Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/MBj5kGluPT5_HSR9ElprzeHWlR0.roa
File: MBj5kGluPT5_HSR9ElprzeHWlR0.roa (raw, json)
Hash identifier: bTpK8jvE50MfOz8I4rdcfBf2xLTGRw3SAiHk9+mLUjI=
Subject key identifier: 30:18:F9:90:69:6E:3D:3E:7F:1D:24:7D:12:5A:6B:CD:E1:D6:95:1D
Certificate issuer: /CN=de45f9bb8263325288115be5e4e577f80bc9a5cd
Certificate serial: 019F462B304A0A55FC672EDE762F13EEFA93
Authority key identifier: DE:45:F9:BB:82:63:32:52:88:11:5B:E5:E4:E5:77:F8:0B:C9:A5:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kX5u4JjMlKIEVvl5OV3-AvJpc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/MBj5kGluPT5_HSR9ElprzeHWlR0.roa
Signing time: Thu 09 Jul 2026 09:17:43 +0000
ROA not before: Thu 09 Jul 2026 09:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28949
IP address blocks: 81.161.240.0/20 maxlen: 20
81.161.240.0/24 maxlen: 24
81.161.241.0/24 maxlen: 24
81.161.242.0/24 maxlen: 24
81.161.243.0/24 maxlen: 24
81.161.244.0/24 maxlen: 24
81.161.245.0/24 maxlen: 24
81.161.246.0/24 maxlen: 24
81.161.247.0/24 maxlen: 24
81.161.248.0/24 maxlen: 24
81.161.249.0/24 maxlen: 24
81.161.250.0/24 maxlen: 24
81.161.251.0/24 maxlen: 24
81.161.252.0/24 maxlen: 24
81.161.253.0/24 maxlen: 24
81.161.254.0/24 maxlen: 24
81.161.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kX5u4JjMlKIEVvl5OV3-AvJpc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:2b:30:4a:0a:55:fc:67:2e:de:76:2f:13:ee:fa:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de45f9bb8263325288115be5e4e577f80bc9a5cd
Validity
Not Before: Jul 9 09:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3018f990696e3d3e7f1d247d125a6bcde1d6951d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:3c:e2:24:3e:92:c3:68:ad:88:20:81:db:
7e:b3:c5:98:3a:29:a0:21:b6:11:e3:8a:00:74:eb:
a3:0d:a0:64:2d:78:d0:61:ba:02:cb:e4:45:f3:7e:
e7:20:4e:97:fd:0c:62:31:51:f6:fc:ec:29:46:43:
1f:32:e6:e7:62:b0:13:6e:d9:5d:fd:04:00:9a:78:
d5:21:19:b0:de:b9:63:01:50:81:11:4a:e9:df:f3:
10:30:4c:46:47:69:95:ed:aa:50:70:a9:b5:b4:c3:
07:06:55:8d:aa:4c:35:cd:07:a2:ed:11:7c:2f:06:
6c:03:db:fa:89:af:37:e7:f1:ef:8e:8f:1f:42:4d:
fc:08:86:65:00:08:15:14:82:5b:f0:43:86:a7:81:
ad:24:91:d5:c3:4f:5f:d9:d7:82:28:f8:21:fa:4f:
d2:42:4c:00:f9:7d:d2:58:cf:cd:24:53:6a:b2:27:
1b:04:16:95:58:e8:07:e4:4d:a2:47:d0:31:30:7d:
48:05:2a:b2:45:a9:7e:30:2f:1a:d9:36:4e:d6:07:
33:39:44:45:2e:ec:f5:23:ff:f3:f5:a2:53:c6:76:
f4:55:3c:a2:d7:b8:c0:8c:56:95:34:05:19:c4:76:
62:a4:ee:8c:e9:94:1a:2f:14:75:da:b9:fd:41:e0:
da:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:18:F9:90:69:6E:3D:3E:7F:1D:24:7D:12:5A:6B:CD:E1:D6:95:1D
X509v3 Authority Key Identifier:
keyid:DE:45:F9:BB:82:63:32:52:88:11:5B:E5:E4:E5:77:F8:0B:C9:A5:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kX5u4JjMlKIEVvl5OV3-AvJpc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/MBj5kGluPT5_HSR9ElprzeHWlR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.240.0/20
Signature Algorithm: sha256WithRSAEncryption
73:74:4c:5c:34:71:90:b5:d8:08:90:35:dd:b0:5f:fc:87:ca:
98:a8:2e:7b:d7:d4:46:c0:a9:5e:9a:16:e0:db:22:ca:16:73:
79:1e:5b:6d:e1:a9:fd:0b:a3:46:91:c1:17:0c:0b:98:cc:58:
b5:b6:84:50:7d:32:95:8f:d7:1b:34:fa:87:c3:79:18:da:cd:
ef:94:c4:ed:0a:54:ce:c5:df:73:10:d4:65:a1:31:7b:42:c6:
f4:a8:3d:6a:6b:15:d3:dc:7a:f9:da:76:64:da:1d:9b:7b:99:
82:41:70:a2:b7:68:5a:12:0a:e1:bc:e4:e4:ec:c6:3c:6c:46:
47:23:40:fb:27:57:84:13:0f:af:12:80:03:64:c6:cd:25:5e:
99:16:3b:b2:88:1d:21:99:95:0a:02:c3:05:db:f0:a3:3a:63:
42:75:01:99:c5:55:d5:d3:c6:96:1f:10:87:c2:5b:8a:af:04:
04:e3:78:62:97:28:14:dc:bf:8c:0a:d1:c2:e7:9c:96:bf:af:
80:42:bd:64:c9:95:4d:79:77:b2:3e:16:c7:38:dd:21:73:e9:
14:d8:1f:fe:92:80:1b:52:ec:a6:3f:19:0d:e1:07:5d:0e:8c:
70:98:1a:49:5f:ba:ec:07:3c:bd:44:a1:50:ce:88:49:a4:8e:
cd:cb:c6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:43 2026 by rpki-client