Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/MvLpv7U5hRvMRNf8qDOqBL0JiGw.roa
File: MvLpv7U5hRvMRNf8qDOqBL0JiGw.roa (raw, json)
Hash identifier: CG2qmfPLpAg8DAuH34q/KpW3OuhDGC9Gfmm3Zy5Kiuo=
Subject key identifier: 32:F2:E9:BF:B5:39:85:1B:CC:44:D7:FC:A8:33:AA:04:BD:09:88:6C
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A08A3422CF250FD91F8B89127DCBAE2B41
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/MvLpv7U5hRvMRNf8qDOqBL0JiGw.roa
Signing time: Thu 10 Sep 2026 07:24:27 +0000
ROA not before: Thu 10 Sep 2026 07:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 88.135.152.0/22 maxlen: 24
213.110.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:34:22:cf:25:0f:d9:1f:8b:89:12:7d:cb:ae:2b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Sep 10 07:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32f2e9bfb539851bcc44d7fca833aa04bd09886c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:40:d0:e4:49:49:be:b2:6b:73:99:11:e8:
c1:31:46:59:72:ad:66:1b:5d:1b:cb:d9:18:9d:08:
0c:21:d0:fd:42:b4:59:0e:c9:1f:1f:5c:a3:61:f7:
01:83:e0:e7:3c:37:8d:61:f0:75:7f:10:5e:22:37:
b2:c4:33:b0:17:28:d9:c9:e0:4a:b8:ad:d6:75:38:
c8:5d:cb:5f:34:a0:0d:52:04:b1:93:35:02:d2:c2:
43:d0:05:be:c4:0a:66:ba:05:d7:15:41:d1:53:d7:
8b:99:3d:37:ee:97:a8:77:a2:d3:9a:22:d0:cd:66:
88:f6:f9:c6:d0:1a:0f:03:c8:31:23:a1:db:f0:c2:
c2:e6:ae:fb:d1:2f:cb:6f:9f:84:61:a6:46:ed:63:
9a:e3:20:2d:78:31:43:c3:bd:24:54:83:c3:67:fe:
e7:0a:bf:36:43:e4:4e:7c:62:7a:2c:9a:9a:74:9c:
b3:6a:15:57:2f:22:83:62:b2:ee:0b:8a:de:9e:bc:
ab:b7:19:a0:3c:9e:1d:b7:d1:25:eb:33:84:07:4b:
3c:10:a3:17:c9:0f:13:ef:96:0f:88:31:b8:7d:95:
38:0c:0f:68:6c:62:7c:88:53:a6:3f:a6:8e:97:0a:
7d:6e:ff:e6:10:ff:a7:2d:27:ff:69:a1:5a:23:2d:
b7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F2:E9:BF:B5:39:85:1B:CC:44:D7:FC:A8:33:AA:04:BD:09:88:6C
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/MvLpv7U5hRvMRNf8qDOqBL0JiGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.152.0/22
213.110.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:92:94:06:3e:dc:1d:73:3e:07:8d:cf:00:57:35:1e:c9:26:
50:93:44:c1:6b:5a:11:0d:a7:17:48:c0:88:07:68:4a:b7:99:
61:07:a8:f2:7a:94:30:b4:d5:a9:ef:12:ce:39:f9:38:95:cf:
ca:b0:a8:4d:60:da:00:52:71:bc:29:b2:5d:3b:65:ed:6f:74:
c5:6e:ff:5a:d4:37:a4:9d:88:dd:9e:2e:bd:07:4b:34:5b:c2:
12:1f:3c:7e:f3:53:dd:a9:91:9c:17:4f:a6:83:36:05:5b:c4:
79:0c:81:44:96:7e:1f:74:8d:1e:17:86:08:61:16:28:78:90:
3f:2e:75:8b:67:55:2d:e0:11:56:4c:2e:75:71:14:8d:b1:40:
de:c4:a4:da:55:40:1e:eb:c0:02:38:72:3b:11:d3:94:e1:8d:
f7:81:a6:7a:d5:75:cf:8f:6e:24:70:a5:4a:a1:4f:9e:9d:38:
7f:5b:45:27:44:2c:7b:62:97:f6:26:a8:5b:5c:6d:42:65:05:
ff:29:b3:ae:af:1a:47:fc:fa:9a:55:bd:d0:d0:8f:72:af:88:
de:e5:56:49:63:ac:6d:8a:94:76:f5:e7:4c:f2:48:b3:80:84:
48:4a:d4:8c:1a:65:ea:14:99:0f:1e:6c:ab:af:65:94:6e:c1:
4d:c2:7e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:00:42 2026 by rpki-client