Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/MUhm7sf-jo5IKEGBGo0-Z-Y1dmw.roa
File: MUhm7sf-jo5IKEGBGo0-Z-Y1dmw.roa (raw, json)
Hash identifier: 4wqf+3mVFGC07sq2JR8okYP1Xx2LwUoWzZSDpdV1+vs=
Subject key identifier: 31:48:66:EE:C7:FE:8E:8E:48:28:41:81:1A:8D:3E:67:E6:35:76:6C
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 019E1BC2920628029986A7A832DB4F827D38
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/MUhm7sf-jo5IKEGBGo0-Z-Y1dmw.roa
Signing time: Tue 12 May 2026 10:36:36 +0000
ROA not before: Tue 12 May 2026 10:36:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209830
IP address blocks: 193.135.120.0/22 maxlen: 24
193.135.120.0/24 maxlen: 24
193.135.121.0/24 maxlen: 24
193.135.122.0/24 maxlen: 24
193.135.123.0/24 maxlen: 24
193.141.23.0/24 maxlen: 24
193.141.24.0/24 maxlen: 24
2a09:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:c2:92:06:28:02:99:86:a7:a8:32:db:4f:82:7d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: May 12 10:36:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=314866eec7fe8e8e482841811a8d3e67e635766c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:0a:54:47:f8:f1:95:79:1e:a4:fa:d2:3d:
64:53:57:dd:d9:d9:0a:f6:aa:16:ef:9a:70:5c:aa:
f4:a4:45:9e:8a:03:2a:17:81:df:d9:4d:40:9c:b5:
76:07:d6:e2:2d:0e:e5:db:2f:27:9c:2c:25:49:a5:
1a:72:86:51:d4:39:77:32:43:22:ba:7b:26:34:32:
c2:94:ed:28:f7:87:39:6f:03:2a:f7:8d:09:65:78:
25:17:7e:f8:fe:5e:87:8d:bc:32:41:5a:25:0f:f7:
13:94:95:e9:46:8e:32:9f:1c:90:48:25:42:ae:22:
3a:7e:4c:fa:9a:fc:08:2b:9c:6d:35:12:e3:f3:c4:
d7:4a:04:a7:b0:e5:58:2a:91:ca:e8:a4:4f:6f:24:
95:ba:e7:df:fc:04:0b:2e:a1:77:3c:3c:e9:30:d9:
27:ff:21:0f:f4:40:87:bb:f3:30:35:71:08:61:b4:
38:0f:d2:82:03:74:39:73:bf:e2:75:87:fe:05:b6:
3d:fe:72:79:91:5b:69:93:54:ee:43:3d:7a:92:5f:
27:eb:c2:ba:d5:a1:d6:aa:82:b7:62:f7:ac:55:e1:
cc:08:e6:67:6c:23:64:ee:c6:f4:32:42:40:e2:57:
64:c5:bd:c5:b8:a2:3d:b2:b1:5d:b5:82:50:27:84:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:48:66:EE:C7:FE:8E:8E:48:28:41:81:1A:8D:3E:67:E6:35:76:6C
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/MUhm7sf-jo5IKEGBGo0-Z-Y1dmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.120.0/22
193.141.23.0-193.141.24.255
IPv6:
2a09:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
4c:4e:16:02:db:cf:24:30:e5:e8:be:cf:0d:11:b7:24:ba:2c:
82:ee:58:36:9e:60:d9:80:e9:b2:1c:9b:f2:22:47:b1:15:b5:
0e:52:d0:4c:8c:6f:2d:e6:ff:eb:09:bf:68:36:6f:57:e4:4f:
c1:cb:00:5e:39:ed:74:b8:28:ab:ae:e8:7f:28:5d:93:4a:7c:
71:e2:49:dd:39:a5:f6:b6:fb:36:b4:81:5e:b1:da:38:1b:4e:
2b:77:d2:41:97:b0:b1:6b:ac:bb:58:96:35:f8:f3:64:77:62:
1e:97:f4:49:cc:26:ad:61:c1:df:cc:cb:be:1b:61:a5:97:61:
62:a6:8a:a2:1c:20:6d:91:6c:0f:04:e9:bb:f5:60:1f:ef:df:
77:e2:74:a8:58:2d:40:73:c4:df:80:b1:30:4a:16:d4:fd:cd:
69:39:18:70:67:a3:3f:d0:e5:8f:c9:6e:bc:f7:5c:30:d2:8d:
80:02:08:eb:2b:14:09:01:51:dd:00:b5:5c:b3:d5:4d:5c:cf:
3b:d4:b2:c5:b2:ba:10:76:e8:dd:13:f9:15:b8:fe:10:60:ce:
16:65:0c:84:e7:7d:91:33:83:51:22:b3:16:3c:a7:94:42:2e:
21:e5:f0:7a:f2:b3:b7:df:97:f3:9b:45:27:68:87:20:45:13:
c4:67:e0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:41:58 2026 by rpki-client