Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/MC5MG-Z6VtT9_YIrjUXUEcfUGlw.roa
File: MC5MG-Z6VtT9_YIrjUXUEcfUGlw.roa (raw, json)
Hash identifier: gMM1r77gBOSVZXRH+MUIS9ejwECkB+oIOrPuTalHxFg=
Subject key identifier: 30:2E:4C:1B:E6:7A:56:D4:FD:FD:82:2B:8D:45:D4:11:C7:D4:1A:5C
Certificate issuer: /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial: 01A0B9BC190494C049D37318F396370DAA93
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/MC5MG-Z6VtT9_YIrjUXUEcfUGlw.roa
Signing time: Sat 19 Sep 2026 12:55:07 +0000
ROA not before: Sat 19 Sep 2026 12:55:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210036
IP address blocks: 193.36.104.0/24 maxlen: 24
193.36.105.0/24 maxlen: 24
193.36.106.0/24 maxlen: 24
2a0d:d740::/48 maxlen: 48
2a0d:d740:105::/48 maxlen: 48
2a0d:d741::/40 maxlen: 48
2a0d:d742::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:bc:19:04:94:c0:49:d3:73:18:f3:96:37:0d:aa:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Validity
Not Before: Sep 19 12:55:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=302e4c1be67a56d4fdfd822b8d45d411c7d41a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:5b:61:aa:cf:6a:31:8f:b6:8c:7c:de:06:
79:47:10:4f:f2:9a:4d:53:37:c3:3d:c6:4b:26:d3:
13:2e:11:b5:de:01:59:b0:b8:4b:04:26:38:fa:4a:
c8:0f:31:e0:c2:2f:7b:b6:1a:a5:e7:87:77:b5:d3:
a7:86:ba:2d:de:47:87:81:ac:5f:62:99:b8:54:e3:
e0:ef:c3:e2:e4:70:c2:69:97:d0:5e:93:83:91:61:
59:74:57:9f:34:bc:11:11:da:aa:a2:e5:46:a2:6c:
ef:2a:da:82:d8:f8:47:c0:c2:2c:a2:ca:0e:5a:9b:
a3:0a:c9:a5:c2:d9:35:85:5e:b6:31:9b:ab:ea:c0:
67:99:55:7d:63:f7:fe:01:6f:11:a8:b8:3c:bf:3a:
cb:bd:25:49:9a:46:1b:65:93:fc:7c:93:c8:af:3e:
67:f9:99:b0:07:56:e3:b7:a0:07:2e:6f:3b:23:54:
41:07:0e:d9:b5:07:62:29:a2:31:f7:f0:96:c5:4b:
e0:09:7b:f7:17:62:6e:1c:3c:e4:c1:8e:46:6d:b8:
96:3b:41:b5:2f:79:79:2d:ac:11:a6:eb:b2:f8:c6:
2c:c8:40:ce:5d:cd:45:c5:0c:10:7b:3d:6d:43:53:
10:54:d3:6d:01:ce:1f:a5:36:9d:b6:c3:fc:84:bf:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2E:4C:1B:E6:7A:56:D4:FD:FD:82:2B:8D:45:D4:11:C7:D4:1A:5C
X509v3 Authority Key Identifier:
keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/MC5MG-Z6VtT9_YIrjUXUEcfUGlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.104.0-193.36.106.255
IPv6:
2a0d:d740::/48
2a0d:d740:105::/48
2a0d:d741::/40
2a0d:d742::/45
Signature Algorithm: sha256WithRSAEncryption
4d:46:08:92:65:39:ca:f8:ee:75:fb:14:28:a8:5a:04:e9:64:
75:e3:95:40:41:88:fd:de:0d:4a:00:9c:9c:b2:87:b7:9a:d4:
27:72:75:0f:8e:f7:b5:50:31:78:70:0d:ef:18:fb:ae:0e:21:
04:8d:df:80:af:e6:54:73:6c:f1:ee:07:26:ec:b2:08:ce:c8:
63:38:13:a7:71:3e:25:6b:96:fa:be:54:46:dc:08:55:54:ba:
97:20:9b:88:cf:b5:68:f7:e3:be:25:99:26:a8:a5:c2:8f:38:
e6:3e:f2:0e:96:b1:81:9e:29:23:81:dd:e0:d1:47:8c:4a:82:
02:4a:0e:b1:5a:62:58:48:f3:df:f3:86:f2:bd:68:64:e3:a6:
10:cb:ff:69:96:3f:56:3f:03:24:45:5f:3d:45:e4:c1:fd:16:
e4:f8:39:1b:3e:42:2a:62:b0:44:9b:98:9c:dc:c3:80:5b:68:
96:7f:33:0b:45:fd:c9:23:f9:e2:58:93:6c:e6:cb:6c:61:e8:
57:7a:5d:0d:69:ac:1c:9f:f4:af:86:51:6a:e1:52:bc:73:ec:
d3:25:a4:0d:13:cb:47:9e:d1:4d:c7:8f:22:75:7c:ac:eb:31:
6d:00:1d:67:bd:1e:5d:b4:c5:8c:5d:e4:c3:2c:84:9f:83:6e:
98:db:f0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 18:25:37 2026 by rpki-client