Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e6ee01-75f1-4914-871b-8aab7ba48c5b/1/MNrdK5vDksuewXpfVVuD_eMgfuM.roa
File: MNrdK5vDksuewXpfVVuD_eMgfuM.roa (raw, json)
Hash identifier: JUPcnhvQ4+hiewHTAETvtztof3XD+lzlJ3oNiR/xESg=
Subject key identifier: 30:DA:DD:2B:9B:C3:92:CB:9E:C1:7A:5F:55:5B:83:FD:E3:20:7E:E3
Certificate issuer: /CN=f345796ba5d11e652afa1ef8e644f0ed0c185388
Certificate serial: 019F41050E0AD9BC302C8CB5D8341B2D4FC0
Authority key identifier: F3:45:79:6B:A5:D1:1E:65:2A:FA:1E:F8:E6:44:F0:ED:0C:18:53:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80V5a6XRHmUq-h745kTw7QwYU4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e6ee01-75f1-4914-871b-8aab7ba48c5b/1/MNrdK5vDksuewXpfVVuD_eMgfuM.roa
Signing time: Wed 08 Jul 2026 09:17:58 +0000
ROA not before: Wed 08 Jul 2026 09:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33965
IP address blocks: 185.220.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e6ee01-75f1-4914-871b-8aab7ba48c5b/1/80V5a6XRHmUq-h745kTw7QwYU4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e6ee01-75f1-4914-871b-8aab7ba48c5b/1/80V5a6XRHmUq-h745kTw7QwYU4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/80V5a6XRHmUq-h745kTw7QwYU4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:05:0e:0a:d9:bc:30:2c:8c:b5:d8:34:1b:2d:4f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f345796ba5d11e652afa1ef8e644f0ed0c185388
Validity
Not Before: Jul 8 09:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30dadd2b9bc392cb9ec17a5f555b83fde3207ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8c:8d:97:a5:9b:be:4d:59:45:85:fc:31:93:
cf:b5:fd:c7:32:d5:e9:4e:1c:1d:26:f9:1d:a2:81:
3f:e0:f5:8e:61:c9:43:23:c5:99:e8:69:51:7c:c4:
5a:fa:09:2c:2a:d6:7f:79:56:7f:cb:c2:ea:f3:38:
77:87:dd:cf:0a:d9:66:81:d7:8d:63:47:77:60:df:
aa:99:a0:2e:8f:6c:b7:9c:2f:94:52:22:eb:0b:f2:
7d:92:62:42:c8:7f:6f:52:54:46:8e:83:88:c0:27:
7f:16:db:3f:39:b5:76:5a:9f:6b:e9:7e:13:ae:45:
61:8c:56:b6:30:eb:e5:0f:30:81:7c:32:9e:32:b2:
2e:49:b7:cb:86:9d:ad:24:be:9f:8b:7e:a8:77:9e:
ce:7a:46:15:b5:d3:6d:7c:d2:fd:dd:b9:7a:0a:7c:
6f:59:b3:85:80:be:b8:a6:c3:de:d5:76:c3:75:10:
af:fa:92:97:1a:0a:f1:89:a0:7c:67:3c:2b:4b:2d:
32:1a:18:37:19:92:56:2c:49:02:01:2f:4e:ac:e3:
c8:e5:ec:ed:b7:18:6e:88:ab:eb:1a:0d:c5:ac:e7:
ae:db:6e:9c:25:3c:58:29:9b:9d:8a:19:39:5a:5f:
01:eb:7c:c4:58:1c:41:20:b4:42:b3:9b:af:c4:f9:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DA:DD:2B:9B:C3:92:CB:9E:C1:7A:5F:55:5B:83:FD:E3:20:7E:E3
X509v3 Authority Key Identifier:
keyid:F3:45:79:6B:A5:D1:1E:65:2A:FA:1E:F8:E6:44:F0:ED:0C:18:53:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80V5a6XRHmUq-h745kTw7QwYU4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e6ee01-75f1-4914-871b-8aab7ba48c5b/1/MNrdK5vDksuewXpfVVuD_eMgfuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e6ee01-75f1-4914-871b-8aab7ba48c5b/1/80V5a6XRHmUq-h745kTw7QwYU4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.83.0/24
Signature Algorithm: sha256WithRSAEncryption
57:0e:2f:14:7d:ef:9a:44:3e:35:b6:dc:e6:f1:5f:0f:2a:5a:
81:b4:e9:87:1d:7c:f7:7d:06:32:47:a0:d4:53:0e:90:59:9e:
8e:b6:d9:c5:9c:69:44:6b:30:69:65:f9:63:de:a6:b2:92:8c:
69:3b:e4:68:dd:ac:35:61:2f:ca:aa:2c:23:24:71:bb:b5:22:
81:49:ea:df:73:73:60:a2:46:23:68:b7:13:ad:80:df:e5:30:
cb:fb:2e:84:1c:9a:62:be:ee:27:c5:fb:43:31:51:ef:67:0a:
4d:d6:79:d7:37:56:d4:f2:c3:68:75:e8:23:fd:3e:c7:37:85:
07:f9:f9:bd:06:60:77:c6:74:a3:e8:99:f2:30:a9:23:b0:b0:
92:49:0b:a4:64:77:bc:47:f8:86:36:6e:e9:75:02:7b:92:25:
a7:93:9d:e7:cc:dd:cb:bb:72:7a:0a:0a:6b:e2:66:7c:26:0d:
13:5b:58:36:6c:a1:69:89:a4:7b:d4:fb:23:22:75:21:9c:8a:
bb:f4:ea:5a:d5:89:21:b4:82:44:eb:9b:83:95:18:0c:8d:9d:
da:95:2a:c3:f3:b4:9e:7b:ca:ae:a1:72:21:0b:a6:ac:af:56:
27:21:b2:b9:84:3e:81:69:40:cd:de:c0:a4:fc:64:07:c9:2c:
05:c8:46:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:35 2026 by rpki-client