Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/mpburp0bNHC8mjA1b9MQ6B1Uosc.roa
File: mpburp0bNHC8mjA1b9MQ6B1Uosc.roa (raw, json)
Hash identifier: cybM8zjBNCRujDm/NBgXtLs/vX9RrPPxqDW5wQDHufk=
Subject key identifier: 9A:96:EE:AE:9D:1B:34:70:BC:9A:30:35:6F:D3:10:E8:1D:54:A2:C7
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019DD565C2EDB5466F542CA5D8E87B7CD7C6
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/mpburp0bNHC8mjA1b9MQ6B1Uosc.roa
Signing time: Tue 28 Apr 2026 18:41:49 +0000
ROA not before: Tue 28 Apr 2026 18:41:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 87.232.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:65:c2:ed:b5:46:6f:54:2c:a5:d8:e8:7b:7c:d7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Apr 28 18:41:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a96eeae9d1b3470bc9a30356fd310e81d54a2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6b:a8:a0:75:c0:cd:10:86:1c:bd:86:28:00:
be:bd:c8:d5:6e:e6:60:46:d6:c8:fd:4b:48:53:e3:
c6:72:33:44:77:60:3f:c4:39:d9:e1:f0:18:8e:fc:
ef:f4:83:7d:c9:dd:90:0e:ba:ad:46:a0:7a:25:5f:
08:3c:be:09:ff:9f:6f:12:4a:15:b9:03:84:84:32:
f9:23:15:6e:e4:96:c5:1d:f8:fe:12:1b:8a:d5:e1:
bb:33:08:43:24:af:4a:8f:ee:90:1c:8c:03:f2:58:
e2:96:ba:ec:13:d0:21:11:6f:dd:c9:55:da:f2:c7:
7c:28:5f:f1:6c:58:7c:93:db:48:39:f9:e7:9b:de:
6c:37:8b:5d:7f:43:27:75:83:7c:05:b9:08:cd:dc:
93:64:c0:dc:20:c6:b9:76:d8:26:1b:12:70:86:96:
d6:39:15:16:00:bb:27:39:32:bd:11:76:4a:be:61:
bc:aa:9d:3a:4d:ec:60:6e:01:90:df:96:89:b0:c0:
c0:4b:73:82:a0:f3:d2:11:ae:cf:62:c9:72:39:45:
ab:53:b3:78:b1:d7:ec:fd:94:4a:8c:4d:10:5a:d3:
81:45:1f:21:71:4e:d2:c8:60:25:ae:d9:01:a7:b8:
51:eb:d7:18:2f:80:c8:63:30:b1:4a:a4:16:2e:0a:
02:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:EE:AE:9D:1B:34:70:BC:9A:30:35:6F:D3:10:E8:1D:54:A2:C7
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/mpburp0bNHC8mjA1b9MQ6B1Uosc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.96.0/24
Signature Algorithm: sha256WithRSAEncryption
96:9a:29:2a:60:48:04:a9:40:4e:73:41:64:11:02:ec:84:98:
4c:dc:74:c7:04:d9:22:5a:cc:35:7b:ef:30:03:61:9a:19:b2:
b6:6a:4e:1f:ed:f8:d7:32:91:14:fc:ec:04:86:ff:a0:3d:b3:
af:f5:45:98:03:e3:c1:95:1a:e5:05:16:e1:9b:16:22:f8:d5:
fc:d2:bd:0b:78:4e:24:77:56:eb:1b:37:e9:3a:30:bb:46:ac:
ea:4f:82:21:3d:ff:0b:6e:ba:a8:62:20:ec:75:a3:7d:ed:f8:
27:24:60:85:2c:c3:16:a6:23:79:41:da:79:22:84:57:10:88:
11:3e:2c:8e:d8:31:de:3f:11:15:ab:ba:45:6f:8a:5c:2f:ad:
2e:ae:c3:2b:df:c9:8e:81:c0:cf:8b:a4:29:1b:46:47:b5:ae:
5c:2b:df:24:e3:af:cc:4a:95:62:a4:6b:c6:f4:49:42:30:7e:
fd:5f:9c:1f:49:04:68:9c:d3:84:72:f5:37:59:14:9c:c9:7a:
fb:bb:ea:35:5f:a6:6f:d2:48:56:9b:52:76:82:3e:af:61:b2:
b5:13:15:49:2f:cd:9c:59:f0:99:e5:77:70:58:46:1b:6f:1e:
8a:68:ec:07:a4:eb:43:52:21:c5:aa:9d:50:ba:ac:c5:b8:ea:
ba:07:b5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:25 2026 by rpki-client