Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/22f8fa-6b27-4e7d-ac97-f2e44fcf99b5/1/MP-bUhmCCORbDRfR0QVPeVgT1Kk.roa
File: MP-bUhmCCORbDRfR0QVPeVgT1Kk.roa (raw, json)
Hash identifier: HcVs9BJP1XponvF2Dbd8qRv9Wk1bZyXCrH6YwBz1b/U=
Subject key identifier: 30:FF:9B:52:19:82:08:E4:5B:0D:17:D1:D1:05:4F:79:58:13:D4:A9
Certificate issuer: /CN=7f8601d37dd1d70442eff2603044e99dc60467b1
Certificate serial: 01A14020CA98CED0798A6245E0E62EE33EC5
Authority key identifier: 7F:86:01:D3:7D:D1:D7:04:42:EF:F2:60:30:44:E9:9D:C6:04:67:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4YB033R1wRC7_JgMETpncYEZ7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/22f8fa-6b27-4e7d-ac97-f2e44fcf99b5/1/MP-bUhmCCORbDRfR0QVPeVgT1Kk.roa
Signing time: Thu 15 Oct 2026 15:14:13 +0000
ROA not before: Thu 15 Oct 2026 15:14:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5610
IP address blocks: 194.50.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/22f8fa-6b27-4e7d-ac97-f2e44fcf99b5/1/f4YB033R1wRC7_JgMETpncYEZ7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/22f8fa-6b27-4e7d-ac97-f2e44fcf99b5/1/f4YB033R1wRC7_JgMETpncYEZ7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4YB033R1wRC7_JgMETpncYEZ7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:20:ca:98:ce:d0:79:8a:62:45:e0:e6:2e:e3:3e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8601d37dd1d70442eff2603044e99dc60467b1
Validity
Not Before: Oct 15 15:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30ff9b52198208e45b0d17d1d1054f795813d4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:91:91:0f:60:4a:df:97:39:53:ff:54:bf:
4f:fb:a2:5d:1c:05:f5:25:d1:91:69:10:f3:06:f7:
18:4e:10:9d:da:00:5f:f2:c4:83:a9:cf:42:87:ca:
1b:34:30:3f:fa:2b:97:66:10:52:17:d6:2d:78:ff:
97:4e:fe:41:9c:e8:96:61:b8:ee:d6:e6:43:16:4b:
04:56:e3:4e:52:a8:6e:a8:a9:19:a2:6f:7d:b4:7d:
0c:20:d0:5b:ff:4d:98:79:2b:fd:87:15:f6:32:4e:
03:11:91:7d:54:59:29:5d:0b:00:3d:c6:63:16:7e:
d4:ae:5f:0f:dc:17:63:df:49:d7:89:c2:13:25:2d:
be:a6:c5:fb:a8:3c:63:89:6f:0e:8b:0a:43:fc:1e:
79:e3:e9:21:e6:26:10:c4:59:e2:29:c2:81:8a:4b:
e0:a6:bd:c7:c6:7d:11:76:60:ec:31:cb:4d:e4:ae:
b4:6e:b0:6e:28:db:bb:c3:5f:a3:79:48:fb:34:ba:
68:26:d4:35:75:60:d0:14:ee:4f:67:f1:07:e4:6e:
77:d3:8c:11:45:2f:73:02:05:0b:d2:c6:a3:84:b5:
95:55:bb:26:eb:4a:32:a4:12:7e:4c:f1:3d:7a:b6:
2e:08:45:e4:18:61:94:65:0e:a6:f5:ab:80:02:5d:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FF:9B:52:19:82:08:E4:5B:0D:17:D1:D1:05:4F:79:58:13:D4:A9
X509v3 Authority Key Identifier:
keyid:7F:86:01:D3:7D:D1:D7:04:42:EF:F2:60:30:44:E9:9D:C6:04:67:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4YB033R1wRC7_JgMETpncYEZ7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/22f8fa-6b27-4e7d-ac97-f2e44fcf99b5/1/MP-bUhmCCORbDRfR0QVPeVgT1Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/22f8fa-6b27-4e7d-ac97-f2e44fcf99b5/1/f4YB033R1wRC7_JgMETpncYEZ7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.248.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:3b:37:2b:a3:2f:a6:6e:d2:81:30:82:8a:f5:7c:55:af:c1:
36:f3:b1:04:17:3d:9e:79:78:39:33:7c:de:91:c4:d5:22:3c:
ee:a2:2c:c9:42:ae:16:e8:b3:1c:c6:18:0c:7b:4d:9a:10:1c:
7f:39:4b:81:1f:4b:a7:ff:ba:81:d5:fe:35:97:09:a1:90:2b:
3b:d8:95:cf:d9:14:e3:8d:89:35:92:95:8f:6a:36:57:3f:50:
fe:94:5e:c4:a8:e2:af:4f:11:f3:0f:f2:81:4f:15:17:62:cd:
99:d5:cf:a2:f1:9a:f5:29:03:1c:61:72:de:ef:47:1c:43:99:
f3:2e:21:1f:97:8c:64:aa:56:3a:cb:c5:89:2e:f9:18:9c:0e:
74:43:f8:5d:f4:44:49:36:e4:95:30:24:e9:6b:36:a6:eb:a0:
61:cb:25:f1:bf:a0:75:02:51:a8:02:99:49:9c:f2:1e:44:d2:
2a:92:f1:d8:fa:cc:1f:2f:0c:5d:44:dd:e4:0a:d9:64:2f:c7:
75:1d:8a:17:51:90:c0:83:d8:2d:e1:4b:6a:79:af:6d:11:f3:
c0:9c:6a:0f:f7:83:b7:1d:d8:7c:ad:8f:8a:16:fd:58:39:60:
27:1c:00:2b:6d:2c:47:93:9a:70:a5:bb:68:86:e7:15:03:45:
60:a8:51:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:42:41 2026 by rpki-client