Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/MoIvUz5lwZlbNrx3nyA_TUl_A00.roa
File: MoIvUz5lwZlbNrx3nyA_TUl_A00.roa (raw, json)
Hash identifier: FOMLayHG7KjKY5RaWNXk9EZf9JkS/3bo0DSwODGb+Ak=
Subject key identifier: 32:82:2F:53:3E:65:C1:99:5B:36:BC:77:9F:20:3F:4D:49:7F:03:4D
Certificate issuer: /CN=cf782d2872b9e7a10a91a27f307020da94844827
Certificate serial: 019F5A85762933C9EEC38E47EAC2CA302CB4
Authority key identifier: CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/MoIvUz5lwZlbNrx3nyA_TUl_A00.roa
Signing time: Mon 13 Jul 2026 08:08:43 +0000
ROA not before: Mon 13 Jul 2026 08:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209596
IP address blocks: 91.245.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:85:76:29:33:c9:ee:c3:8e:47:ea:c2:ca:30:2c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf782d2872b9e7a10a91a27f307020da94844827
Validity
Not Before: Jul 13 08:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32822f533e65c1995b36bc779f203f4d497f034d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:b2:34:2a:06:b0:78:45:24:af:c4:d2:bc:
c8:ef:f1:8a:10:7b:56:05:8f:9e:df:85:5c:83:8e:
b2:95:7d:90:77:ed:e5:fc:05:86:f4:83:1d:b5:7a:
61:d1:1b:48:8c:a4:da:f8:74:95:0c:a3:29:2d:94:
a7:49:6c:7b:18:47:6d:26:c2:a2:aa:07:bc:51:e0:
c7:f1:6e:64:c5:8a:e1:b1:4f:01:08:65:32:83:97:
df:ca:8f:ba:e0:90:6f:ad:ce:e3:c5:30:1c:c7:95:
c8:e8:c7:64:e8:f1:16:96:0d:14:8a:6d:b1:bd:ef:
ab:cb:30:83:91:40:9b:71:5c:50:e8:d6:55:b8:74:
aa:86:8f:b2:25:d9:08:a5:8e:6f:f7:e8:6c:64:63:
51:4c:ba:91:5a:18:55:75:bd:89:8b:53:86:54:9f:
c2:84:a1:e4:86:73:8c:ca:cf:53:be:1b:51:ea:58:
a3:e2:ac:33:89:df:0d:ac:e0:10:df:85:22:f0:67:
84:87:81:c9:0e:14:3f:0f:88:70:a9:b6:ac:a0:b3:
35:d2:d3:4c:37:89:8f:d0:b3:8c:29:73:9b:d6:f2:
76:7f:85:d3:57:6f:34:c4:8a:38:2a:8b:54:f5:69:
21:88:cc:ad:97:98:a8:d0:d8:06:9a:6b:2d:b1:47:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:82:2F:53:3E:65:C1:99:5B:36:BC:77:9F:20:3F:4D:49:7F:03:4D
X509v3 Authority Key Identifier:
keyid:CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/MoIvUz5lwZlbNrx3nyA_TUl_A00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.228.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:3f:5b:1c:41:47:c4:8d:a0:a5:9b:29:c3:e7:d7:af:bd:09:
e8:07:4d:3b:a4:f8:f7:a4:cc:1d:df:cb:ab:b7:13:14:15:9a:
7c:f3:2f:19:4c:fd:18:0a:53:38:a4:86:76:27:04:52:7f:11:
b4:f6:f4:e3:7f:e4:88:68:45:49:ac:85:87:25:73:52:1b:d5:
03:ef:bd:ae:13:06:59:d3:ab:bc:28:ed:ed:ad:fd:67:0d:8e:
1a:05:9f:4c:14:31:fc:18:c0:ad:71:34:62:e6:78:ad:b7:83:
ed:04:7f:f8:6c:ba:90:52:e8:bf:9b:39:65:9d:a4:81:95:34:
69:42:6a:e8:c3:91:fa:de:fb:f3:70:40:8a:50:16:74:19:e7:
d9:e4:72:18:55:c4:04:7d:71:a9:b2:6f:7d:64:9d:d5:83:d8:
48:f1:33:70:27:db:b0:a4:05:30:22:d2:50:73:a4:1b:69:0f:
e5:92:9b:b8:e0:3f:9b:a9:54:03:77:45:6d:40:eb:8f:a4:b2:
56:d6:38:97:f2:50:a0:f2:79:d1:99:70:c2:46:b4:29:b3:9a:
f7:b0:6c:4a:e5:e5:61:a4:b2:bb:58:37:de:91:b6:fc:ba:61:
62:6b:8d:ba:05:ff:be:0a:b5:b6:70:1a:21:03:e9:b9:97:93:
fc:3d:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:28 2026 by rpki-client