Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/MFHvUPrYAeDk8SpBoizdIOrRDfA.roa
File: MFHvUPrYAeDk8SpBoizdIOrRDfA.roa (raw, json)
Hash identifier: ppOuHRLYDTC+js6b7NOJZskTOOb+m18mpkOOGMItddw=
Subject key identifier: 30:51:EF:50:FA:D8:01:E0:E4:F1:2A:41:A2:2C:DD:20:EA:D1:0D:F0
Certificate issuer: /CN=ee8c5af1c16e1518cc4392284a1a0e54f4cbf756
Certificate serial: 019F236933434D3830708884D292AB69276E
Authority key identifier: EE:8C:5A:F1:C1:6E:15:18:CC:43:92:28:4A:1A:0E:54:F4:CB:F7:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oxa8cFuFRjMQ5IoShoOVPTL91Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/MFHvUPrYAeDk8SpBoizdIOrRDfA.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48904
IP address blocks: 185.204.8.0/23 maxlen: 23
185.204.10.0/23 maxlen: 23
217.72.16.0/21 maxlen: 21
217.72.24.0/21 maxlen: 21
2a13:ed00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oxa8cFuFRjMQ5IoShoOVPTL91Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:33:43:4d:38:30:70:88:84:d2:92:ab:69:27:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8c5af1c16e1518cc4392284a1a0e54f4cbf756
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3051ef50fad801e0e4f12a41a22cdd20ead10df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:1e:8c:0c:15:d0:96:b6:32:d5:24:03:fa:
6d:a1:80:61:d7:76:7e:18:78:4c:cf:38:62:78:7e:
37:06:37:85:8e:b7:4d:2c:e2:02:f2:ac:cc:aa:a2:
d1:d3:7f:f7:bc:7d:d2:f0:d2:65:0f:bf:93:ba:f3:
ae:76:25:9a:ff:90:e9:e0:ce:f4:cf:46:af:fb:b1:
c2:df:69:ad:48:83:7a:67:53:b8:dc:a6:02:44:3d:
88:36:51:1a:46:e1:d0:ca:b6:74:e5:6b:f9:9a:ee:
f2:f7:b6:4f:f7:90:bd:69:c7:7c:ec:49:4e:74:de:
0e:8d:5c:2a:5f:31:5d:d8:b4:20:54:cb:af:03:41:
bd:59:d8:af:8c:e9:1c:5e:d2:65:e4:df:9f:47:8c:
67:25:7c:32:50:ff:63:d9:66:b9:d7:f3:46:9d:8c:
5c:f7:5f:ac:d6:1e:07:15:d5:93:65:82:ac:86:6a:
dc:de:24:ec:14:87:6e:66:b4:7b:df:9c:49:25:5a:
03:98:8b:83:32:72:42:d2:44:f2:6d:b6:0d:c1:44:
18:e7:c9:ff:d5:e9:84:7d:ee:3b:a1:21:b3:99:2a:
f4:61:23:f1:7d:b8:e5:bc:a7:c6:2e:9d:20:7a:2a:
9d:bc:0e:e7:3f:2b:8b:f5:e3:6f:6a:f4:6e:ac:5c:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:51:EF:50:FA:D8:01:E0:E4:F1:2A:41:A2:2C:DD:20:EA:D1:0D:F0
X509v3 Authority Key Identifier:
keyid:EE:8C:5A:F1:C1:6E:15:18:CC:43:92:28:4A:1A:0E:54:F4:CB:F7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oxa8cFuFRjMQ5IoShoOVPTL91Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/MFHvUPrYAeDk8SpBoizdIOrRDfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.8.0/22
217.72.16.0/20
IPv6:
2a13:ed00::/29
Signature Algorithm: sha256WithRSAEncryption
25:23:c6:9f:5d:36:2f:de:58:36:43:d6:53:a8:50:52:4b:a1:
91:d2:0e:cc:d7:a2:9c:96:8c:bb:67:39:d9:a7:b3:5a:27:f1:
82:bb:e1:7c:28:a9:eb:96:6f:50:f8:fe:42:4b:c9:b7:19:24:
83:4e:86:32:11:3e:46:dc:3b:1c:7a:de:c3:40:9b:f3:18:c9:
0d:c7:f5:ef:cb:c0:f7:3e:76:c5:b5:1d:84:ec:e8:19:99:2d:
64:32:ac:d6:2c:50:2b:bd:ee:a2:35:ea:2d:ae:94:e4:50:e8:
6e:26:82:fd:00:ca:df:45:2b:1f:72:0c:c2:a7:6f:45:17:c6:
98:f7:f3:00:0b:50:87:2a:ce:d3:4f:98:d6:bc:82:84:c0:ba:
a3:e1:98:7a:83:b0:36:14:fe:25:17:c7:c7:0b:5c:f9:4a:f1:
90:7f:77:f4:bf:9a:12:99:6a:4c:ba:ac:a3:f2:77:95:fa:28:
cf:cb:14:ef:77:bd:83:37:9a:62:f6:99:62:8a:83:fe:e8:db:
2d:ce:4d:f2:88:b5:5d:96:a4:6f:8d:f1:71:45:6c:57:6c:c7:
07:88:3f:7a:e1:43:05:e9:35:5b:35:77:e7:9a:ed:07:b3:50:
1b:be:a8:36:60:d2:30:1d:a0:43:34:93:80:3a:70:cc:cd:e3:
90:4c:3f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:44 2026 by rpki-client