Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/MUOy_bICxHwJR6mlgWUoUwVMqbc.roa
File: MUOy_bICxHwJR6mlgWUoUwVMqbc.roa (raw, json)
Hash identifier: zYV7qFrIdVJVJeaFnHA8N1kYCPRTpDcW34owFMJXGG8=
Subject key identifier: 31:43:B2:FD:B2:02:C4:7C:09:47:A9:A5:81:65:28:53:05:4C:A9:B7
Certificate issuer: /CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Certificate serial: 019B7BA3C827E45A6A7DCD620266734B6F57
Authority key identifier: 5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/MUOy_bICxHwJR6mlgWUoUwVMqbc.roa
Signing time: Thu 01 Jan 2026 22:18:09 +0000
ROA not before: Thu 01 Jan 2026 22:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208741
IP address blocks: 185.230.197.0/24 maxlen: 24
2a0e:3a87:ff00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:c8:27:e4:5a:6a:7d:cd:62:02:66:73:4b:6f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Validity
Not Before: Jan 1 22:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3143b2fdb202c47c0947a9a581652853054ca9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:2d:12:db:55:05:f6:07:a3:16:51:4d:62:
ba:12:e0:fd:36:ce:72:da:39:04:1a:91:29:48:6a:
26:00:21:13:7c:c5:1b:77:76:57:78:19:13:23:19:
9d:ab:73:3c:a8:9e:72:b3:e7:8c:8d:80:16:fd:f7:
16:6e:fc:84:fc:b0:9d:b7:c2:2e:b5:f3:98:3c:63:
28:28:e0:7a:26:8a:c5:55:a1:0f:85:5a:a5:b2:44:
d1:6c:0a:95:34:ad:65:70:2e:58:9b:44:12:ad:39:
a8:20:4c:81:2f:d0:12:c3:d7:da:35:a5:de:59:8b:
13:ba:a9:af:49:af:89:e6:10:e6:1f:cd:9c:1d:dc:
35:08:54:24:ad:c2:c6:a6:fa:19:b6:c6:c8:1a:2b:
fb:f7:4e:f2:49:e2:3e:ca:f5:75:a8:f3:dd:fd:6f:
bb:f8:b7:85:73:46:67:f7:37:8b:aa:a2:2b:c3:5d:
14:68:02:66:ac:71:59:d4:64:1d:35:71:f1:97:eb:
9d:5e:7e:8f:91:2b:4c:57:3e:ea:e1:e1:3c:3d:ea:
ba:30:4e:d1:68:d7:0a:10:59:03:26:b4:75:99:58:
ae:55:61:ea:2c:7d:8c:24:40:71:67:7f:38:32:6d:
8b:42:75:fd:89:11:12:b4:71:ed:c4:72:35:ab:0b:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:43:B2:FD:B2:02:C4:7C:09:47:A9:A5:81:65:28:53:05:4C:A9:B7
X509v3 Authority Key Identifier:
keyid:5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/MUOy_bICxHwJR6mlgWUoUwVMqbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.197.0/24
IPv6:
2a0e:3a87:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
51:13:6a:ed:25:7b:11:d4:3d:ce:46:0f:c9:32:9f:4d:e8:36:
db:97:a6:23:72:84:aa:18:c2:9a:07:48:cf:15:fa:2a:a7:2f:
03:91:ad:2c:e1:aa:27:01:2a:58:a8:a2:6a:9e:3c:ed:30:4c:
4c:43:f2:31:a8:f1:77:58:af:e4:69:bf:3d:7c:9a:e1:01:af:
34:4b:d0:36:1d:56:a3:16:29:56:f7:99:ef:e5:bf:26:1d:ac:
0c:0d:51:23:d2:01:49:c4:08:06:fa:97:b3:5e:b3:92:8c:d3:
6b:db:b4:ff:32:17:8d:f7:05:f0:32:2c:74:42:96:04:a1:2c:
2a:32:26:4d:7d:f3:5c:09:c9:03:7f:b8:16:49:69:07:58:28:
8c:0f:2f:77:2b:6d:6e:ba:dc:c2:e0:1f:16:ad:f3:a1:5f:db:
78:34:f4:13:60:81:52:1e:e6:95:fa:2d:16:16:76:99:b2:c1:
6b:11:66:3d:78:73:17:dc:20:d8:45:77:cc:12:75:d9:6d:2c:
0f:44:2a:ab:11:2e:90:9e:6a:1e:e8:04:d6:f5:bd:f6:fb:f6:
8e:86:04:80:de:3c:4e:a7:f4:e6:1a:5c:66:14:d0:d4:87:09:
c1:91:84:cc:ab:b0:97:90:0f:28:79:e1:a6:62:cd:d0:62:bf:
b2:f1:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:51 2026 by rpki-client