Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/MMWviOYCBW0u-v9YnjmnhatFDV8.roa
File: MMWviOYCBW0u-v9YnjmnhatFDV8.roa (raw, json)
Hash identifier: yRtMl95uh8M4yTrzp5OTDyFY8UopBvd6bRvc/jRLsfc=
Subject key identifier: 30:C5:AF:88:E6:02:05:6D:2E:FA:FF:58:9E:39:A7:85:AB:45:0D:5F
Certificate issuer: /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Certificate serial: 019E096CAAD09AB5FDFE6780F4CB5D9CEFF4
Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/MMWviOYCBW0u-v9YnjmnhatFDV8.roa
Signing time: Fri 08 May 2026 21:09:37 +0000
ROA not before: Fri 08 May 2026 21:09:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197670
IP address blocks: 185.41.149.0/24 maxlen: 24
2a07:8242::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:09:6c:aa:d0:9a:b5:fd:fe:67:80:f4:cb:5d:9c:ef:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Validity
Not Before: May 8 21:09:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30c5af88e602056d2efaff589e39a785ab450d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:07:0b:06:06:57:6b:5a:17:4c:9a:94:03:
ee:1f:83:85:64:98:c3:21:a6:82:31:62:2e:de:83:
e2:cd:b1:8a:5b:83:18:43:ea:08:99:7e:69:b2:7a:
42:ac:7a:5d:31:91:05:be:bb:ce:ed:4d:18:c9:34:
cc:06:96:a9:cc:db:7d:ae:4c:aa:da:fa:25:ba:4d:
db:5f:c8:f1:00:0c:51:88:85:1f:32:e1:b2:87:97:
75:15:8b:a8:ce:63:c9:27:d9:e3:c3:94:7c:87:da:
0e:7f:07:5b:75:6e:cb:cc:7e:25:6c:3d:d9:89:35:
62:10:36:0e:11:cb:24:0a:8e:2e:da:61:ea:2d:52:
1d:f6:f7:55:73:24:a8:aa:53:d5:ed:e4:a8:8c:3f:
8f:5a:ef:3f:ab:74:61:88:b8:8b:5d:72:f4:36:56:
70:7c:5b:6d:73:93:2f:d8:9b:45:f4:1b:03:50:70:
66:09:f7:01:ff:43:53:e9:95:51:87:ba:2f:e8:32:
32:f5:2d:88:2d:40:df:7a:1e:59:36:38:3c:f9:43:
3b:06:f0:81:3b:2d:7e:de:60:80:0d:39:ea:37:04:
a1:5f:c1:ce:fe:bb:7e:22:65:8b:ba:db:f1:69:b5:
5b:52:ed:25:31:fa:61:a9:0b:9f:c3:37:bb:44:48:
c7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C5:AF:88:E6:02:05:6D:2E:FA:FF:58:9E:39:A7:85:AB:45:0D:5F
X509v3 Authority Key Identifier:
keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/MMWviOYCBW0u-v9YnjmnhatFDV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.149.0/24
IPv6:
2a07:8242::/40
Signature Algorithm: sha256WithRSAEncryption
34:dc:cc:89:8a:38:9d:23:64:10:da:e9:57:6b:8b:9a:7d:0d:
2d:94:c1:f1:33:04:ce:1a:9a:4f:6f:f3:27:4e:92:be:6f:3e:
f7:dc:b7:00:1c:47:ee:c3:0e:73:30:9f:57:f0:31:e2:c1:3b:
75:49:10:0d:bf:c7:08:48:0f:0b:ce:34:7d:f5:4e:4c:ac:73:
c7:58:33:ff:79:ad:e1:f3:52:19:de:1a:f3:c7:e6:88:b0:88:
8c:cd:30:6c:64:c9:91:50:ff:2c:35:c0:0a:d3:75:d4:f5:b9:
42:64:ed:ba:cd:4a:41:d2:09:67:c2:72:37:22:89:d1:e8:eb:
7e:ef:25:d6:f5:a9:d8:18:7e:cd:67:aa:cd:14:d0:d8:dd:cf:
dd:b9:0d:ed:66:bb:1e:0f:cb:90:b7:f8:3d:32:4d:dd:48:67:
63:ff:4f:13:99:e2:63:b2:63:6d:08:d7:6a:d3:93:f4:32:93:
e8:2d:ad:2e:c1:63:ef:5d:40:0b:d7:41:a1:ff:13:b0:92:21:
29:68:d7:46:8f:97:a4:e1:6a:b0:77:d7:50:51:d2:07:8d:37:
03:60:dc:7f:b0:de:89:32:ca:a1:91:ec:b1:38:e9:10:5c:48:
61:f6:98:72:4e:73:c7:1b:7e:52:cb:8c:51:7d:db:98:49:15:
63:4e:4c:da
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZ4JbKrQmrX9/meA9MtdnO/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNTc1OGFlYTQ3OWQ0ZjMyYTllODllOTgwOGYzMGVkZmMy
M2IyZTcwHhcNMjYwNTA4MjEwOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGM1YWY4OGU2MDIwNTZkMmVmYWZmNTg5ZTM5YTc4NWFiNDUwZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+IHCwYGV2taF0yalAPuH4OFZJjD
IaaCMWIu3oPizbGKW4MYQ+oImX5psnpCrHpdMZEFvrvO7U0YyTTMBpapzNt9rkyq
2voluk3bX8jxAAxRiIUfMuGyh5d1FYuozmPJJ9njw5R8h9oOfwdbdW7LzH4lbD3Z
iTViEDYOEcskCo4u2mHqLVId9vdVcySoqlPV7eSojD+PWu8/q3RhiLiLXXL0NlZw
fFttc5Mv2JtF9BsDUHBmCfcB/0NT6ZVRh7ov6DIy9S2ILUDfeh5ZNjg8+UM7BvCB
Oy1+3mCADTnqNwShX8HO/rt+ImWLutvxabVbUu0lMfphqQufwze7REjH+QIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFDDFr4jmAgVtLvr/WJ45p4WrRQ1fMB8GA1UdIwQY
MBaAFGFXWK6kedTzKp6J6YCPMO38I7LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVZkWXJxUjUxUE1xbm9ucGdJOHc3Zndqc3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hMWM5NWYtZjNlMy00NTMxLWE0NjUt
ZTkwZDk4MzBlOGM1LzEvTU1XdmlPWUNCVzB1LXY5WW5qbW5oYXRGRFY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hMWM5NWYtZjNlMy00NTMxLWE0NjUtZTkwZDk4MzBlOGM1
LzEvWVZkWXJxUjUxUE1xbm9ucGdJOHc3Zndqc3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuSmVMA4E
AgACMAgDBgAqB4JCADANBgkqhkiG9w0BAQsFAAOCAQEANNzMiYo4nSNkENrpV2uL
mn0NLZTB8TMEzhqaT2/zJ06Svm8+99y3ABxH7sMOczCfV/Ax4sE7dUkQDb/HCEgP
C840ffVOTKxzx1gz/3mt4fNSGd4a88fmiLCIjM0wbGTJkVD/LDXACtN11PW5QmTt
us1KQdIJZ8JyNyKJ0ejrfu8l1vWp2Bh+zWeqzRTQ2N3P3bkN7Wa7Hg/LkLf4PTJN
3UhnY/9PE5niY7JjbQjXatOT9DKT6C2tLsFj711AC9dBof8TsJIhKWjXRo+XpOFq
sHfXUFHSB403A2Dcf7DeiTLKoZHssTjpEFxIYfaYck5zxxt+UsuMUX3bmEkVY05M
2g==
-----END CERTIFICATE-----
Generated at Tue May 12 21:52:50 2026 by rpki-client