Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/MpIEJgAG_pPhwMdB64aFRgG0r5o.roa
File: MpIEJgAG_pPhwMdB64aFRgG0r5o.roa (raw, json)
Hash identifier: OuECj2whJVBwGOzacMlIpw7HWpCsHJtP1vqi4G4H3a4=
Subject key identifier: 32:92:04:26:00:06:FE:93:E1:C0:C7:41:EB:86:85:46:01:B4:AF:9A
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F699F1D844BC26526186C5C676965465
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/MpIEJgAG_pPhwMdB64aFRgG0r5o.roa
Signing time: Thu 01 Oct 2026 08:34:39 +0000
ROA not before: Thu 01 Oct 2026 08:34:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210244
IP address blocks: 195.184.6.0/24 maxlen: 24
212.108.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:99:f1:d8:44:bc:26:52:61:86:c5:c6:76:96:54:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:34:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=329204260006fe93e1c0c741eb86854601b4af9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:c2:31:6c:5f:ae:d7:29:ad:11:28:4c:4f:
21:8c:3f:a9:2c:b6:60:41:7d:dc:38:e3:a3:3a:49:
0e:21:5c:16:24:f8:ce:2f:a8:49:10:21:64:61:c4:
8a:27:29:fd:b7:06:7c:53:6f:f2:73:8d:e2:be:6f:
53:19:5d:c6:17:90:7b:cc:d2:26:f1:32:34:f1:87:
2e:93:47:08:32:3b:20:17:8a:d7:d3:77:ee:d4:aa:
c1:1b:6f:80:c4:8c:a6:2e:95:da:68:3a:6b:99:27:
5b:09:82:ee:d7:83:11:cb:19:aa:3a:98:c2:56:49:
74:86:f5:34:56:c7:92:5d:00:ed:2c:22:43:d9:9f:
4b:3c:7a:57:da:88:1b:b4:b6:a6:08:0e:e6:c8:4e:
9c:ff:39:e1:e5:ab:96:c3:a4:4e:a7:4c:94:1d:85:
4b:c0:0e:c2:e2:9d:51:01:cd:9d:c0:bd:1c:26:a7:
64:f6:95:be:33:cc:94:12:bc:07:df:1c:f6:be:c0:
3c:a8:0c:0b:6e:d9:93:37:7b:23:ac:ca:64:dd:d2:
ff:81:b6:58:d7:47:ca:45:22:61:03:54:89:22:d1:
e1:20:21:e9:92:84:55:9d:51:04:5c:78:b5:bd:99:
e0:d6:6b:fb:74:42:0f:a5:c9:d6:e7:5d:10:8f:88:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:92:04:26:00:06:FE:93:E1:C0:C7:41:EB:86:85:46:01:B4:AF:9A
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/MpIEJgAG_pPhwMdB64aFRgG0r5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.6.0/24
212.108.238.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:35:e6:1e:7a:cb:6d:a1:51:4d:bb:d0:c5:ff:04:45:6c:88:
75:a2:df:1b:5d:07:ec:a5:4a:07:72:0a:3a:1c:4b:88:62:ea:
59:a1:e5:dd:f2:12:b2:e2:f6:ce:92:d0:f3:02:90:ca:13:07:
7e:fc:99:64:ba:b4:ca:fe:ce:d1:78:20:84:31:1c:99:30:f9:
fc:4d:96:c5:6f:c4:17:ad:e6:72:23:b8:ab:36:3b:a8:de:88:
0c:f5:e7:68:d6:7f:14:11:a5:c4:27:cb:45:fa:c7:90:00:d5:
50:e2:cb:19:7a:53:6f:3c:8b:12:11:d0:34:77:66:39:fd:57:
b7:b9:07:42:6a:70:b0:76:02:63:08:fb:3e:23:21:28:28:d4:
6b:79:9c:45:ee:ed:5e:12:86:1a:10:63:d1:d4:a9:1e:94:2b:
d4:22:e6:fe:d7:b0:84:61:a9:6f:8e:92:cf:6d:8a:81:85:5c:
ce:f7:e5:76:92:8b:0b:02:a4:42:5a:be:30:cb:52:39:e1:5c:
af:f1:41:6e:63:d6:45:a7:38:50:fb:80:35:8b:2f:13:f5:c7:
40:4f:03:0b:c4:50:67:e3:04:ab:84:83:bb:51:d5:f8:8f:08:
43:ac:02:70:13:4a:d4:90:24:cc:0c:4c:1c:d8:a6:fc:84:76:
ad:8e:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:16:54 2026 by rpki-client