Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MmuuZMOQHwHpxf3YI72_TudFkEQ.roa
File: MmuuZMOQHwHpxf3YI72_TudFkEQ.roa (raw, json)
Hash identifier: ADOPErQybJxkpZ7rWllBUeh2aTRX/fN7Yqei5qfaz/U=
Subject key identifier: 32:6B:AE:64:C3:90:1F:01:E9:C5:FD:D8:23:BD:BF:4E:E7:45:90:44
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A13DDD4438CE93931524E971E961E2AA74
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MmuuZMOQHwHpxf3YI72_TudFkEQ.roa
Signing time: Thu 15 Oct 2026 04:41:13 +0000
ROA not before: Thu 15 Oct 2026 04:41:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207700
IP address blocks: 194.87.116.0/23 maxlen: 23
194.87.154.0/23 maxlen: 23
194.87.176.0/23 maxlen: 23
194.87.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:dd:44:38:ce:93:93:15:24:e9:71:e9:61:e2:aa:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 15 04:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=326bae64c3901f01e9c5fdd823bdbf4ee7459044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:29:ec:c1:53:7e:d6:e5:9f:df:a9:f4:af:
c7:c8:a6:cf:10:de:95:28:50:a5:ff:d4:1e:c5:d6:
58:df:0f:93:94:f0:7a:0e:c6:1b:10:74:0d:35:d0:
76:85:e2:70:fc:b9:b1:69:3f:f2:14:3a:00:bf:d2:
68:39:d3:4a:8f:29:3e:a6:7d:b8:8c:18:4e:0a:cb:
1b:2d:9a:5e:4b:cc:ea:2d:e3:d4:87:af:be:ad:43:
fb:fe:f3:2a:3d:15:2c:04:c7:05:61:7e:b6:6d:70:
a0:67:ce:fc:fc:6a:e6:b4:20:eb:27:b1:af:2f:2b:
e9:12:55:ee:f9:7e:67:fc:06:3f:29:cd:80:0a:10:
af:96:6e:3b:2f:a9:74:e3:e8:ba:96:07:e5:d8:12:
34:72:f6:10:ab:84:b8:76:fb:23:4e:0f:85:68:25:
89:0a:7c:a7:68:1c:a1:c1:0d:4b:3e:ad:8d:f4:84:
b8:f9:67:a7:0e:18:0f:49:ab:de:b3:93:a7:0d:53:
c6:90:be:69:f2:b9:d9:58:08:8b:03:83:0e:08:da:
32:ec:e7:78:03:35:e3:4d:df:97:f3:db:48:45:4d:
ce:4b:af:bb:3d:75:20:2f:97:62:50:ce:49:cc:ef:
eb:c1:6f:56:e2:9f:e8:e2:9d:c3:5a:7a:9c:be:36:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6B:AE:64:C3:90:1F:01:E9:C5:FD:D8:23:BD:BF:4E:E7:45:90:44
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MmuuZMOQHwHpxf3YI72_TudFkEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.116.0/23
194.87.154.0/23
194.87.176.0/23
194.87.180.0/23
Signature Algorithm: sha256WithRSAEncryption
25:e9:43:26:59:1b:e6:65:cf:8f:98:32:60:b7:90:76:a0:f3:
3f:89:0e:aa:f3:32:ba:86:49:bc:7d:34:cf:d4:c3:38:fb:52:
b1:b6:c5:a3:13:f2:62:49:61:f4:62:84:72:fa:0e:8d:35:e1:
4b:04:12:ed:e7:fe:8b:10:dc:8a:0e:7c:ea:fa:df:27:25:32:
81:c6:c5:6e:39:f3:82:e7:49:68:65:b7:fc:60:22:e2:6b:f0:
23:e3:a0:45:0c:96:83:76:f1:c2:dd:ae:6e:5c:5b:e6:b3:3c:
6c:41:e2:a7:1d:4e:70:a1:a6:22:f5:56:67:3a:9b:76:73:0c:
a4:99:65:bc:54:4a:9e:bd:47:8d:17:2c:88:c4:7d:c8:a7:73:
a3:29:b4:ce:b9:8a:ec:02:64:fd:41:15:a9:86:04:52:fa:67:
db:b1:19:5c:82:f2:da:ac:61:07:b6:76:ea:10:88:7c:52:01:
b5:0f:1d:bf:25:1d:21:b6:f3:07:3e:bc:b0:0a:f3:e5:38:56:
40:bd:85:e3:0d:9c:1e:42:bf:e5:bb:ba:92:d6:b8:45:38:a0:
03:10:9a:f8:48:56:c6:8a:7f:cf:63:2c:8f:cd:14:49:2c:85:
48:d2:8b:a9:f2:15:bd:24:14:4e:a2:78:94:5b:c7:2a:c4:52:
1b:82:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:05 2026 by rpki-client