Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MOuOdMppoqQpRt8HOcN_R645xGs.roa
File: MOuOdMppoqQpRt8HOcN_R645xGs.roa (raw, json)
Hash identifier: A1leyQihHCe8XwY3PphFQT4xigqWSo2y+S8HMp3DnjA=
Subject key identifier: 30:EB:8E:74:CA:69:A2:A4:29:46:DF:07:39:C3:7F:47:AE:39:C4:6B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FF57A7C23B711726036EF476227E87577
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MOuOdMppoqQpRt8HOcN_R645xGs.roa
Signing time: Wed 12 Aug 2026 10:17:52 +0000
ROA not before: Wed 12 Aug 2026 10:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61071
IP address blocks: 85.217.164.0/23 maxlen: 32
85.217.166.0/24 maxlen: 24
85.217.176.0/22 maxlen: 24
85.217.180.0/24 maxlen: 24
87.120.246.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:7a:7c:23:b7:11:72:60:36:ef:47:62:27:e8:75:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 12 10:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30eb8e74ca69a2a42946df0739c37f47ae39c46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:fd:1b:5b:ea:fb:84:66:5c:72:92:1c:36:
f3:86:5f:00:0a:ef:2f:51:5c:f0:90:88:66:2f:41:
90:9d:60:e6:1d:91:a6:f3:5c:22:01:65:92:ed:76:
38:a9:e1:e8:30:73:2e:2a:af:bd:69:d3:31:a1:42:
d4:67:e5:9f:d1:fc:8c:44:3a:00:22:f7:82:a5:47:
e9:c3:11:bc:d1:29:21:61:ea:17:c6:6c:22:74:93:
dc:1c:52:7a:f4:f4:1a:55:49:2b:a6:b1:bd:c1:42:
b9:e5:a4:fd:df:59:7e:00:09:52:a9:b6:f5:75:c6:
9b:f6:31:65:4a:a6:a2:ac:7b:dd:7c:f2:35:5b:93:
73:29:43:ca:db:0d:40:bd:15:26:9c:05:bb:31:66:
d3:3c:59:b1:49:d4:0e:d1:5c:27:ac:9f:9d:5c:c7:
b4:41:7c:21:9c:78:10:0f:ad:45:c7:18:f4:2c:ea:
2c:87:43:1d:1e:0f:88:14:e1:75:8f:5d:5d:0a:ee:
c4:d9:db:cd:d1:29:80:7d:e3:2e:d8:b2:b9:0c:aa:
a3:87:41:3e:db:b8:dd:33:e1:09:84:df:cf:c2:fa:
d5:f2:79:05:62:49:80:62:9d:d0:8b:01:57:cf:87:
15:0b:99:df:a6:10:6f:37:fb:5e:65:ee:86:6b:e4:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EB:8E:74:CA:69:A2:A4:29:46:DF:07:39:C3:7F:47:AE:39:C4:6B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MOuOdMppoqQpRt8HOcN_R645xGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.164.0-85.217.166.255
85.217.176.0-85.217.180.255
87.120.246.0/24
Signature Algorithm: sha256WithRSAEncryption
91:58:52:f3:02:48:8f:4d:96:9b:a2:83:cf:7d:66:dc:d4:15:
76:bf:4c:2f:61:5e:45:a1:2c:cc:46:9d:91:82:fd:d3:43:23:
d4:ec:3a:24:ca:d8:4b:f0:f7:6f:c1:80:76:a9:07:26:5d:9a:
a2:75:bd:e4:78:fe:21:8c:36:4e:7e:d8:e0:21:3a:46:a5:fb:
9e:bb:73:c3:bc:05:47:01:d1:3d:bf:a9:66:f3:8d:13:9b:71:
97:05:bb:31:d8:6a:6c:38:bd:f9:d3:58:08:45:ee:c7:2e:f0:
07:cb:05:73:81:8f:86:d9:fd:bd:0a:d6:30:33:eb:f8:8b:f6:
2c:9a:c8:10:e4:cb:1f:9f:a8:29:d8:c0:6d:f0:e2:be:53:6f:
a2:42:f8:88:37:d0:28:bd:62:03:a6:be:10:22:5f:ed:b3:f3:
d8:a1:4b:4f:20:a5:ac:7a:73:2b:3e:06:6c:26:b4:be:bd:56:
11:5d:4b:a2:91:8b:fa:c9:eb:f6:6f:d6:ae:03:62:b8:59:01:
04:3b:f0:95:55:de:05:d1:a0:7b:e8:f3:80:8b:98:6f:32:be:
88:4f:36:f7:42:cc:df:7b:1a:04:c7:1f:91:d1:79:2b:c6:43:
e8:57:81:92:26:ec:42:99:de:05:a5:e8:10:7b:75:c1:e6:7c:
b8:1d:d1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 16:32:38 2026 by rpki-client