Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/MLMp9F2DS-Mjn9h0m9G4cGBdi3g.roa
File: MLMp9F2DS-Mjn9h0m9G4cGBdi3g.roa (raw, json)
Hash identifier: YNRXF8m2uVVc4Y4pyF3YMn+4mPmPL7P8INiwgCU68m0=
Subject key identifier: 30:B3:29:F4:5D:83:4B:E3:23:9F:D8:74:9B:D1:B8:70:60:5D:8B:78
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01A0F3D1FB0748733EB1EF204F686BA675E7
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/MLMp9F2DS-Mjn9h0m9G4cGBdi3g.roa
Signing time: Wed 30 Sep 2026 19:36:59 +0000
ROA not before: Wed 30 Sep 2026 19:36:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398436
IP address blocks: 95.164.21.0/24 maxlen: 24
95.164.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:d1:fb:07:48:73:3e:b1:ef:20:4f:68:6b:a6:75:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Sep 30 19:36:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30b329f45d834be3239fd8749bd1b870605d8b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d7:5c:f5:ef:64:94:dd:49:98:be:68:19:b6:
1d:bd:5f:bb:48:1c:ef:89:8e:ce:07:fd:20:3c:23:
86:f1:5b:95:79:bf:5c:88:99:bf:31:29:09:56:81:
a6:60:a7:eb:c4:ca:3d:76:42:db:1f:72:b1:ad:f1:
01:65:07:3b:50:23:82:f2:0a:6e:84:29:8e:7b:e0:
5c:5e:10:26:11:d4:6e:58:56:7a:66:36:68:9c:a4:
aa:39:46:27:27:a0:58:16:ef:d1:57:e6:88:b2:96:
14:d6:33:fb:db:97:82:36:e7:85:b6:e1:52:8d:db:
8f:13:c8:e9:9b:af:d9:19:0f:61:54:00:d6:87:3c:
62:44:8e:f1:86:ee:6d:dc:90:93:bf:e1:23:63:df:
c4:e8:b7:4b:37:9d:bb:33:ac:28:7b:31:34:f8:16:
e3:2a:98:cc:24:74:81:45:f6:0a:d2:b4:0f:72:bb:
da:60:0f:25:d9:fc:fe:8e:35:50:eb:0c:46:56:ba:
d6:58:5d:f3:86:1d:26:95:5e:2e:0b:bf:af:61:9d:
d7:28:52:da:eb:60:f5:3c:b5:98:cf:43:5e:fd:d3:
43:28:bf:0f:20:4d:4c:e1:73:5a:bb:0e:1c:71:96:
22:31:72:0e:58:e8:a1:36:5d:de:91:06:ee:36:49:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B3:29:F4:5D:83:4B:E3:23:9F:D8:74:9B:D1:B8:70:60:5D:8B:78
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/MLMp9F2DS-Mjn9h0m9G4cGBdi3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.21.0/24
95.164.161.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:95:4a:0c:67:a9:f1:d9:50:fa:48:f9:45:95:26:a2:db:2a:
9e:9a:e0:71:2e:a6:64:b8:83:2d:25:1d:7c:b6:b8:9d:83:a1:
72:f1:df:0e:d9:24:a5:bc:16:2a:90:c5:f8:f4:93:12:40:fa:
aa:04:cb:eb:48:c7:b1:55:c3:1f:bc:39:bc:07:5e:6f:f1:d1:
bf:b0:12:55:c6:ee:0b:81:a2:25:b8:3c:13:25:87:ce:07:1d:
03:f0:1c:b0:ed:dd:91:9c:dc:18:f0:18:01:e1:e1:93:32:a7:
63:89:9e:5e:77:0e:84:c0:5d:af:5c:b4:38:a8:2a:ce:6a:3c:
64:cc:80:86:2b:06:ee:a5:b7:2a:07:2a:65:d2:a9:e1:a2:4f:
66:df:ae:15:79:4e:0f:0c:d3:5a:4f:22:59:db:76:a9:c5:fe:
38:2d:6c:10:6f:1d:fe:53:67:ce:8f:24:85:7f:cb:22:af:01:
fd:4d:0e:44:7b:ab:5d:0b:ff:27:e0:76:0f:9a:98:a4:9a:30:
e1:2c:52:18:ae:59:0a:c0:da:ff:53:88:2a:f9:fa:2b:ef:8a:
8b:4e:d9:51:30:af:eb:a6:9e:96:05:cd:a6:08:eb:d4:81:ed:
2a:66:97:11:4f:40:56:a2:91:09:e7:46:62:2e:a1:d2:88:44:
7f:3a:16:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:13:00 2026 by rpki-client