Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/MpedeZnqqfWdHaUYwzO5l8FT3pM.roa
File: MpedeZnqqfWdHaUYwzO5l8FT3pM.roa (raw, json)
Hash identifier: 75NfuiTmUQjPMCKkuZLw9T7cDXANU8tWdyz9AlGaZ6s=
Subject key identifier: 32:97:9D:79:99:EA:A9:F5:9D:1D:A5:18:C3:33:B9:97:C1:53:DE:93
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 019F22CD8C635F7227F23F659C7109AEEA1A
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/MpedeZnqqfWdHaUYwzO5l8FT3pM.roa
Signing time: Thu 02 Jul 2026 12:28:43 +0000
ROA not before: Thu 02 Jul 2026 12:28:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52053
IP address blocks: 185.255.112.0/24 maxlen: 24
193.38.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:cd:8c:63:5f:72:27:f2:3f:65:9c:71:09:ae:ea:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jul 2 12:28:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32979d7999eaa9f59d1da518c333b997c153de93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:b1:b5:f8:a8:f4:91:22:4b:25:ff:3a:75:
d9:44:c2:22:2e:e1:b3:b6:2e:45:d0:5b:e6:6a:a3:
d6:2f:05:9c:bc:b1:23:83:54:f5:71:15:72:ef:14:
a7:d6:41:14:d0:09:7a:17:46:86:5f:b1:04:5d:54:
00:e5:5b:51:fb:6f:74:f7:d8:bb:b6:d1:11:63:61:
e6:55:b5:0b:b5:d1:d7:93:7a:a4:52:5c:bb:33:8a:
5c:90:b6:0d:8c:bf:32:60:99:38:90:36:cc:f2:90:
5f:f6:be:ba:a8:4e:90:8e:e9:0d:42:e6:4f:89:39:
04:a8:a0:b2:45:6f:67:be:7e:95:55:29:3a:d2:b4:
e5:e7:09:bf:87:6d:35:84:3b:60:e0:fe:44:af:f0:
82:a9:af:e8:f2:19:b1:2f:33:d3:6f:0e:2d:ce:f1:
47:61:3e:54:52:e1:cb:ac:af:66:81:49:0d:18:76:
4d:25:40:e5:1b:12:ae:38:49:6b:3a:5d:e7:13:4b:
19:91:44:f1:ae:2c:18:ad:64:45:20:14:fe:9a:58:
7f:c2:de:92:c5:ee:2e:ba:f1:f1:63:8e:c8:69:70:
d4:8b:d9:7c:f7:47:ec:70:7a:18:ae:1b:e7:17:11:
04:28:5b:c1:1b:25:4f:06:2c:c2:bf:a3:10:66:97:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:97:9D:79:99:EA:A9:F5:9D:1D:A5:18:C3:33:B9:97:C1:53:DE:93
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/MpedeZnqqfWdHaUYwzO5l8FT3pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.112.0/24
193.38.250.0/24
Signature Algorithm: sha256WithRSAEncryption
87:dc:17:34:77:ff:c3:ab:d5:4b:48:91:36:e0:c2:b3:34:dc:
6c:f4:94:da:a9:22:92:9a:ae:a8:ec:ae:2f:79:97:cb:59:a1:
fd:a4:51:f5:c3:d0:d6:98:ce:cc:b6:9c:24:2e:10:ef:bd:91:
19:7e:9a:5f:d8:3a:f4:13:0a:f2:97:c6:31:31:2a:2e:02:56:
eb:a1:73:a3:da:0f:84:21:2b:3e:e5:49:af:7e:d9:b8:11:a6:
63:88:4a:33:c3:5e:c5:cb:df:8d:38:7e:64:87:c6:26:52:0e:
f7:4a:b4:b7:cc:b0:bd:a2:9a:e5:27:60:dc:a7:1c:e6:87:78:
2c:18:e8:4f:88:40:e7:5e:b8:b3:53:9b:13:30:e5:a9:64:d0:
44:e6:f0:80:bc:b8:9a:fd:2c:55:43:8e:f9:8b:ed:9d:f8:6e:
11:7d:48:cf:66:0f:0f:1a:52:c5:64:74:63:3f:8a:1b:c9:32:
00:9d:a4:49:1a:a5:d3:cf:27:60:51:76:77:3a:44:f4:63:65:
25:1a:3e:3c:f9:ea:ca:e8:74:e5:61:cb:d3:59:d3:14:78:92:
02:24:ec:d6:9d:cb:11:21:00:e5:63:cc:79:22:9d:99:33:72:
32:d7:45:17:58:b7:d8:3c:83:4e:6a:7c:e0:1b:28:e0:cc:8f:
f3:fb:b0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:20 2026 by rpki-client