Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/MubDzUXgYKZNyqpvxVViG0zZCmY.roa
File: MubDzUXgYKZNyqpvxVViG0zZCmY.roa (raw, json)
Hash identifier: 8Olxf9Zw2mndVFhL+vEgGkp3VdkiYT/3tzzXyDV4KAg=
Subject key identifier: 32:E6:C3:CD:45:E0:60:A6:4D:CA:AA:6F:C5:55:62:1B:4C:D9:0A:66
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019ECA97E9DFE2C7FAE83B15019539234ADC
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/MubDzUXgYKZNyqpvxVViG0zZCmY.roa
Signing time: Mon 15 Jun 2026 09:23:33 +0000
ROA not before: Mon 15 Jun 2026 09:23:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208972
IP address blocks: 109.236.49.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:97:e9:df:e2:c7:fa:e8:3b:15:01:95:39:23:4a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jun 15 09:23:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32e6c3cd45e060a64dcaaa6fc555621b4cd90a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:52:f1:92:71:1e:a9:bc:65:bd:e3:3d:1d:43:
b7:3a:f4:59:ed:88:83:c9:41:b6:e3:47:3c:ee:80:
3e:3a:4d:67:f9:f8:c8:39:39:80:2c:d5:91:f5:b3:
69:00:1d:cd:1b:37:7d:e0:e7:11:0f:9e:3e:c1:e4:
9c:cc:2c:b2:85:c7:95:5f:b6:93:b8:75:13:66:85:
92:db:ea:4a:8d:a1:06:78:5b:4c:f8:71:f5:be:20:
28:f1:f1:c5:89:fc:b9:9b:f6:71:06:72:cf:65:c1:
7e:0a:f7:8b:e2:fa:06:55:ec:22:5f:bb:c1:51:bb:
b7:a3:ae:1c:4a:ca:ec:ca:9e:10:89:13:53:31:4a:
a8:1b:e1:69:c7:1c:e7:01:7f:3d:f3:1a:b6:d7:8e:
bf:ee:c8:67:78:d8:39:4d:33:ab:e5:e0:88:4f:49:
52:c6:e9:53:1e:51:f3:a6:f6:01:45:f3:c4:d4:1c:
f3:59:cc:7d:65:33:e3:f0:0f:a4:bd:a6:a0:b5:49:
c9:6e:73:f0:ee:57:09:e6:42:11:d2:8e:fd:f0:2b:
15:fb:4b:6d:3d:cb:80:c4:5d:05:4a:7e:3a:19:7e:
3e:cd:5f:99:81:57:f2:f9:fc:93:fc:71:e7:d1:5a:
d1:5f:32:2f:56:38:80:c5:5c:45:4c:3d:3f:5c:bf:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E6:C3:CD:45:E0:60:A6:4D:CA:AA:6F:C5:55:62:1B:4C:D9:0A:66
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/MubDzUXgYKZNyqpvxVViG0zZCmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0/24
109.236.51.0/24
185.254.28.0/24
Signature Algorithm: sha256WithRSAEncryption
06:18:71:dc:a5:11:f7:e6:1a:06:77:e4:ea:a7:0e:df:55:33:
11:d8:54:67:16:78:10:c9:73:0e:e2:63:f9:b2:b1:a1:4d:12:
49:1a:23:70:d2:29:8c:eb:8b:51:94:d3:76:aa:e1:59:01:a0:
af:ca:30:7c:17:e2:06:3d:98:be:87:d2:40:e0:88:1b:27:d6:
4d:20:4c:df:7b:99:55:96:74:e7:f7:94:28:86:d7:c0:46:a0:
f8:ab:76:86:b2:60:7d:d8:4f:a1:e3:0f:fc:96:fb:77:35:43:
51:32:7a:82:68:fd:14:99:8c:77:ab:a8:1d:58:ae:66:ef:a9:
1a:0b:dd:c5:c2:5c:31:11:c9:6a:08:fe:d0:63:01:bb:30:4e:
69:01:f4:e4:7f:55:b7:46:ac:71:05:60:2d:81:8a:c5:75:fd:
91:aa:a5:c6:d7:dd:62:45:d6:17:4e:a7:6e:4d:91:53:49:4a:
14:2a:0f:7c:00:a7:ca:5d:e5:08:bf:82:ea:29:95:ed:8c:d2:
db:65:95:eb:00:f0:d8:6b:f2:65:fc:d0:f6:cc:9a:5c:4c:6c:
f8:a1:08:ee:74:f7:ac:3d:b3:31:b5:ff:c2:93:28:e8:49:68:
36:ab:8c:03:44:b3:42:e6:5a:8e:ad:0d:13:bb:ab:5b:b6:cb:
04:92:4b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:51:18 2026 by rpki-client