Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/MNpzloZ2EY5bIcsAwMKXWOc301o.roa
File: MNpzloZ2EY5bIcsAwMKXWOc301o.roa (raw, json)
Hash identifier: Iq9MnpdoJqJZlXuPhBJLZamVzY1rE0lFXmDASDdCUFU=
Subject key identifier: 30:DA:73:96:86:76:11:8E:5B:21:CB:00:C0:C2:97:58:E7:37:D3:5A
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019DC05A19004F90151D13062503E988B364
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/MNpzloZ2EY5bIcsAwMKXWOc301o.roa
Signing time: Fri 24 Apr 2026 16:37:03 +0000
ROA not before: Fri 24 Apr 2026 16:37:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36530
IP address blocks: 77.246.220.0/24 maxlen: 24
88.80.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:5a:19:00:4f:90:15:1d:13:06:25:03:e9:88:b3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Apr 24 16:37:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30da73968676118e5b21cb00c0c29758e737d35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:da:4f:67:a3:29:3b:1a:21:00:90:89:63:
fc:cb:fe:26:9b:5a:02:d7:e9:45:82:25:17:c1:0d:
72:25:78:d9:5e:39:e8:20:60:ea:2e:bc:4c:3f:3b:
0c:93:3c:09:3c:c3:dc:60:7d:9e:07:db:71:21:2d:
d3:aa:65:2c:09:94:89:09:a3:2d:ab:19:5f:d9:b0:
31:9c:8a:34:f4:b6:01:d9:41:0c:46:d5:f0:71:b0:
c4:25:f8:63:75:05:7d:87:f3:43:69:5b:c5:37:ae:
b8:4a:be:06:8a:0c:22:41:07:9a:db:b3:aa:58:45:
fb:a8:1f:0d:24:4e:e9:e7:c7:77:ec:02:8c:0c:09:
72:6a:14:ad:01:3a:9c:e7:3f:29:ad:0a:d8:f4:8e:
da:5d:6e:33:26:d3:e3:0d:04:9d:89:19:cf:2f:71:
14:3b:6c:be:d2:7b:4c:4a:36:ee:84:04:1c:5b:3f:
8b:a4:83:bc:91:8b:1c:34:a7:43:45:29:1c:a1:d4:
bc:ee:2b:bf:54:5a:ce:96:f9:c6:59:4e:e5:72:4c:
b8:ff:0f:52:8d:3c:ef:0c:73:c6:78:42:43:66:8a:
92:2d:b1:da:41:a2:b9:d0:2f:82:db:ba:07:f9:86:
4e:cb:75:ed:48:a3:32:c6:d7:dd:c7:11:8c:ea:e0:
a9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DA:73:96:86:76:11:8E:5B:21:CB:00:C0:C2:97:58:E7:37:D3:5A
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/MNpzloZ2EY5bIcsAwMKXWOc301o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
88.80.137.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fb:a3:b0:7d:e8:7e:09:a4:63:b5:93:fc:16:21:18:4e:7b:
52:07:d4:ce:80:d0:a7:eb:74:1e:4e:ba:f6:44:82:59:6f:86:
e5:bf:f1:35:fc:95:c4:d1:6c:d8:2f:75:16:68:59:a3:d8:fe:
ab:ce:66:ce:73:00:b9:3e:2a:a8:fe:60:8b:91:8e:6f:e5:92:
dc:24:d8:0c:e6:14:06:9f:c7:7a:f2:2d:48:0d:c7:ed:96:ea:
62:a1:86:3f:e2:cb:32:b1:39:54:45:de:11:58:ae:5b:5b:0d:
3a:c0:79:14:86:44:f6:d8:91:82:ed:34:e8:d5:94:4d:4f:36:
84:28:3a:77:76:25:3f:f4:f5:35:33:ef:d7:2f:55:5f:f2:22:
a7:e3:b7:75:13:2f:28:36:dd:87:48:98:f1:d5:53:90:c9:75:
38:3e:c9:f0:8b:06:1c:b6:d4:d2:25:6b:27:94:08:4b:fb:44:
cc:d6:f7:af:82:c6:64:fa:f3:b1:e3:59:7c:45:4b:ac:e8:98:
26:ff:34:0a:47:3d:d3:7c:2e:70:0a:f5:1c:51:3a:fe:8e:bf:
f6:0f:26:a1:87:e3:df:ca:3b:e8:de:df:cf:0c:46:92:0e:db:
88:6e:15:ad:a4:36:54:85:81:4f:c6:4c:0a:71:44:1a:bc:53:
97:be:da:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:10:45 2026 by rpki-client