Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/MBJPYxkAOcW1F6D2SL1xMktlG_A.roa
File: MBJPYxkAOcW1F6D2SL1xMktlG_A.roa (raw, json)
Hash identifier: lfZx53j9T3wjHhtSwYTcY7ffXbrGGrP1inOw3mF8gos=
Subject key identifier: 30:12:4F:63:19:00:39:C5:B5:17:A0:F6:48:BD:71:32:4B:65:1B:F0
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 01A111CBB77A6670178C6CFBA0E80C1D64A2
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/MBJPYxkAOcW1F6D2SL1xMktlG_A.roa
Signing time: Tue 06 Oct 2026 15:18:45 +0000
ROA not before: Tue 06 Oct 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47406
IP address blocks: 160.202.28.0/22 maxlen: 24
185.118.72.0/22 maxlen: 24
185.123.36.0/22 maxlen: 24
185.154.88.0/22 maxlen: 24
185.176.200.0/22 maxlen: 24
185.211.12.0/22 maxlen: 24
185.211.15.0/24 maxlen: 24
2a06:9240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:cb:b7:7a:66:70:17:8c:6c:fb:a0:e8:0c:1d:64:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Oct 6 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30124f63190039c5b517a0f648bd71324b651bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:c6:47:c2:84:38:25:12:ff:93:4a:01:ba:
a9:ad:f2:7f:b4:09:08:08:64:c5:02:a5:91:f3:75:
d2:24:c2:37:79:b7:13:de:96:20:3e:88:c8:29:90:
36:e2:3a:a9:59:e8:98:32:d7:58:8b:12:b3:6b:a2:
0d:b2:1d:2f:76:34:41:81:13:32:d6:8c:b6:79:f6:
60:91:49:d2:4e:51:e8:80:06:0c:9e:22:97:f2:25:
9c:a2:8b:e2:84:94:76:ec:08:37:8b:14:15:72:a6:
84:c6:e2:14:58:f5:11:98:b2:5a:bd:5e:af:3d:5e:
e1:7f:1d:1f:ac:ce:25:f6:bd:39:0c:14:5c:a5:37:
b4:f1:98:7f:9a:15:0d:dc:87:76:b8:6a:3a:7d:da:
6c:08:1a:66:1f:b6:e0:68:cf:3e:5d:8f:23:9c:f7:
b7:a5:d0:4a:32:a0:07:6f:5c:e8:83:9e:2d:10:2f:
3e:4c:af:22:23:2d:9c:e3:7b:4e:e0:9a:d2:0e:ce:
66:28:a6:d2:9b:9d:18:e6:c5:9d:2b:d8:08:4a:d0:
bb:90:22:a0:a8:04:d0:5a:54:35:de:9f:db:6c:3b:
64:97:a0:07:04:7b:65:7d:5b:a6:f9:78:3b:fe:98:
c6:60:ea:34:2d:68:39:c1:30:1b:71:d8:a0:fe:19:
ea:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:12:4F:63:19:00:39:C5:B5:17:A0:F6:48:BD:71:32:4B:65:1B:F0
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/MBJPYxkAOcW1F6D2SL1xMktlG_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.28.0/22
185.118.72.0/22
185.123.36.0/22
185.154.88.0/22
185.176.200.0/22
185.211.12.0/22
IPv6:
2a06:9240::/29
Signature Algorithm: sha256WithRSAEncryption
0e:e6:54:5d:b2:44:b0:69:95:fe:44:3d:33:2f:10:9c:0b:c0:
45:c5:98:39:2d:a5:06:68:db:b3:7e:fc:6c:66:ef:0e:b8:93:
ac:f0:1c:34:0c:6d:1e:32:86:8f:f2:51:11:16:7b:ab:fc:40:
0e:ec:69:96:81:31:5e:81:7f:7b:7e:7f:d1:d8:1c:23:45:93:
b9:91:c4:b1:26:8e:b1:10:8a:e7:f0:0b:c8:bf:8f:e4:f2:eb:
5e:dd:67:e6:3d:60:42:bd:e8:6a:cd:69:48:d4:0b:dc:90:ed:
25:71:a5:87:0a:94:1a:72:c4:96:4f:fb:7e:e6:a3:57:a0:cd:
52:99:21:bb:10:ce:96:84:e7:1a:bc:05:cb:55:e1:bf:e7:e5:
e4:ff:4d:a4:b8:ba:6c:84:0f:d6:ae:b0:89:73:4c:55:1d:4d:
d9:8b:62:23:16:2b:ab:a3:11:93:e7:00:2b:a9:7f:e9:a1:b6:
eb:3b:ae:dd:e8:80:75:07:4e:18:b4:52:22:ac:23:d8:22:b6:
67:61:52:41:db:0e:9a:c2:f9:3f:f7:8e:9a:85:dd:bb:58:02:
48:71:e6:be:e0:bf:d6:2e:7f:1e:29:8d:b5:a2:78:b8:cb:45:
86:8c:25:12:0f:d7:9b:0f:fc:80:67:81:90:ff:39:45:1c:30:
68:2f:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:55 2026 by rpki-client