Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/MpZ1sXXuBlUKYetLTsH1lXFBfh0.roa
File: MpZ1sXXuBlUKYetLTsH1lXFBfh0.roa (raw, json)
Hash identifier: UdwaodYJR5euTkLYD/2982odDxspsab6MNbO+lo1mR8=
Subject key identifier: 32:96:75:B1:75:EE:06:55:0A:61:EB:4B:4E:C1:F5:95:71:41:7E:1D
Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial: 01A10760DBF8F3595AC961DE1E4207A77DF6
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/MpZ1sXXuBlUKYetLTsH1lXFBfh0.roa
Signing time: Sun 04 Oct 2026 14:45:50 +0000
ROA not before: Sun 04 Oct 2026 14:45:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214078
IP address blocks: 92.42.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:60:db:f8:f3:59:5a:c9:61:de:1e:42:07:a7:7d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Validity
Not Before: Oct 4 14:45:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=329675b175ee06550a61eb4b4ec1f59571417e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:e1:00:8b:ed:f2:d3:ff:f1:73:1e:79:3a:
c6:b1:21:d0:d4:bf:05:f8:7e:fd:bb:41:ce:a1:d3:
e1:84:c9:92:ce:26:ea:b6:c6:d2:73:c4:56:91:37:
d7:04:79:73:83:88:ad:b4:f0:b2:43:14:c2:36:07:
d1:61:0f:cf:31:63:4a:e0:42:dc:d9:5d:9c:78:03:
bc:21:e6:b8:a0:8c:1d:35:02:7e:8c:2d:9a:4e:0b:
f3:a7:3b:9e:c4:54:44:d1:36:3d:f3:5c:f0:49:76:
d3:70:18:43:e2:93:d7:67:7a:d6:20:7b:37:7a:64:
04:ee:a0:99:58:78:a8:ec:fe:ea:66:d9:23:63:cc:
22:95:21:c0:52:88:85:44:05:6a:2e:7f:93:ca:6a:
66:28:d1:a0:af:78:39:ad:34:99:ff:a9:db:a1:a9:
f0:e0:63:06:20:4b:a1:79:b9:b5:a0:85:d0:72:4e:
ca:f4:d1:29:94:d2:f9:bb:98:d2:44:68:df:a2:cb:
62:63:3b:f4:28:b4:55:a0:d8:f9:1e:0a:0f:83:a8:
c3:b2:c6:ec:bb:05:0c:1b:d2:8e:bd:11:3f:67:18:
4e:36:2a:6c:49:3a:ae:95:16:00:a0:01:a8:c5:48:
1f:81:cd:48:b1:2f:96:37:cb:3e:2b:2c:99:95:63:
a6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:96:75:B1:75:EE:06:55:0A:61:EB:4B:4E:C1:F5:95:71:41:7E:1D
X509v3 Authority Key Identifier:
keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/MpZ1sXXuBlUKYetLTsH1lXFBfh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.203.0/24
Signature Algorithm: sha256WithRSAEncryption
14:73:8c:3e:8d:b9:0c:90:27:37:b7:bc:48:5c:30:2b:6d:2a:
51:31:8b:a2:5b:c5:81:53:14:e7:34:d7:72:aa:3f:18:b0:bd:
b8:ed:36:b6:89:d1:01:5e:65:ac:74:35:b9:fe:79:70:1e:e6:
88:03:28:6f:db:3c:19:55:b2:c0:68:86:ad:3f:02:78:74:04:
b2:83:f6:88:1e:d4:ed:dc:3d:08:56:44:d1:96:44:df:98:32:
22:b1:2c:61:e9:8c:1d:8f:30:f3:37:20:53:33:5e:76:fd:7d:
51:42:e8:68:aa:c1:2e:70:95:42:46:21:4c:b0:55:dd:ca:5c:
b4:b2:4d:ab:fd:8b:b9:85:c8:ab:6e:62:98:f6:43:e5:92:d7:
0d:94:9e:cf:86:7a:3b:e3:01:ea:a1:53:fa:ce:a7:29:46:07:
60:eb:d7:16:05:c4:d1:6b:55:0e:0e:61:0f:13:4e:a8:9e:de:
b3:67:a5:7e:37:4c:1c:93:b8:fb:8e:f7:e9:ee:86:46:47:69:
cd:50:40:48:d3:25:1b:ee:df:c4:c4:1f:ab:d6:0b:a5:e0:f5:
96:4b:81:6f:1b:78:b7:8d:00:0d:11:e2:36:10:f2:1e:92:dd:
ff:00:3d:34:e9:f6:62:e1:64:9e:f9:a4:f4:84:1f:8c:29:d9:
a7:e7:23:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:55 2026 by rpki-client