Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/MzDAaJQe6FwtZWggskf7C2fPCZA.roa
File: MzDAaJQe6FwtZWggskf7C2fPCZA.roa (raw, json)
Hash identifier: 25Bgva+YAy5hn4FhbYcFXuarAbO9XxuDvj/qwKG5Ib4=
Subject key identifier: 33:30:C0:68:94:1E:E8:5C:2D:65:68:20:B2:47:FB:0B:67:CF:09:90
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F88BD49C07D9378D558A527B53A7DCDD7
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/MzDAaJQe6FwtZWggskf7C2fPCZA.roa
Signing time: Wed 22 Jul 2026 07:32:14 +0000
ROA not before: Wed 22 Jul 2026 07:32:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139492
IP address blocks: 85.92.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:bd:49:c0:7d:93:78:d5:58:a5:27:b5:3a:7d:cd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 22 07:32:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3330c068941ee85c2d656820b247fb0b67cf0990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:87:a0:9b:79:aa:da:80:df:98:e8:50:de:b4:
bf:0c:0e:a4:28:58:d3:85:fc:ae:4b:44:a1:86:cc:
bf:68:24:d4:7f:29:20:da:b9:86:09:08:e6:d6:35:
49:ed:db:83:13:56:8d:00:f4:fd:f7:1e:00:16:26:
a6:82:fb:38:dc:a0:95:a1:ec:77:70:8b:3f:c5:6f:
30:a6:ab:a3:0f:d8:06:77:3d:e3:db:ec:13:62:31:
16:77:33:fd:63:2b:21:d7:d1:88:33:78:b0:e9:95:
05:1f:bb:77:6e:a6:c6:cd:04:32:7b:2b:a3:07:66:
0f:bb:12:98:f0:59:94:8a:3d:73:f1:78:ae:1b:da:
d2:17:9c:08:20:a2:46:ba:4f:c8:45:a0:51:83:1d:
8a:65:f2:ab:70:48:a0:9f:46:68:ab:67:69:ca:50:
46:90:6c:cf:59:8d:2e:5d:b0:05:46:21:d5:0a:61:
f4:7f:6d:07:55:92:83:23:61:a6:bd:55:54:ae:fe:
74:d9:92:56:17:6c:93:88:97:26:46:65:48:a2:14:
92:c4:e1:db:8f:a5:ea:31:90:34:79:7d:48:5f:bc:
f4:8c:02:b4:27:98:f2:d2:56:2e:17:5e:29:4e:9d:
79:05:71:0e:e5:97:58:25:05:36:9a:c3:2f:23:0e:
be:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:30:C0:68:94:1E:E8:5C:2D:65:68:20:B2:47:FB:0B:67:CF:09:90
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/MzDAaJQe6FwtZWggskf7C2fPCZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.142.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f6:f2:d9:a1:dd:17:63:c7:b5:b7:a0:08:f0:75:a5:89:44:
88:4f:f5:0b:dc:a0:e8:20:2f:75:95:8d:aa:38:82:34:a3:11:
54:3f:fb:2a:82:22:08:ad:64:d0:23:fd:a6:25:16:a1:03:ee:
a6:1d:19:7c:a1:19:f9:8a:0e:cc:69:cc:2f:1a:48:c9:07:a6:
2b:7a:e9:81:a6:1c:8f:6c:1a:da:27:9c:c7:35:d2:50:d9:26:
b0:25:8e:fe:b2:d0:ac:75:39:3e:c3:b7:9c:bd:be:91:42:38:
22:81:85:18:c0:05:bd:98:c0:4b:c3:cd:07:4b:4e:87:18:f8:
16:23:2c:2e:ec:5b:9a:9d:4c:52:24:e5:c9:b1:c5:82:7e:f2:
21:fb:d6:83:a1:4d:b6:5b:3c:29:79:ec:8e:c2:37:cc:99:21:
2c:24:7e:64:5e:99:c9:18:5e:9f:97:82:87:9e:12:d0:71:7c:
dc:de:f1:ad:c2:9e:79:1e:00:d1:55:25:ae:16:c6:90:58:e6:
38:b7:ef:ac:ee:33:ce:5a:b9:3f:c2:9a:60:b0:e9:0a:1e:2b:
6d:b7:db:58:35:2b:3c:57:b4:24:7e:aa:c9:0b:9d:52:b2:27:
a7:ac:85:be:86:64:de:dc:7f:12:45:a0:38:3f:eb:0d:dd:8b:
31:5b:02:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:54 2026 by rpki-client