Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Mc-_JtgRNRCcYgORTNmZfVQHa6o.roa
File: Mc-_JtgRNRCcYgORTNmZfVQHa6o.roa (raw, json)
Hash identifier: HfsFVuOUKF/4+nJFu4ttjZSwvBSFHwEblFKOklZckgQ=
Subject key identifier: 31:CF:BF:26:D8:11:35:10:9C:62:03:91:4C:D9:99:7D:54:07:6B:AA
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1D5EE1AF1ADC787ECE13B8CDCFC26119D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Mc-_JtgRNRCcYgORTNmZfVQHa6o.roa
Signing time: Fri 13 Nov 2026 17:21:53 +0000
ROA not before: Fri 13 Nov 2026 17:21:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 74.112.152.0/24 maxlen: 24
191.219.22.0/24 maxlen: 24
200.102.188.0/24 maxlen: 24
205.237.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:ee:1a:f1:ad:c7:87:ec:e1:3b:8c:dc:fc:26:11:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 13 17:21:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31cfbf26d81135109c6203914cd9997d54076baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:24:29:cb:1d:b6:07:d5:b5:4a:97:20:c8:
9f:75:1f:81:b3:23:6a:1e:ba:26:11:1a:38:99:1c:
4c:e4:dc:39:1c:af:9d:14:a0:c3:cd:72:d6:a2:b1:
32:c7:8e:04:ec:3e:94:67:84:af:45:6e:7a:ee:73:
93:e0:54:21:71:b7:37:bc:1c:c1:ec:36:a7:76:24:
7a:04:ca:f9:b7:72:9e:6e:67:79:6c:5d:a8:22:65:
5f:a3:60:20:c6:13:9e:90:e7:40:88:57:2c:a8:b8:
1c:00:28:84:7a:b2:60:b1:10:50:6f:7c:26:af:b1:
95:a5:fd:df:5b:62:f0:77:8e:9a:61:00:96:d9:0f:
93:e9:a6:15:92:72:f3:0a:e1:1a:da:4d:7f:81:e1:
96:7b:66:f4:e7:70:0a:b5:49:71:35:01:ce:4d:50:
97:97:8f:9e:63:7c:11:96:c2:7c:96:05:4b:1d:34:
c4:a0:b5:3c:b0:d7:0d:98:1f:60:98:55:ae:4a:20:
f5:a0:38:f6:8e:fa:0a:a9:12:89:6e:9b:d2:bd:c0:
50:e2:e5:80:fe:40:60:3d:ea:7b:f5:bb:01:f2:c3:
24:c9:b2:7b:80:8d:ed:7d:e3:a4:50:1a:14:a4:60:
4d:32:a4:83:3d:b8:5a:e0:12:57:e2:7d:d3:d5:e7:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CF:BF:26:D8:11:35:10:9C:62:03:91:4C:D9:99:7D:54:07:6B:AA
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Mc-_JtgRNRCcYgORTNmZfVQHa6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.112.152.0/24
191.219.22.0/24
200.102.188.0/24
205.237.89.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:31:69:e5:77:f6:78:3b:a5:4e:37:9c:bc:35:51:8c:b7:d2:
21:2e:52:09:df:70:9f:e8:75:8c:99:f2:94:4d:c6:62:22:be:
a4:5c:b6:25:36:00:b6:e8:be:9f:ed:b1:14:11:fe:e5:34:2d:
86:97:43:90:b4:a8:eb:eb:c7:db:14:59:2d:e0:7a:ef:06:eb:
49:67:07:66:ae:68:f2:da:92:af:e0:86:48:e9:87:38:8e:ce:
16:41:5c:7e:fb:e8:70:7f:dd:62:63:3e:4b:5f:3d:35:5d:46:
bc:e0:a2:b4:d6:e5:ae:a3:2d:ec:5e:08:85:86:02:5a:58:eb:
41:b7:9b:35:43:3e:f1:6a:30:2e:21:ba:91:28:17:26:01:eb:
bf:32:0a:be:f1:ef:f2:2b:f1:d4:8c:8f:e9:e4:aa:be:e8:e9:
90:c6:d7:a3:f4:36:5e:43:d7:1f:36:ce:6c:87:d0:2d:7b:8a:
93:ae:6a:80:f3:c6:7b:de:23:3e:8c:32:9c:2c:05:f5:08:d1:
44:ca:36:e9:37:ee:43:53:db:5e:dd:2a:35:65:15:10:89:c5:
9a:61:20:35:95:ed:cf:3e:7c:a1:7f:92:ce:31:54:d9:3d:e9:
5a:b4:c4:a9:49:3d:c7:29:70:6b:cc:c2:5c:c4:99:e6:72:43:
55:a7:d5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:06:29 2026 by rpki-client