0:d0:8b:c7:44:eb:ad:5a:4e:6e:8f:42:71:
f8:d3:37:d8:06:ee:ca:20:8b:be:22:c4:e2:47:fe:5f:b6:cc:
71:03:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:27 2026 by rpki-client