Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/MF-1fSgStEKpyk0Rc81lICqpAnY.roa
File: MF-1fSgStEKpyk0Rc81lICqpAnY.roa (raw, json)
Hash identifier: 06Jm1kdguOcC1luLrh42D+Br0jG4UXObUhm17q4Ub60=
Subject key identifier: 30:5F:B5:7D:28:12:B4:42:A9:CA:4D:11:73:CD:65:20:2A:A9:02:76
Certificate issuer: /CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
Certificate serial: 019E1CA6896845C24DAAB92BEF19E9E6B6EF
Authority key identifier: 02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/MF-1fSgStEKpyk0Rc81lICqpAnY.roa
Signing time: Tue 12 May 2026 14:45:36 +0000
ROA not before: Tue 12 May 2026 14:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30230
IP address blocks: 66.84.66.0/24 maxlen: 24
66.84.67.0/24 maxlen: 24
109.202.113.0/24 maxlen: 24
193.31.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:a6:89:68:45:c2:4d:aa:b9:2b:ef:19:e9:e6:b6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
Validity
Not Before: May 12 14:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=305fb57d2812b442a9ca4d1173cd65202aa90276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:7b:91:bb:74:89:99:c1:c5:96:13:d1:94:
86:96:d1:b6:00:f2:7f:51:bc:b6:2a:01:45:41:40:
7f:40:82:33:56:b7:ea:fd:df:99:01:fd:17:97:86:
d5:97:c1:c2:ba:4f:6e:af:fb:80:1e:87:8b:f3:8a:
7b:8f:a1:48:e8:95:79:92:bb:1d:93:77:ab:94:d1:
c7:de:3d:67:a2:d2:14:e3:90:51:03:85:b6:62:75:
25:34:53:da:2c:ba:4c:c5:23:9a:cf:36:0d:cc:96:
b4:da:7d:45:0e:94:94:18:16:1f:c5:8d:38:f9:f4:
9e:b3:b3:90:80:df:d1:29:b5:28:16:bf:fa:b0:b3:
15:07:a3:b3:c5:0f:ba:37:13:25:2d:9e:bd:a5:f1:
cb:7d:92:03:e2:32:94:54:1a:bb:fa:b2:1a:6b:11:
80:de:9e:f7:e4:80:77:50:bd:03:ed:20:a3:74:a9:
32:d0:ee:14:5e:f6:9a:01:80:d4:a6:b4:24:90:bd:
0e:d1:e2:4e:c4:75:c9:be:c6:74:29:04:6d:1a:02:
cf:99:f6:31:d1:d6:c9:02:9a:f2:1e:ef:4a:78:78:
3f:27:61:85:b1:c3:1a:00:7c:c3:c9:15:7f:20:fa:
4f:ef:24:bd:1b:a3:15:f4:0f:29:ea:42:12:67:d9:
92:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5F:B5:7D:28:12:B4:42:A9:CA:4D:11:73:CD:65:20:2A:A9:02:76
X509v3 Authority Key Identifier:
keyid:02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/MF-1fSgStEKpyk0Rc81lICqpAnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.84.66.0/23
109.202.113.0/24
193.31.222.0/24
Signature Algorithm: sha256WithRSAEncryption
30:bd:45:67:58:87:34:02:71:a1:3b:70:09:34:b8:04:ac:99:
a5:d8:ac:1a:51:26:21:97:2f:0e:7d:c1:e6:1e:95:ca:12:a3:
7d:5c:4f:3a:be:6d:f3:5c:33:e9:3a:87:14:dd:f2:5f:ef:69:
f3:a5:c0:4d:8e:c6:84:c7:25:02:52:70:cf:16:18:94:2c:cb:
59:2f:8c:2e:58:c3:ba:b1:7b:94:4f:57:0a:20:6d:de:01:e1:
33:75:dd:84:53:41:61:ec:b2:34:a9:ab:c7:40:80:6c:b7:b2:
a5:0d:0f:bf:14:6f:68:ff:73:db:7f:39:b6:27:7f:a8:3e:a4:
e0:a0:d0:8d:d0:50:0d:93:0e:83:15:ce:63:be:b6:09:69:2f:
9e:eb:9c:4b:93:e7:e4:87:f9:9e:b3:a2:4b:f5:59:dc:aa:e3:
19:c3:ce:4f:20:e7:bf:08:9a:22:69:70:c9:bb:fa:82:34:7d:
fd:5a:e3:b8:95:33:7b:64:21:69:2a:43:17:16:dc:b2:45:f9:
ce:53:99:26:75:02:20:04:a5:60:b8:5e:41:4f:53:34:8f:4d:
bd:4c:bc:82:7a:9e:de:92:33:a4:dc:8a:7d:4d:cc:b5:66:04:
85:e7:f2:e8:d5:50:69:54:16:01:7e:43:e2:7e:d2:73:5a:76:
b0:de:ee:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:06 2026 by rpki-client