Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MUITpUf9S5i8v_CSRcvy-WEkAr8.roa
File: MUITpUf9S5i8v_CSRcvy-WEkAr8.roa (raw, json)
Hash identifier: t0ow5S/9deyRinO2IVfuk15ypigwqrSNH90HxUFFL4I=
Subject key identifier: 31:42:13:A5:47:FD:4B:98:BC:BF:F0:92:45:CB:F2:F9:61:24:02:BF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019E975CA2AF3DBDF22DDF804FD4D1F26017
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MUITpUf9S5i8v_CSRcvy-WEkAr8.roa
Signing time: Fri 05 Jun 2026 10:38:11 +0000
ROA not before: Fri 05 Jun 2026 10:38:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44828
IP address blocks: 45.139.123.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
87.120.191.0/24 maxlen: 24
87.121.133.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:5c:a2:af:3d:bd:f2:2d:df:80:4f:d4:d1:f2:60:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 5 10:38:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=314213a547fd4b98bcbff09245cbf2f9612402bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:4b:67:42:68:11:c0:3b:51:80:64:66:ab:
c7:5a:39:c5:c0:b6:77:43:8c:53:a3:d6:89:4a:08:
17:01:91:3c:2b:8e:90:c6:23:81:e0:61:0c:2b:17:
de:03:db:53:78:b9:04:d9:b9:26:e8:30:41:b1:db:
24:7f:28:a2:12:e4:a6:75:d4:96:55:8b:12:7b:99:
32:5e:e9:c3:e1:6c:2e:12:70:8f:6c:b7:7d:70:67:
0b:07:7a:3e:ce:bc:7a:63:a5:ec:0f:a6:70:72:93:
df:d8:8f:30:1e:d7:22:92:64:c5:4e:68:7a:70:56:
dc:43:52:9f:ed:2c:a6:49:fc:eb:96:d4:3c:c8:75:
b3:aa:58:39:0c:ec:cc:f0:61:73:9c:de:82:54:12:
e3:8e:e1:07:b4:6b:e4:13:62:6d:34:08:10:6d:bb:
8c:cb:20:ed:07:61:cc:ad:9d:f7:bf:b1:31:fe:54:
56:d7:57:a7:02:16:0c:97:c2:e7:55:88:5e:ab:f7:
40:09:60:49:04:04:fc:be:50:fe:a4:d7:f3:b1:00:
aa:e9:61:2a:9d:3f:f3:f6:78:2e:84:08:23:e8:2a:
53:17:6c:dc:62:f9:91:f3:22:f0:65:78:14:0a:87:
c6:b5:f1:59:33:e3:08:51:78:12:5a:e0:98:3c:d9:
14:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:42:13:A5:47:FD:4B:98:BC:BF:F0:92:45:CB:F2:F9:61:24:02:BF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MUITpUf9S5i8v_CSRcvy-WEkAr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.123.0/24
87.120.33.0/24
87.120.191.0/24
87.121.133.0/24
94.154.161.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1a:f8:70:dc:fb:03:0b:8e:a7:28:98:ce:41:b9:60:50:2c:
0b:0a:0c:d5:ab:60:42:78:7f:66:ab:0d:cf:09:bf:3d:1c:a8:
b3:3d:ca:db:17:15:19:8b:ed:e0:51:df:8a:f0:90:40:b1:63:
bb:d0:8a:c4:66:cb:53:d1:bf:c1:66:e8:6f:58:66:c4:c2:e6:
c0:ad:7d:c5:7f:15:ec:8c:72:60:7b:29:1f:dc:91:cc:09:4c:
df:84:f1:15:bd:5e:bf:42:75:5d:e0:2a:a8:1d:7f:e3:ee:ba:
3a:19:c6:a7:32:12:5a:4c:b3:62:d6:fe:78:63:77:bc:f6:f5:
d9:cf:35:a7:1b:be:d0:17:6e:25:82:06:2d:ea:f2:80:c2:6c:
4f:66:23:36:dc:58:87:e0:49:62:0b:8c:78:41:eb:6a:53:a5:
2d:05:97:bc:3d:c8:a1:4b:f9:a4:68:bc:c3:8f:21:06:96:cc:
39:12:5c:b6:99:7b:ec:64:40:41:c8:1b:20:4e:ac:7a:33:02:
56:36:e4:79:69:24:ef:2f:34:bc:05:09:f0:35:b9:2e:3d:bf:
c5:36:42:2c:36:7c:c0:1a:2d:89:de:2d:10:54:03:82:be:83:
c7:a6:e4:a3:0f:54:54:2a:ed:c3:78:21:b9:d9:49:b8:47:77:
5f:ad:9a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 14:07:36 2026 by rpki-client