Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/MLsqALh1Uvn10wXf3xWBPtRGZbA.roa
File: MLsqALh1Uvn10wXf3xWBPtRGZbA.roa (raw, json)
Hash identifier: DURkaYN7iePQL+U7Y3SkLxVeI/ty9Gkq3Gwz2WfZHfk=
Subject key identifier: 30:BB:2A:00:B8:75:52:F9:F5:D3:05:DF:DF:15:81:3E:D4:46:65:B0
Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d
Certificate serial: 01A13436F7C271A263F4D9C3AAAD7F8780D3
Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/MLsqALh1Uvn10wXf3xWBPtRGZbA.roa
Signing time: Tue 13 Oct 2026 07:42:59 +0000
ROA not before: Tue 13 Oct 2026 07:42:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33925
IP address blocks: 195.248.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:36:f7:c2:71:a2:63:f4:d9:c3:aa:ad:7f:87:80:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d
Validity
Not Before: Oct 13 07:42:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30bb2a00b87552f9f5d305dfdf15813ed44665b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5c:be:f2:18:32:dd:48:d5:36:96:78:9f:21:
e3:f7:86:31:2b:a7:79:a3:c2:fa:e8:dc:3c:dd:09:
c4:8d:c2:ed:88:25:23:1f:95:a8:e0:81:2d:9a:56:
61:93:ed:15:14:37:09:1c:ea:88:c1:46:0e:5e:1a:
b5:93:8a:b7:32:2e:63:a3:ca:67:cd:cc:1d:98:89:
4a:1d:72:0b:8e:eb:5c:55:88:68:1e:ee:bd:88:84:
65:de:bd:02:cb:bd:e4:a4:b7:57:8b:22:ab:48:54:
55:17:30:39:f9:6f:39:ec:36:12:cd:30:dc:53:9c:
96:fd:cc:18:5d:3a:93:2c:b3:48:71:9b:70:f6:bc:
e2:1c:b6:fd:67:e2:90:ad:be:e9:3c:bb:6a:1c:f9:
6d:24:93:06:e2:4f:c3:bd:d7:d3:e5:e9:3b:5d:8f:
54:9c:0c:c3:0d:ef:1a:1a:d3:af:2b:88:07:b6:b8:
ac:5a:e6:ce:e6:0d:f1:a5:4a:1a:18:37:e1:18:63:
a5:74:7b:fe:7b:eb:f9:47:e8:cd:1c:f6:cd:1e:d2:
79:a6:97:fb:75:d2:fa:cb:b7:e9:76:b8:64:45:d8:
70:b4:d7:46:50:48:bc:c3:8d:cc:07:12:11:0d:f6:
49:46:9e:26:aa:31:d5:5e:4a:b6:fa:c3:73:27:99:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BB:2A:00:B8:75:52:F9:F5:D3:05:DF:DF:15:81:3E:D4:46:65:B0
X509v3 Authority Key Identifier:
keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/MLsqALh1Uvn10wXf3xWBPtRGZbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.76.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:9f:85:d8:78:7a:b1:54:49:04:12:b8:71:15:4a:1f:38:84:
c0:01:aa:67:18:72:08:95:c8:03:50:f3:c6:1e:60:02:9e:f7:
12:ee:26:35:94:30:33:4e:f7:d7:51:53:3d:58:91:4d:ef:67:
3a:d5:04:96:1d:0a:eb:2c:dd:54:c0:20:47:90:67:c6:30:13:
e6:5d:38:80:43:57:e2:eb:73:af:4f:20:22:59:e1:e6:2a:c3:
5d:65:38:c6:e8:23:cc:b5:fa:a0:fd:db:42:b3:45:f8:ed:d2:
e8:64:36:57:d8:22:84:02:93:a3:2a:91:e7:ab:64:78:72:ec:
9e:fa:12:9c:ed:4f:87:91:26:60:46:ea:a1:f5:e0:7c:0e:85:
5e:d9:e7:5d:6d:15:11:ae:3b:a0:d7:5a:6b:be:ff:fe:37:9a:
34:76:9f:e6:d9:c4:67:37:56:43:c4:5d:27:fd:7a:ce:f4:dc:
aa:c4:94:3c:45:1e:b4:56:51:86:f8:1c:ab:0f:ac:1a:37:a0:
33:d8:90:85:ce:e0:d7:2c:8d:70:56:a2:b4:f4:f5:94:de:4d:
a4:41:3d:c6:5c:96:02:f2:97:ff:7e:b5:e0:1f:2a:cc:d0:ae:
87:68:be:25:bb:39:b3:1d:d4:7a:73:79:92:91:d8:8a:f2:57:
8b:02:b8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:07 2026 by rpki-client