Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/MqPaLwzBlGzF1hD8NaRt1le-Ui8.roa
File: MqPaLwzBlGzF1hD8NaRt1le-Ui8.roa (raw, json)
Hash identifier: FtEly9gUhctynmcfbBuFtOjyzirnIbZ/PaDH3U6VMXg=
Subject key identifier: 32:A3:DA:2F:0C:C1:94:6C:C5:D6:10:FC:35:A4:6D:D6:57:BE:52:2F
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 019CD313756EB4621D358C1B3AE62E8EFB7D
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/MqPaLwzBlGzF1hD8NaRt1le-Ui8.roa
Signing time: Mon 09 Mar 2026 14:49:53 +0000
ROA not before: Mon 09 Mar 2026 14:49:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 2.59.21.0/24 maxlen: 24
2.59.22.0/24 maxlen: 24
86.54.28.0/24 maxlen: 24
86.54.29.0/24 maxlen: 24
168.222.185.0/24 maxlen: 24
2a01:e940::/48 maxlen: 48
2a01:e943::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d3:13:75:6e:b4:62:1d:35:8c:1b:3a:e6:2e:8e:fb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Mar 9 14:49:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32a3da2f0cc1946cc5d610fc35a46dd657be522f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:5c:1e:ae:f7:d3:49:15:fb:6f:17:9d:41:
cd:f0:5f:40:98:c5:fa:19:25:ff:85:4b:79:dd:05:
69:0a:f8:54:8b:b3:d9:e1:c3:a6:91:22:b1:94:2d:
e4:29:bc:2e:ce:20:89:49:7b:cf:98:56:36:b4:e4:
eb:11:72:c6:09:0d:0a:29:86:05:e9:9f:78:95:59:
83:5e:55:0a:57:cd:8a:fd:e0:b2:60:d7:38:00:48:
d0:5f:fb:34:77:3c:ad:4f:9f:4a:3a:cc:b2:4d:34:
5f:a6:36:2a:2e:b3:4d:5f:48:8a:be:5e:93:fb:75:
58:6b:a3:9e:33:32:05:08:e3:a9:d0:27:07:5b:7b:
dd:16:99:6a:a8:5e:2d:91:fd:89:4c:7f:88:25:0e:
7a:b7:2a:e0:b3:a2:af:63:65:b8:54:f7:af:7c:ce:
9b:9d:e3:99:c4:d8:9d:3a:5c:52:b2:01:d4:48:8a:
b9:05:45:4e:00:73:5d:69:2a:c7:ad:e2:ef:e3:9a:
ee:d8:1e:ab:e3:7e:44:44:70:56:29:7a:9c:3b:02:
27:b8:2c:ef:1f:94:15:9d:b9:ef:2c:5d:8b:73:37:
27:4e:3a:42:d5:2f:e4:75:32:97:7d:31:fe:59:2b:
d8:e3:4a:1e:98:8d:53:a5:39:75:0a:e6:93:1e:7a:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A3:DA:2F:0C:C1:94:6C:C5:D6:10:FC:35:A4:6D:D6:57:BE:52:2F
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/MqPaLwzBlGzF1hD8NaRt1le-Ui8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.21.0-2.59.22.255
86.54.28.0/23
168.222.185.0/24
IPv6:
2a01:e940::/48
2a01:e943::/48
Signature Algorithm: sha256WithRSAEncryption
79:af:f2:11:12:bf:50:4b:43:33:b4:b0:1c:9b:b3:1d:3a:8f:
84:15:2a:c5:db:49:bb:22:a2:d4:5b:c5:70:13:86:b3:28:3b:
5e:2a:77:ed:a6:10:eb:80:09:48:fe:56:0d:50:61:74:cb:fc:
04:52:b5:69:dd:43:0e:1f:51:06:75:4a:24:09:18:13:ff:6b:
16:0f:1b:09:1d:3b:2e:b4:29:1d:d1:a9:99:5b:5e:23:e8:28:
d7:a8:f2:a8:c4:d8:8f:25:48:f3:0d:2c:d9:a5:50:2d:4c:27:
56:5f:f7:ef:b9:cf:f6:4b:92:12:c5:16:f3:a4:52:d6:b8:40:
7a:a3:23:7d:7a:6f:75:6f:7e:93:b1:b2:0a:ff:4d:ef:f8:0a:
55:32:ef:0a:38:dd:84:1f:3d:92:00:a2:6d:7e:20:9a:8f:17:
66:d3:b1:e4:51:17:8d:91:16:39:30:84:0d:6b:65:da:b6:58:
44:e9:7a:11:f5:03:8c:13:d4:2a:6f:2d:81:d5:a3:f2:ce:d4:
bc:87:ef:2e:61:5f:3c:cf:bb:58:b0:e8:11:ef:cd:3f:40:1e:
39:7f:12:d0:ad:40:e7:23:73:9f:90:3b:66:8b:ad:87:9e:a0:
5d:ba:d6:30:bd:c2:99:de:5c:9e:98:22:ed:7d:ee:29:26:2b:
91:b2:c8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:19:05 2026 by rpki-client