Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/MwoTILakEYa2BuMjXVwdC4zocZo.roa
File: MwoTILakEYa2BuMjXVwdC4zocZo.roa (raw, json)
Hash identifier: 41M8lh+OaO+v/5Scy6+EfiQpM2rt/vSaSWrsasCd01A=
Subject key identifier: 33:0A:13:20:B6:A4:11:86:B6:06:E3:23:5D:5C:1D:0B:8C:E8:71:9A
Certificate issuer: /CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Certificate serial: 019D5DDCD1BD41761773AD2B9E3B81A07278
Authority key identifier: D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/MwoTILakEYa2BuMjXVwdC4zocZo.roa
Signing time: Sun 05 Apr 2026 13:37:25 +0000
ROA not before: Sun 05 Apr 2026 13:37:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199467
IP address blocks: 195.24.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5d:dc:d1:bd:41:76:17:73:ad:2b:9e:3b:81:a0:72:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Validity
Not Before: Apr 5 13:37:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=330a1320b6a41186b606e3235d5c1d0b8ce8719a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:5e:0e:06:3d:a1:9b:b3:ad:9c:17:81:79:
c1:35:40:9a:c0:57:7a:74:c5:69:7a:c9:ff:0c:2c:
8e:c2:13:98:e1:b3:26:bd:fa:e3:56:bb:ed:61:73:
b2:f8:47:d8:62:0d:be:6b:c8:6f:24:d5:26:86:96:
3c:ff:c8:60:66:d4:bf:35:01:07:5e:85:d3:0e:ab:
4e:6b:e9:5d:10:31:8b:95:2d:b9:91:6e:86:c0:23:
58:d5:40:b3:f8:c4:14:7e:59:7e:cc:89:ef:76:09:
db:24:ef:27:b0:1b:31:3d:e6:0d:45:85:35:ad:3b:
2c:e5:21:7c:f8:b2:93:70:fa:8f:0c:b0:c5:25:dc:
d5:de:76:11:d0:e4:94:2f:95:ff:b2:3f:7e:3c:a3:
18:78:96:53:9f:6b:0d:3f:85:08:ca:13:c5:cd:2c:
1a:18:96:dc:62:37:02:6b:55:67:72:b1:60:9b:c2:
e0:62:c9:6d:d2:21:6a:ba:17:af:ac:21:df:26:ee:
fa:33:ca:ee:05:05:8e:2f:03:ef:c9:62:a6:93:21:
d9:ae:e2:8e:d0:68:da:16:3e:e0:81:44:ee:45:b1:
ff:90:c2:45:84:3b:3d:3b:e3:ce:a7:97:10:d3:d4:
9b:08:2e:97:fe:01:f5:20:c6:f1:ef:af:56:c7:e8:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0A:13:20:B6:A4:11:86:B6:06:E3:23:5D:5C:1D:0B:8C:E8:71:9A
X509v3 Authority Key Identifier:
keyid:D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/MwoTILakEYa2BuMjXVwdC4zocZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.237.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f3:51:71:c1:86:41:92:01:c8:d2:58:a3:0a:73:d6:89:21:
ae:ab:d3:bf:3e:39:e5:1e:94:c4:cc:35:82:39:a8:55:15:fd:
a7:a0:63:9e:eb:92:ba:44:c6:a1:3c:aa:49:9f:87:29:f4:f0:
b8:b0:33:99:1c:77:df:27:a3:00:3c:d1:7b:63:40:5e:c7:28:
e6:b5:70:a5:d3:79:23:2b:07:bf:64:da:9d:51:ec:f4:1e:d6:
43:4a:05:eb:c2:a4:6f:be:6d:2d:99:4d:24:f6:d0:dc:00:65:
88:37:fe:81:9f:16:b1:34:aa:c1:f6:57:28:fc:9f:d4:f2:11:
27:2d:57:de:d6:fa:99:fc:4a:f0:f9:e1:f2:9c:1c:94:9e:d1:
1f:48:a0:f2:f9:f2:9e:67:16:38:66:21:c0:bf:21:2a:4f:1a:
45:f0:0d:a8:68:5c:43:b3:5a:e8:69:1a:5f:96:1a:b7:15:59:
6b:b5:47:01:cb:8e:a0:df:e7:4e:74:93:7f:2f:2a:13:1d:ce:
7a:66:ab:4a:27:61:b4:44:6a:16:34:d3:b9:7b:49:40:53:60:
ab:4b:49:dc:20:a0:1a:11:9d:3b:34:11:7f:92:eb:87:d4:f9:
26:f6:d2:5b:2a:76:23:77:6d:a2:96:ee:eb:21:0e:c7:c8:bd:
0e:c7:e4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 08:00:53 2026 by rpki-client