Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/MDPAodA0zvA2NWT7ER8dOVR7L88.roa
File: MDPAodA0zvA2NWT7ER8dOVR7L88.roa (raw, json)
Hash identifier: mJmiRwrgZ5I3NJ+cWSYWfQPR/ysaLHDjUSeXrv0sX/Y=
Subject key identifier: 30:33:C0:A1:D0:34:CE:F0:36:35:64:FB:11:1F:1D:39:54:7B:2F:CF
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 019ED14ABC69695B2711E19B0EF2F2A3F3FF
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/MDPAodA0zvA2NWT7ER8dOVR7L88.roa
Signing time: Tue 16 Jun 2026 16:36:36 +0000
ROA not before: Tue 16 Jun 2026 16:36:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36002
IP address blocks: 152.175.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:4a:bc:69:69:5b:27:11:e1:9b:0e:f2:f2:a3:f3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Jun 16 16:36:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3033c0a1d034cef0363564fb111f1d39547b2fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:3f:d2:38:24:b5:93:d2:3e:2b:7d:fc:d3:
b4:d4:1c:4c:91:b8:d6:83:dc:b3:1a:6e:f9:6e:d5:
4f:3d:8f:5e:d2:af:d1:d3:7d:9b:42:2a:10:92:85:
ec:91:4b:35:d0:2f:3b:4f:b1:97:a1:60:3d:4c:53:
38:fb:8b:3c:38:ce:05:33:6e:c1:60:53:91:d2:3f:
92:e4:25:91:9d:5c:97:ce:e5:8b:39:a5:89:cc:fe:
08:c7:3c:7f:01:09:5b:15:97:4b:50:da:c3:12:c6:
0a:a7:c4:c9:a2:13:56:71:0f:ee:ac:ae:7c:aa:6a:
e3:5c:bb:e0:4e:36:fb:7a:4d:96:53:41:e5:79:76:
e9:dd:77:73:7b:04:e6:19:5f:83:d9:99:e1:d9:47:
5d:22:21:59:b0:42:db:a2:a9:b0:76:b4:f3:88:a1:
47:96:4c:59:78:ec:3e:b0:69:1d:47:df:62:d8:95:
e6:50:3b:81:b8:14:6f:dd:68:9c:dd:6d:3f:df:9e:
b8:6c:1b:13:bc:e1:c7:08:fc:f5:74:2a:1d:c4:df:
09:dc:d6:33:1c:ba:de:5a:cd:17:69:49:1e:c4:42:
ac:08:b9:1e:b4:36:a5:26:68:7d:dc:1e:fb:7d:58:
b2:ad:56:ea:92:ce:12:f4:32:c4:ea:f6:b4:53:47:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:33:C0:A1:D0:34:CE:F0:36:35:64:FB:11:1F:1D:39:54:7B:2F:CF
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/MDPAodA0zvA2NWT7ER8dOVR7L88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.216.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:49:6b:f5:c8:16:6c:3d:e1:46:8e:da:4e:7f:af:c2:fc:cc:
dc:18:0f:45:14:44:6d:91:10:47:4e:1f:78:93:ac:ac:16:58:
c3:71:0a:47:d3:e2:10:fd:07:df:f4:28:8b:e3:a1:0d:06:26:
60:10:f8:41:1e:62:89:36:c1:c3:0d:db:38:4b:63:4d:a5:58:
de:47:7d:24:30:61:ed:af:16:04:75:9d:b8:05:a6:ff:6d:02:
42:c4:2d:5d:7f:ab:86:99:8a:a8:c2:64:76:a3:cf:2f:26:fc:
ea:ed:1d:8e:43:04:21:6f:6e:8f:62:91:1a:09:80:b1:86:25:
ca:d8:5d:70:57:8b:24:c2:b4:69:9c:68:6e:71:03:a1:34:69:
34:93:95:0e:3e:e2:32:5d:06:4c:aa:be:f7:4d:c0:18:60:f6:
c9:43:5c:77:50:25:31:56:de:8a:0c:2c:db:de:eb:8f:09:4d:
96:70:99:ec:a6:d5:8b:30:6c:99:bb:39:92:7e:20:c9:0e:44:
94:02:2d:93:55:c7:31:a6:cb:80:b8:84:53:04:46:6b:fd:88:
ae:d2:b8:4e:ac:18:5f:d0:48:28:54:03:29:be:5d:c2:d9:73:
13:5a:9f:e7:19:57:45:8e:c1:20:df:02:35:db:9b:ec:b5:69:
89:41:cb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:56 2026 by rpki-client