Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/MQlwFJeHN1u-cAKLxDDZDtNDljo.roa
File: MQlwFJeHN1u-cAKLxDDZDtNDljo.roa (raw, json)
Hash identifier: /TVRNEY5UqkNYCAgcbCO3dq/LRsbsffNKIVMecfYnrw=
Subject key identifier: 31:09:70:14:97:87:37:5B:BE:70:02:8B:C4:30:D9:0E:D3:43:96:3A
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 019F4BBE7701E1FB83D65F8560A26A7ABE18
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/MQlwFJeHN1u-cAKLxDDZDtNDljo.roa
Signing time: Fri 10 Jul 2026 11:16:41 +0000
ROA not before: Fri 10 Jul 2026 11:16:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 91.108.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:be:77:01:e1:fb:83:d6:5f:85:60:a2:6a:7a:be:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jul 10 11:16:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=310970149787375bbe70028bc430d90ed343963a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:fd:69:a1:c6:b0:8c:ac:78:c9:7c:9f:78:
08:c5:ab:e2:b0:6b:e8:29:05:a4:a7:b1:98:90:01:
55:c7:c8:bf:47:f8:68:6e:bd:56:7c:70:82:87:84:
65:cd:77:0e:63:12:8e:5a:b2:90:dc:9f:4a:53:78:
6c:36:46:2c:6e:cc:57:11:00:8f:24:ca:47:8a:ad:
7a:63:40:59:14:71:be:cf:99:7e:91:d4:86:24:e5:
32:6a:02:7d:3e:d7:28:e6:81:7d:6d:31:f7:57:af:
17:f2:3c:7a:6a:79:6b:a4:a9:08:30:a4:eb:4f:0b:
99:b8:8a:90:de:23:85:e2:cc:ec:f2:08:83:45:1d:
b7:ec:63:1e:de:06:26:17:cb:6c:22:5e:00:df:9a:
c1:98:3d:7a:88:c2:21:36:8e:ee:9d:17:f3:6e:a8:
00:89:2c:d9:99:b3:4a:c7:55:0a:37:67:d8:97:49:
24:5b:18:c0:b1:74:53:4d:23:5a:8b:13:74:df:6a:
6e:51:70:53:28:91:23:c4:8c:24:ec:a9:cf:d9:3b:
e3:76:7b:1d:e1:d6:5b:6e:6a:f5:f8:41:6f:5a:22:
48:45:ed:cb:22:51:77:cf:2b:b5:63:95:08:67:67:
16:96:ac:00:97:d8:d8:db:7f:28:1f:0a:9c:d0:bd:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:09:70:14:97:87:37:5B:BE:70:02:8B:C4:30:D9:0E:D3:43:96:3A
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/MQlwFJeHN1u-cAKLxDDZDtNDljo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.81.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:ca:d6:b8:8b:f2:75:8f:a4:e8:aa:75:6c:16:18:64:18:b4:
2d:73:0e:9f:d1:2b:25:c0:98:bd:a0:a6:62:fb:73:fa:0c:a2:
64:12:e4:9f:88:e8:c7:f1:75:34:c6:cf:3e:90:68:e4:42:e8:
90:a1:9a:3d:54:c1:80:19:46:a0:9a:0c:e6:67:05:d0:77:de:
2c:1a:1a:aa:c4:c8:bc:f7:83:60:79:38:50:bc:bc:7f:0c:ee:
1b:8e:ad:ed:91:9b:9e:b3:35:e0:a0:59:b8:87:59:2f:03:3b:
7e:35:b9:51:cf:64:d3:b1:27:66:d7:38:7d:0f:d9:c4:15:3f:
a9:9e:63:8e:61:b3:5b:58:92:29:88:0a:37:72:f2:9e:1b:e4:
f5:8b:9c:aa:8d:00:84:63:20:8a:c4:42:37:18:88:34:06:65:
36:90:16:7f:29:ca:e9:f7:0f:fb:ca:3a:1e:ec:61:8b:18:e3:
bb:2c:57:37:c6:11:c0:9d:38:7b:9c:25:b8:73:60:a9:e9:8d:
39:e0:62:8b:40:1f:36:8d:e4:0b:c1:1e:4e:af:6f:c2:ed:d1:
b6:9f:10:0f:dd:bf:ca:87:1a:37:27:bb:e1:e1:05:de:0f:0f:
aa:20:f9:8c:54:1f:b0:43:66:b9:b4:8f:1a:0e:7b:42:0e:6b:
8a:9a:54:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:58 2026 by rpki-client