Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MB02bz2jPfb4MjgxM6eWhM2t4yQ.roa
File: MB02bz2jPfb4MjgxM6eWhM2t4yQ.roa (raw, json)
Hash identifier: XqkeMsJHeiCW555V8/+91oAH0vdkvpuU2KySZltxvRQ=
Subject key identifier: 30:1D:36:6F:3D:A3:3D:F6:F8:32:38:31:33:A7:96:84:CD:AD:E3:24
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0F79CCA79A8E4C4EF9F288F580E15A859
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MB02bz2jPfb4MjgxM6eWhM2t4yQ.roa
Signing time: Thu 01 Oct 2026 13:17:22 +0000
ROA not before: Thu 01 Oct 2026 13:17:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402133
IP address blocks: 91.143.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:9c:ca:79:a8:e4:c4:ef:9f:28:8f:58:0e:15:a8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 1 13:17:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=301d366f3da33df6f832383133a79684cdade324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:ae:13:be:15:11:70:f3:e1:9c:20:43:33:
5d:bd:a4:f1:6c:d0:43:6d:a0:cd:7f:dd:02:b9:9c:
03:65:59:a5:16:a8:bd:e7:8d:ba:0d:96:b3:ba:7c:
69:69:7e:fc:a8:e1:5c:8c:ad:a3:99:ac:9b:ce:16:
83:5a:57:61:90:2b:34:c3:fb:a6:41:cd:bb:52:3e:
0a:b9:70:60:26:63:d2:42:a5:99:18:75:fc:da:24:
5c:5c:b1:92:15:1c:97:23:ee:73:6a:44:d3:03:ce:
32:27:90:bf:df:56:a7:19:bc:49:d0:e1:56:42:6c:
1c:c3:f5:cc:be:9c:24:cd:87:56:7b:d8:5d:94:7f:
4e:4b:00:78:c5:1e:01:77:f1:78:58:b1:5b:00:75:
8f:c7:13:4e:29:4f:60:e4:19:e7:15:d8:4f:a0:24:
d0:eb:89:4a:08:e4:2d:87:3f:c2:83:96:04:43:ca:
22:b2:b0:e5:32:3a:b3:7f:89:a2:9e:79:7a:15:6c:
c8:b1:75:2c:fe:00:59:a4:38:33:92:67:44:f5:04:
a5:4b:62:ec:d7:b7:ce:d1:63:38:8e:0c:e2:57:02:
3b:65:ea:6d:de:16:52:e0:c5:8c:a3:6f:4a:a5:6d:
e9:78:92:fc:81:91:bb:a9:dd:e5:d8:b1:f2:d2:ec:
b5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1D:36:6F:3D:A3:3D:F6:F8:32:38:31:33:A7:96:84:CD:AD:E3:24
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MB02bz2jPfb4MjgxM6eWhM2t4yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.143.180.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:7e:e1:9b:12:24:dc:66:2c:57:d3:a4:de:4c:75:86:c7:28:
a4:1d:ae:6c:24:4b:da:9e:c1:66:15:fa:da:03:1b:5a:90:8f:
af:fe:a1:f5:0a:bd:46:b6:00:bb:ed:f9:9d:2a:b5:c8:a8:f7:
76:29:d2:e2:69:b4:bc:ef:f0:b0:45:65:22:9e:3a:bf:b1:9f:
8f:e8:8d:30:1e:22:46:65:8c:96:fa:21:d2:40:48:e0:e6:c5:
69:c4:ce:9e:cb:5e:1a:67:69:87:37:69:1d:91:3b:2c:b5:30:
5d:c8:dc:d5:f5:ad:0b:13:53:55:5d:19:a2:cc:cf:fe:14:d0:
af:55:22:fd:5a:9c:60:21:bf:23:5a:4d:3c:19:c4:6e:72:7a:
fb:9b:84:e5:80:4d:51:0f:9e:a6:37:38:59:f3:f8:ae:02:e7:
d4:a8:5c:12:0e:c9:bb:a9:b5:2b:f1:c3:c2:db:6a:2c:4e:70:
cb:3e:c7:58:e9:60:8c:6d:74:18:f9:39:a7:41:f9:42:2b:0a:
41:1c:a7:63:3c:5e:49:b7:95:5d:66:c3:39:ad:89:6f:f4:07:
4e:d0:32:0f:82:b7:d2:5b:f5:86:b3:3f:9d:2f:86:64:57:79:
f8:e6:93:ae:e7:21:ff:ea:6f:32:57:98:88:5d:c8:2b:b2:cd:
78:77:a8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:01:47 2026 by rpki-client