Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MLzuA9-F2lrVZa5YcNRLdCouIy8.roa
File: MLzuA9-F2lrVZa5YcNRLdCouIy8.roa (raw, json)
Hash identifier: 0Sz6iByDyggDxpbwNBkTIxTGqBk576vqRkLDE/yFoLc=
Subject key identifier: 30:BC:EE:03:DF:85:DA:5A:D5:65:AE:58:70:D4:4B:74:2A:2E:23:2F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A1D6A8DF947D838CFE8B718A0EA9F0B383
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MLzuA9-F2lrVZa5YcNRLdCouIy8.roa
Signing time: Fri 13 Nov 2026 20:45:53 +0000
ROA not before: Fri 13 Nov 2026 20:45:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201097
IP address blocks: 194.87.159.0/24 maxlen: 24
212.193.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d6:a8:df:94:7d:83:8c:fe:8b:71:8a:0e:a9:f0:b3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 13 20:45:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30bcee03df85da5ad565ae5870d44b742a2e232f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:95:a4:5f:1d:12:ca:45:d3:6a:bb:1f:22:
1d:54:ce:09:55:be:f9:96:ad:39:0f:fc:35:12:8e:
1c:64:0b:c3:d5:59:58:bc:7a:a2:34:1b:31:ad:8c:
7d:2c:3a:d8:b2:54:67:6f:8d:c7:a6:72:39:ac:7e:
a4:dd:d7:95:97:e8:d2:54:ab:81:49:9c:1b:74:be:
eb:84:de:1a:5f:c2:94:e6:ab:df:ba:f6:14:92:ee:
13:03:12:b2:0a:7e:02:5e:4d:74:0e:79:a9:ad:96:
21:fa:b9:97:86:67:0f:34:68:5c:9f:5a:e1:2b:95:
25:e6:fe:f8:3d:49:e5:75:bd:7a:18:40:d8:f3:15:
00:53:cc:6a:21:51:18:1f:2d:49:f7:12:cb:af:98:
80:ba:c1:88:b7:75:47:bc:ef:08:c3:96:e6:3d:b8:
a7:33:24:11:77:c1:7c:89:76:1e:43:0c:c1:a2:c9:
02:38:96:5d:b9:55:c4:bc:7f:8e:b6:c0:29:5a:95:
b8:79:d5:32:cb:0a:5b:e1:29:6b:3a:12:91:3d:6a:
7b:58:2b:7c:d0:5b:55:4d:05:ae:95:2c:bb:d9:89:
53:70:ad:02:e0:aa:5d:d8:a5:24:dd:e0:85:a3:27:
fa:0f:7f:03:40:14:9e:d0:73:40:75:54:76:ac:59:
51:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BC:EE:03:DF:85:DA:5A:D5:65:AE:58:70:D4:4B:74:2A:2E:23:2F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MLzuA9-F2lrVZa5YcNRLdCouIy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.159.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5d:3d:d4:f4:b1:ac:72:88:32:f0:00:a3:8f:85:8a:3c:5f:
4b:6f:77:f4:77:e9:4a:8c:5a:74:12:be:6c:68:d5:dd:a0:f3:
2e:6a:75:69:28:fd:43:34:45:fc:97:b2:62:5b:d4:51:ab:4c:
76:cc:db:89:0f:f1:44:6b:90:ee:dd:2e:3b:1f:02:97:b5:a1:
f4:c3:c7:d9:eb:5b:eb:2c:8d:02:77:e4:e4:3e:02:5e:82:61:
6e:24:5c:12:45:36:b1:ae:9c:8d:c6:fd:98:63:ee:44:6a:2e:
03:77:f9:d8:6e:53:8c:33:69:c0:c1:ed:00:6a:ba:0b:2a:6b:
48:02:84:c2:b6:b9:c9:95:97:9f:01:71:bf:94:e3:43:1e:36:
a5:57:10:58:14:12:2d:69:9c:88:0b:f5:40:4f:93:09:2c:9f:
c7:c0:b6:23:2c:28:51:8b:de:3a:74:e2:4d:04:97:13:12:3c:
2c:c3:0b:6b:a4:c8:b5:8c:3b:8c:63:7c:90:32:59:98:16:40:
4e:2a:8d:4b:c9:29:bd:44:fd:94:df:78:25:ad:2f:e9:7b:c0:
24:85:05:5b:f1:89:75:1d:02:cb:a9:b3:d0:bb:81:bb:bd:70:
ff:b4:a0:76:27:cd:e6:13:64:36:ad:22:a1:4b:c5:4c:49:61:
03:16:b8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:50:10 2026 by rpki-client