Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/MFBUVUGoLTFb6mMUZK00McW_7z0.roa
File: MFBUVUGoLTFb6mMUZK00McW_7z0.roa (raw, json)
Hash identifier: F53ezXG/M5tdcqiYCNPbO7yVUwgcKU5OMRV7nr04e3o=
Subject key identifier: 30:50:54:55:41:A8:2D:31:5B:EA:63:14:64:AD:34:31:C5:BF:EF:3D
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 019DF42DB42B748601AF14CE6B12DC7CCAB3
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/MFBUVUGoLTFb6mMUZK00McW_7z0.roa
Signing time: Mon 04 May 2026 18:08:49 +0000
ROA not before: Mon 04 May 2026 18:08:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 89.126.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f4:2d:b4:2b:74:86:01:af:14:ce:6b:12:dc:7c:ca:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: May 4 18:08:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3050545541a82d315bea631464ad3431c5bfef3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:66:18:b7:07:a4:cf:98:bd:fc:53:cb:f0:
1d:01:ff:6b:0b:cd:8f:c5:20:eb:26:09:de:57:18:
55:2a:4e:a1:24:93:95:9f:70:37:1e:48:d2:5e:1b:
0e:d1:7b:f3:3f:f5:9e:49:15:31:cd:94:ad:45:a9:
27:a9:25:51:98:bf:bc:aa:b8:61:ec:ad:87:6f:ea:
55:f5:b8:c1:72:21:62:1a:c8:51:73:4c:e9:9c:a9:
cb:9f:73:49:8d:82:07:c0:d7:d5:81:a9:3b:0e:03:
ae:70:8c:15:de:1c:73:81:05:ab:e3:cb:04:46:e7:
25:e7:7d:51:1b:9f:42:27:12:cc:f4:57:f0:f0:20:
85:93:e1:40:6a:31:c5:62:57:98:9a:74:04:cb:b8:
78:30:79:73:72:56:e6:a4:c1:3b:74:07:a8:0d:54:
e7:b6:7a:69:2a:08:1a:d7:7a:92:0e:5a:2e:dc:05:
cb:5d:1b:0c:28:f1:b1:b1:da:f9:57:a5:bd:5b:f2:
b3:bc:11:53:e3:2c:b7:c0:c4:a1:fe:a7:1a:04:04:
6a:27:b9:2e:0c:02:0d:54:d0:40:3f:96:b6:b1:f7:
2c:38:93:c2:f4:51:4b:4f:a4:71:2f:7a:b8:1a:d9:
77:80:9a:73:de:15:d8:f7:77:e9:33:a3:15:ac:0c:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:50:54:55:41:A8:2D:31:5B:EA:63:14:64:AD:34:31:C5:BF:EF:3D
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/MFBUVUGoLTFb6mMUZK00McW_7z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.233.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ac:71:38:0a:4f:64:0b:7f:c7:ab:93:57:87:8d:0c:f1:d0:
60:27:7d:6d:2d:7b:f2:80:a6:05:22:7a:44:b4:d0:05:46:f6:
ab:1d:fc:71:28:aa:b6:5e:7f:ee:6b:3d:95:3b:e6:b5:95:41:
c8:33:6f:bd:cd:a3:f4:69:49:d8:65:4e:74:90:71:9a:ba:ec:
34:a9:a8:4f:5e:0c:af:dd:40:41:40:be:5f:12:87:25:31:32:
1e:95:8e:af:ca:14:54:c0:53:95:d0:42:58:29:30:44:a1:5e:
49:6d:09:32:7a:cb:59:21:cd:e4:97:5f:7f:de:01:59:94:fa:
9d:f9:e0:6b:87:02:e5:6d:13:5c:25:19:54:32:12:9c:1d:61:
46:a5:cb:0a:1f:2c:26:1c:4e:f7:0a:78:0f:05:03:34:99:d4:
f0:f6:29:2c:27:0d:33:88:f7:4c:4c:e3:67:4e:42:5d:5e:57:
db:43:4d:7a:3d:c8:5c:89:af:db:0b:65:e6:39:8b:11:d7:5c:
12:68:ea:ad:e0:80:46:6c:88:84:57:30:8f:66:e7:63:cc:67:
32:98:2e:d1:a0:05:59:26:d8:36:0c:8b:08:ff:82:da:44:65:
77:38:40:46:b1:12:08:67:b4:54:d1:8b:c7:05:31:9d:a3:74:
33:7c:33:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:40 2026 by rpki-client