Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/MXeRQq5D7FV0bNMN4iHk7ezapM0.roa
File: MXeRQq5D7FV0bNMN4iHk7ezapM0.roa (raw, json)
Hash identifier: iHRPCWFS9c22CI0RFokfhA+rRRgq98yFKQ2t75ROcnY=
Subject key identifier: 31:77:91:42:AE:43:EC:55:74:6C:D3:0D:E2:21:E4:ED:EC:DA:A4:CD
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 01A12F924A59412D864408695406BF9D98E3
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/MXeRQq5D7FV0bNMN4iHk7ezapM0.roa
Signing time: Mon 12 Oct 2026 10:04:38 +0000
ROA not before: Mon 12 Oct 2026 10:04:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48492
IP address blocks: 5.8.240.0/21 maxlen: 24
185.56.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:92:4a:59:41:2d:86:44:08:69:54:06:bf:9d:98:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Oct 12 10:04:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31779142ae43ec55746cd30de221e4edecdaa4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:6b:50:f1:bc:9f:7f:e1:78:fe:15:14:2d:
6f:f0:17:98:01:42:c5:a0:80:b6:fd:bd:51:a8:dd:
b2:4e:7e:3f:40:08:38:dc:d5:50:00:5c:67:26:01:
b4:8c:d5:78:0a:5c:c3:1c:b3:d7:ec:56:8a:6e:4c:
99:d1:cc:f1:ac:fd:ef:a6:ae:86:9c:6d:d5:ee:53:
e5:30:40:ef:69:32:25:ff:40:d5:01:11:21:5a:63:
12:ae:59:8f:fb:9c:06:b1:21:e4:87:aa:17:02:92:
9e:09:60:1b:59:a8:25:4e:f5:a1:70:85:74:d4:f8:
72:b7:48:df:bf:f5:b0:31:36:f8:02:fe:ef:df:d8:
0b:34:61:3b:a2:52:0c:05:9b:7a:c3:6c:29:8a:54:
a6:40:32:17:a6:67:21:a0:a9:75:01:7c:34:b1:32:
fa:61:51:57:81:ab:b6:66:d1:5d:a8:cc:9f:f8:e3:
8f:1e:41:15:af:a8:1f:81:98:8b:58:8c:39:f8:07:
60:16:fb:a3:4c:78:5d:33:66:ca:8d:b5:c2:67:9a:
f7:d4:ae:b3:21:02:99:3a:7c:80:6e:83:5d:10:8c:
8a:e7:33:bd:bd:52:15:77:4a:35:4e:a6:2c:8b:2c:
47:22:c7:1d:11:ba:f9:81:de:ea:5b:04:cc:c3:71:
31:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:77:91:42:AE:43:EC:55:74:6C:D3:0D:E2:21:E4:ED:EC:DA:A4:CD
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/MXeRQq5D7FV0bNMN4iHk7ezapM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.240.0/21
185.56.192.0/22
Signature Algorithm: sha256WithRSAEncryption
55:bc:9b:c5:27:a6:22:d1:4b:d4:a0:91:81:e3:6b:a2:cb:0f:
e2:00:a1:ca:6e:a7:9a:ba:92:d1:c7:ad:06:8f:43:6b:26:05:
e0:e9:1c:0a:3d:d7:82:e7:d3:38:79:fe:01:08:ff:9c:8b:53:
c2:5e:95:f4:c2:6e:a1:65:da:76:24:2c:9e:48:39:39:91:63:
b7:ac:6a:d0:6c:61:49:56:7d:9d:4a:77:78:ac:e7:5c:b7:dd:
53:ab:fb:25:85:2c:79:53:e1:02:32:1a:07:9a:84:fb:78:e5:
91:46:58:f6:84:f9:5a:87:32:95:d6:b5:89:e4:ff:5f:61:5b:
07:54:6e:8d:04:aa:28:d0:36:fd:6f:97:77:2f:03:82:10:7b:
b7:60:90:6e:cc:d3:bb:fd:e2:8a:c0:a1:a9:24:04:21:d5:4f:
11:86:d4:6f:e7:37:a2:07:9a:38:d8:8c:b4:e0:1a:e1:d4:da:
8a:e1:e7:ba:19:7c:d9:44:a4:5a:87:4b:8e:32:b5:70:35:31:
77:b2:aa:cd:7b:57:c7:c8:a3:84:93:b4:12:e9:b5:1b:5f:27:
6a:72:40:f7:2e:43:76:c7:87:37:b0:c4:fc:6d:0b:ef:83:5b:
18:b3:52:2e:99:32:fb:ff:e3:48:a7:58:00:bd:92:87:07:dd:
78:ae:b5:fb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEvkkpZQS2GRAhpVAa/nZjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMzFkZGVmMjVkOTZjODRiMDAxYTJhYzUwNDdiMDRlMDYw
YTBhYzMwHhcNMjYxMDEyMTAwNDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTc3OTE0MmFlNDNlYzU1NzQ2Y2QzMGRlMjIxZTRlZGVjZGFhNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRJrUPG8n3/heP4VFC1v8BeYAULF
oIC2/b1RqN2yTn4/QAg43NVQAFxnJgG0jNV4ClzDHLPX7FaKbkyZ0czxrP3vpq6G
nG3V7lPlMEDvaTIl/0DVAREhWmMSrlmP+5wGsSHkh6oXApKeCWAbWaglTvWhcIV0
1Phyt0jfv/WwMTb4Av7v39gLNGE7olIMBZt6w2wpilSmQDIXpmchoKl1AXw0sTL6
YVFXgau2ZtFdqMyf+OOPHkEVr6gfgZiLWIw5+AdgFvujTHhdM2bKjbXCZ5r31K6z
IQKZOnyAboNdEIyK5zO9vVIVd0o1TqYsiyxHIscdEbr5gd7qWwTMw3ExCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDF3kUKuQ+xVdGzTDeIh5O3s2qTNMB8GA1UdIwQY
MBaAFP4x3e8l2WyEsAGirFBHsE4GCgrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUt
YjRkOGMyYjdhMTAzLzEvTVhlUlFxNUQ3RlYwYk5NTjRpSGs3ZXphcE0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUtYjRkOGMyYjdhMTAz
LzEvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBQjwAwQC
uTjAMA0GCSqGSIb3DQEBCwUAA4IBAQBVvJvFJ6Yi0UvUoJGB42uiyw/iAKHKbqea
upLRx60Gj0NrJgXg6RwKPdeC59M4ef4BCP+ci1PCXpX0wm6hZdp2JCyeSDk5kWO3
rGrQbGFJVn2dSnd4rOdct91Tq/slhSx5U+ECMhoHmoT7eOWRRlj2hPlahzKV1rWJ
5P9fYVsHVG6NBKoo0Db9b5d3LwOCEHu3YJBuzNO7/eKKwKGpJAQh1U8RhtRv5zei
B5o42Iy04Brh1NqK4ee6GXzZRKRah0uOMrVwNTF3sqrNe1fHyKOEk7QS6bUbXydq
ckD3LkN2x4c3sMT8bQvvg1sYs1IumTL7/+NIp1gAvZKHB914rrX7
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:19 2026 by rpki-client