Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/McIuFTPH9A_l9KnYpiPVvOfYVp8.roa
File: McIuFTPH9A_l9KnYpiPVvOfYVp8.roa (raw, json)
Hash identifier: a3yMbf31f0eETQVaZQzQZSIRfqi0O5AlM0G3LcpWj3k=
Subject key identifier: 31:C2:2E:15:33:C7:F4:0F:E5:F4:A9:D8:A6:23:D5:BC:E7:D8:56:9F
Certificate issuer: /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial: 019DA9B7FE812DC7248530CD2752E00151C6
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/McIuFTPH9A_l9KnYpiPVvOfYVp8.roa
Signing time: Mon 20 Apr 2026 07:08:20 +0000
ROA not before: Mon 20 Apr 2026 07:08:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199460
IP address blocks: 91.212.186.0/24 maxlen: 24
2a13:d800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:b7:fe:81:2d:c7:24:85:30:cd:27:52:e0:01:51:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Validity
Not Before: Apr 20 07:08:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31c22e1533c7f40fe5f4a9d8a623d5bce7d8569f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:69:f2:32:7e:79:2f:67:44:f6:4c:9e:96:
82:e3:5e:0b:32:36:d9:93:a4:c1:d5:ce:7e:bd:27:
ce:2c:e9:0f:c9:5d:4e:51:ad:d4:0d:49:ed:76:29:
ec:d8:0a:fb:09:72:f6:0b:15:f0:44:8f:97:a9:39:
4c:65:dc:05:2a:2b:15:9f:8f:b3:42:52:87:24:d1:
88:b0:57:5c:eb:62:c5:f8:ab:5b:bb:eb:be:34:ec:
43:63:3b:08:ef:c2:0b:60:99:c3:35:4b:a9:02:aa:
69:03:a8:23:64:b0:c1:a6:ea:8d:5a:bf:ed:0e:26:
9b:0e:fa:88:34:d8:0d:e6:74:a3:f4:e4:5f:e3:f0:
2c:a1:f4:e0:76:13:72:c7:fc:4e:58:06:2b:34:78:
0e:6c:f1:5f:c1:e4:86:e6:d2:c4:3f:c6:cd:5b:42:
52:ee:34:00:a8:07:3a:14:ea:4b:48:9b:7c:47:1c:
e4:31:7f:a6:30:da:2a:9c:be:fd:8d:10:9c:80:a0:
d2:2b:ce:6a:79:b9:a7:16:8b:2a:c8:17:74:10:10:
2a:e9:07:5f:d1:5f:8c:a6:ca:67:91:9f:29:59:c8:
b6:8a:d8:a4:25:b8:68:ec:89:3f:c5:3d:8b:3a:cf:
5d:8e:1e:1b:13:b8:3d:40:c7:32:3e:dd:c3:15:ef:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C2:2E:15:33:C7:F4:0F:E5:F4:A9:D8:A6:23:D5:BC:E7:D8:56:9F
X509v3 Authority Key Identifier:
keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/McIuFTPH9A_l9KnYpiPVvOfYVp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.186.0/24
IPv6:
2a13:d800::/32
Signature Algorithm: sha256WithRSAEncryption
02:5e:0a:a9:f5:d7:6f:cc:55:84:3f:c7:6f:da:b4:7a:c6:c4:
65:a5:3b:53:7e:7c:b4:e6:18:93:7b:65:54:7e:16:ec:f6:44:
73:a3:19:0d:91:a6:93:be:c0:53:9a:12:e9:c1:dd:b2:eb:65:
d6:8f:49:2b:c8:0c:de:18:3a:20:98:12:46:fc:45:09:f8:cd:
42:00:25:42:28:93:d4:b8:09:e0:b4:28:db:ec:88:b6:f1:f4:
b5:3e:dc:d7:6e:71:29:ce:5c:b1:85:fa:e1:3e:f2:2e:70:eb:
14:4d:3e:0c:93:c9:e5:57:85:3e:6a:de:80:ed:61:f8:a4:f9:
62:cc:02:12:88:b7:46:9f:4c:94:18:d7:27:2a:13:09:57:bb:
93:d6:d3:b1:c4:ab:e5:41:ad:36:a4:04:ef:45:d2:d7:b7:36:
7f:5a:03:5e:1d:80:5a:6e:42:cf:e7:a2:2f:52:46:86:74:3a:
10:1d:c3:9c:db:cc:26:d3:5c:10:7e:1c:62:8c:09:d6:44:0e:
47:b7:fd:5d:ff:18:6e:04:dd:b1:9c:9f:65:58:9c:d8:ef:9a:
d7:a8:d0:0d:52:b6:25:46:5f:0d:3e:6c:e3:3c:0a:a6:e0:b1:
95:96:28:32:be:e4:c9:6d:8e:2f:bb:48:b4:f0:bc:76:df:5e:
fe:aa:4e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:58 2026 by rpki-client