Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/MPZI5Ag3oVUotbrLJ-jTSk9PNSc.roa
File: MPZI5Ag3oVUotbrLJ-jTSk9PNSc.roa (raw, json)
Hash identifier: 1W4yBCJS8hT7+MlXKwTHE3UevZSzyRfk6i0BdfUfbqU=
Subject key identifier: 30:F6:48:E4:08:37:A1:55:28:B5:BA:CB:27:E8:D3:4A:4F:4F:35:27
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019E1644671EEAC6960972D709CE0F7FD0B5
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/MPZI5Ag3oVUotbrLJ-jTSk9PNSc.roa
Signing time: Mon 11 May 2026 09:00:42 +0000
ROA not before: Mon 11 May 2026 09:00:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152900
IP address blocks: 185.232.84.0/24 maxlen: 24
193.57.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:44:67:1e:ea:c6:96:09:72:d7:09:ce:0f:7f:d0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: May 11 09:00:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30f648e40837a15528b5bacb27e8d34a4f4f3527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:46:30:1f:25:76:42:78:c0:21:19:a7:ac:
0a:15:2c:12:7d:42:20:f0:a3:be:9d:af:fc:b3:02:
bd:92:bb:db:73:4a:49:a0:23:fc:da:4b:b7:61:bc:
89:61:1e:33:c6:43:e2:15:44:5c:0b:d0:54:03:94:
90:0e:98:28:18:fc:fc:eb:b0:11:d6:70:15:14:a5:
bb:5e:41:22:e6:d1:5c:ad:5d:b7:fa:ce:1f:6f:ae:
34:56:e4:34:0c:76:4e:1b:57:20:57:a8:7a:cc:6a:
3d:9d:03:2e:eb:0e:05:55:db:b4:ba:0c:c9:cd:5b:
3a:28:87:b9:0a:09:44:01:bb:e8:c5:58:1d:62:ff:
8c:38:aa:38:f9:d8:ff:ff:26:18:0e:02:2e:d1:e6:
34:2e:82:cd:3c:a8:e0:b2:ec:63:20:cd:6d:67:06:
f4:96:4d:da:c9:ad:54:a9:80:6c:03:f0:41:71:bd:
6f:d8:cf:3a:99:d1:fb:35:52:ee:9b:67:d2:b6:0f:
96:d4:06:8c:c5:f5:a9:e6:e5:c0:46:5b:c3:54:54:
48:89:6b:8f:c8:e7:6b:b3:bd:ef:f9:e8:dc:a2:2b:
f5:55:55:59:bf:3e:cb:f8:09:08:c3:c9:9f:6f:2f:
96:16:64:61:9d:97:3e:53:31:41:95:fb:37:48:8a:
02:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F6:48:E4:08:37:A1:55:28:B5:BA:CB:27:E8:D3:4A:4F:4F:35:27
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/MPZI5Ag3oVUotbrLJ-jTSk9PNSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.84.0/24
193.57.9.0/24
Signature Algorithm: sha256WithRSAEncryption
27:8a:ac:6a:df:8c:49:c4:33:67:83:48:83:44:a6:0c:86:6d:
8b:1c:c6:a6:7d:4a:85:e8:f8:5e:61:9b:1b:ac:15:4c:59:0d:
21:97:d8:e8:78:4e:8e:ff:84:fb:de:87:ac:e0:09:c9:6b:43:
7f:96:9b:0a:eb:0e:42:01:fc:18:cf:ac:bb:44:bc:9a:fb:da:
92:ad:94:90:04:c9:f8:05:a6:5f:1e:5c:2e:ac:fd:77:5e:3f:
9d:12:c9:14:3e:3c:f7:c9:83:93:94:8b:34:a2:cc:bb:c0:52:
e6:5f:42:f5:f2:13:a2:6a:80:7a:d5:71:8b:43:8d:3f:81:9c:
3f:40:39:65:50:8b:03:14:17:13:8b:1b:7d:66:a7:ab:dc:64:
43:e3:f6:64:8f:75:32:d5:95:3d:c2:02:ef:1c:f5:c0:e5:30:
ab:16:91:17:2e:75:3d:72:dc:e9:ec:f5:b4:93:bf:77:7b:31:
04:ef:c9:ca:b0:5d:a6:2a:04:82:6b:e8:b0:86:07:b9:a9:16:
3f:9b:22:89:02:60:1b:d2:17:55:1b:b3:95:ed:ab:54:a6:4a:
e6:dd:ea:97:01:6d:61:18:3d:35:35:12:c5:8f:67:16:95:40:
05:6c:e7:ad:f8:41:6c:71:f7:e8:6e:b0:cd:29:8c:aa:7f:92:
95:4c:8b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:51 2026 by rpki-client