Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/MdEs2m-IrHBQCFgn-JlK3Bk7udc.roa
File: MdEs2m-IrHBQCFgn-JlK3Bk7udc.roa (raw, json)
Hash identifier: Mo1ibwxe067q8YpdjNU7MlbnD4U4Cl8kB+EULAl5HTk=
Subject key identifier: 31:D1:2C:DA:6F:88:AC:70:50:08:58:27:F8:99:4A:DC:19:3B:B9:D7
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 019F8A15D9DC2E6666E3AFF180CDC9F9BB71
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/MdEs2m-IrHBQCFgn-JlK3Bk7udc.roa
Signing time: Wed 22 Jul 2026 13:48:35 +0000
ROA not before: Wed 22 Jul 2026 13:48:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203394
IP address blocks: 185.126.255.0/24 maxlen: 24
194.4.71.0/24 maxlen: 24
212.79.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:15:d9:dc:2e:66:66:e3:af:f1:80:cd:c9:f9:bb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jul 22 13:48:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31d12cda6f88ac7050085827f8994adc193bb9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:b5:cc:46:14:4b:71:f3:6a:42:35:09:61:
b1:ec:68:46:47:1f:f5:b6:82:7c:37:b6:88:bb:ba:
00:1d:d9:b4:6e:dc:bc:80:fe:f6:8f:5c:26:d2:1f:
75:03:ea:34:55:6c:d2:c7:06:9b:73:ec:d8:af:08:
9c:b1:e0:43:f9:f8:8b:a7:9f:55:e4:8f:d2:75:bf:
72:61:6d:48:25:b1:db:fe:09:fc:46:e2:e8:71:11:
f0:80:56:e5:a7:44:a7:dd:95:9b:cc:f8:3c:1b:71:
41:b0:7a:bc:25:6d:d4:55:ba:ca:7c:04:95:fa:f2:
63:a7:08:d0:88:01:40:75:6b:4d:ea:42:2c:d3:10:
48:de:ec:6d:7e:a1:1a:c5:65:f6:1c:cc:40:23:c6:
00:05:1f:20:cf:9d:17:b4:a3:25:07:82:a7:97:74:
8b:b5:b8:f2:9e:b1:af:7d:c5:ea:37:32:14:11:d4:
bd:5e:23:1b:d0:17:80:9b:79:0c:6d:4b:58:b5:b7:
22:5f:00:f7:0d:83:4a:01:ff:f1:58:8f:b2:89:ff:
ea:1d:c5:0a:32:84:63:31:75:32:28:8c:6d:79:2c:
a1:a7:34:97:d0:32:2d:2c:f5:bb:cb:ea:95:45:a2:
d7:ce:70:9b:fe:d9:f7:cb:39:3f:2a:5a:a9:0d:b2:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D1:2C:DA:6F:88:AC:70:50:08:58:27:F8:99:4A:DC:19:3B:B9:D7
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/MdEs2m-IrHBQCFgn-JlK3Bk7udc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.255.0/24
194.4.71.0/24
212.79.125.0/24
Signature Algorithm: sha256WithRSAEncryption
66:bf:40:d0:1e:54:52:42:87:9c:34:98:ed:7d:c9:ff:3e:6b:
09:bb:ad:7d:10:76:68:20:67:62:5f:3d:40:0c:61:0c:c4:cb:
4e:91:67:03:c4:a8:aa:83:35:fd:c1:46:60:55:a9:f8:aa:7d:
88:9d:f3:15:dc:99:62:6f:d0:b9:a8:dc:e2:6d:9d:a5:12:cf:
dd:12:c3:61:72:94:fc:3e:a7:ad:af:c0:9e:09:98:a3:03:9d:
7e:c3:fd:26:a4:29:9d:b6:5c:33:44:72:2c:45:18:b5:53:ff:
5d:8b:80:da:5d:5f:6d:4f:a3:06:36:71:89:ca:11:92:91:9a:
ad:da:31:ec:e1:3c:b1:4a:43:fe:ba:7e:54:bc:28:82:f7:ac:
13:93:50:34:99:f0:ff:19:7e:30:a5:08:98:99:bb:0e:31:54:
c5:a5:cf:02:2b:77:d4:79:19:f8:05:72:9a:68:25:ad:7b:d4:
53:cc:68:77:75:bf:f6:b0:7a:2f:21:d5:d3:56:10:12:52:57:
ae:55:42:e4:ac:8e:85:99:8a:57:10:80:1e:84:d1:e7:5d:54:
1b:88:9b:15:9f:74:cc:39:03:14:bb:42:83:b1:41:e2:ba:5a:
24:c4:51:02:0a:a6:1e:92:f8:43:9f:63:7f:e4:d4:5a:02:8a:
57:80:2e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:14 2026 by rpki-client