Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/McRpwaQnqqZOGTag3hww5pMg2ZA.roa
File: McRpwaQnqqZOGTag3hww5pMg2ZA.roa (raw, json)
Hash identifier: S2MuhIxLoEt0UYzfR1rcMJ/qgJF6eA4a0C2qNQuo9nk=
Subject key identifier: 31:C4:69:C1:A4:27:AA:A6:4E:19:36:A0:DE:1C:30:E6:93:20:D9:90
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 019F400AE6322C5693989F27671BD1C51CAD
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/McRpwaQnqqZOGTag3hww5pMg2ZA.roa
Signing time: Wed 08 Jul 2026 04:44:43 +0000
ROA not before: Wed 08 Jul 2026 04:44:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202029
IP address blocks: 91.213.151.0/24 maxlen: 24
91.213.157.0/24 maxlen: 24
91.213.167.0/24 maxlen: 24
185.212.194.0/24 maxlen: 24
185.221.193.0/24 maxlen: 24
195.8.102.0/24 maxlen: 24
195.8.110.0/24 maxlen: 24
195.230.107.0/24 maxlen: 24
2a04:acc0:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:0a:e6:32:2c:56:93:98:9f:27:67:1b:d1:c5:1c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Jul 8 04:44:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31c469c1a427aaa64e1936a0de1c30e69320d990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:0c:4d:e1:9d:77:d1:21:0a:a1:42:62:d9:
0f:a9:a2:85:87:38:62:4a:b0:74:9f:c2:fd:a5:f2:
46:d9:f9:65:11:b1:7d:94:14:42:49:41:9a:35:73:
be:b3:f2:8f:92:56:02:87:84:2a:02:4b:f4:7f:0e:
43:f7:91:93:ca:c9:80:d3:19:bb:b2:b5:63:d8:8e:
c6:f9:f2:90:ce:09:2e:ba:c8:0b:50:28:86:f6:23:
00:c2:89:cd:d0:32:a5:47:e3:fa:04:51:59:9f:d5:
18:c5:91:eb:df:c1:8c:69:ea:77:ac:56:3d:33:cc:
77:6e:de:ab:cf:7d:70:59:1e:dc:a8:8f:56:68:6b:
77:d0:50:2a:2d:70:dd:b4:90:01:24:a4:02:33:e0:
9e:5c:d1:63:80:86:78:d5:6d:5e:da:10:15:a8:20:
23:7e:2d:0e:66:30:9c:db:c0:fc:35:63:4e:e2:31:
2a:42:c7:0f:90:be:54:73:07:be:bc:56:c2:27:b4:
12:d7:81:6f:97:d4:14:cb:8a:c4:bb:e4:8f:1d:f7:
5c:72:d9:dd:1f:c5:5a:1f:93:20:eb:53:e9:20:98:
04:6d:ec:1a:d9:36:77:4e:08:8f:fb:00:41:f9:a5:
36:c7:08:50:8d:57:ba:23:4a:70:56:2d:cb:6b:23:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C4:69:C1:A4:27:AA:A6:4E:19:36:A0:DE:1C:30:E6:93:20:D9:90
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/McRpwaQnqqZOGTag3hww5pMg2ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.151.0/24
91.213.157.0/24
91.213.167.0/24
185.212.194.0/24
185.221.193.0/24
195.8.102.0/24
195.8.110.0/24
195.230.107.0/24
IPv6:
2a04:acc0:10::/44
Signature Algorithm: sha256WithRSAEncryption
82:2b:97:a0:99:3d:d8:d7:83:00:a3:e6:bd:34:ab:df:73:ef:
52:cd:2c:49:67:6b:d4:dd:e1:db:e3:54:81:61:09:05:d3:d8:
a5:e3:2d:fc:f6:89:62:c2:27:11:63:b7:10:b9:32:a7:39:65:
7a:94:af:15:85:3b:3f:c6:db:81:a7:c1:aa:56:69:99:c0:e4:
d1:2e:e2:84:f8:e8:73:07:ee:8f:db:7e:70:e8:fd:a7:51:df:
92:65:0e:8b:e4:17:c1:9c:64:58:3e:e4:49:bf:81:86:36:e5:
19:5c:e1:4d:de:6e:d1:95:cb:38:9f:f5:fc:5b:45:fe:29:c1:
c4:17:8f:4b:6c:61:97:3a:86:66:74:c9:bd:db:f8:0f:82:ae:
06:65:f4:6f:6a:4c:f4:7c:f4:2a:9a:4c:a4:0b:73:56:fa:1b:
55:f6:2d:6a:62:0f:2c:d6:99:aa:42:f0:66:94:66:8b:e9:8a:
ff:b7:7b:83:f4:1a:ac:cf:85:24:36:b0:60:c4:12:f0:de:6c:
06:5d:4c:99:a7:88:83:fd:95:c4:85:67:24:d1:38:2b:d7:02:
9a:b1:8a:37:d0:ea:da:ca:c0:89:e3:4f:dd:82:c8:60:61:a3:
7d:fd:92:08:d1:c5:c8:c3:f6:d3:c8:b2:39:35:1c:1d:8d:ae:
43:8f:48:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:30 2026 by rpki-client