Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/MuqZbDdte2HUoV8nC0YLguTDBE4.roa
File: MuqZbDdte2HUoV8nC0YLguTDBE4.roa (raw, json)
Hash identifier: gBCyXdV7cj3bZcvtCBzs9JbAJ+sFCkuCSeQj4x9XIQo=
Subject key identifier: 32:EA:99:6C:37:6D:7B:61:D4:A1:5F:27:0B:46:0B:82:E4:C3:04:4E
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C292FA35AEA2D06EB85A739408F6
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/MuqZbDdte2HUoV8nC0YLguTDBE4.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57380
IP address blocks: 185.103.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c2:92:fa:35:ae:a2:d0:6e:b8:5a:73:94:08:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32ea996c376d7b61d4a15f270b460b82e4c3044e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:ea:85:de:e6:8e:23:a5:e0:d4:30:9e:c7:
6e:82:d7:f1:56:0b:24:fc:44:5b:97:d8:1e:66:d5:
46:b1:58:62:c9:b5:cb:10:30:43:34:23:69:c9:1c:
6c:6f:b8:c0:bf:46:a6:11:8a:07:3f:85:51:e9:87:
27:43:94:19:c4:1f:ab:e3:c7:68:bc:53:d2:b2:8d:
cd:cb:6e:e3:d2:14:8a:50:1b:c3:ca:34:22:b8:1c:
20:33:a4:c5:e9:ca:d5:39:5d:8d:42:f1:a3:fe:6b:
4f:6e:b6:ae:4e:4a:66:d9:10:e6:cb:0e:36:22:11:
e0:47:54:5e:4c:58:74:46:75:10:c5:cb:79:5d:40:
2f:37:28:77:f1:5c:9b:c5:a4:e7:9d:56:f7:61:c2:
3e:25:56:36:05:ba:30:19:40:a9:ce:09:a5:fd:0f:
52:57:00:bb:b5:b2:1d:ae:f1:c1:38:83:eb:4b:2d:
24:95:78:08:d8:af:8f:ed:68:10:c1:80:32:09:00:
95:ee:27:41:a1:7f:46:b2:e8:0f:5d:52:af:fb:13:
68:ac:dc:f0:95:1c:77:4a:13:10:a1:70:fe:dc:40:
15:f9:d2:43:df:41:64:03:89:9b:87:55:2a:a4:40:
c0:ca:4c:73:6d:70:f7:e4:b2:65:1e:01:3b:30:62:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EA:99:6C:37:6D:7B:61:D4:A1:5F:27:0B:46:0B:82:E4:C3:04:4E
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/MuqZbDdte2HUoV8nC0YLguTDBE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:01:78:d2:77:58:fa:d2:b9:d7:2e:51:89:70:7c:cc:38:2c:
15:15:43:e9:09:d0:45:28:29:f6:b0:7f:de:75:f3:00:e7:8a:
43:88:4c:54:e6:62:c4:d4:78:48:0f:8a:d7:c0:d6:01:03:0d:
15:53:b0:e6:9e:e3:15:bf:4b:53:ab:7f:9a:98:c7:d3:c7:ec:
91:4e:8b:54:48:33:25:6b:9e:8d:dd:1e:03:f9:5d:ca:dc:8c:
c4:88:1b:ab:e9:b6:3d:ea:16:65:4a:6e:5a:5a:75:41:a6:84:
ef:50:e5:e0:a3:d5:19:c3:3c:5c:27:9f:a4:64:1d:7c:1b:bd:
4c:07:0c:4b:9c:00:02:76:4b:d6:6e:30:f5:7e:01:93:75:ae:
37:d7:04:c6:8e:f4:9f:a3:e4:6e:d8:ce:29:dc:1b:1b:2e:7f:
4c:54:ee:ba:17:7f:e3:bf:59:3b:4c:16:52:e7:b2:f8:9c:04:
0e:75:7a:15:91:cd:bd:bb:e0:4a:9d:62:d5:86:5e:cb:e1:c3:
91:68:bb:77:a5:ca:7a:c0:ff:f9:a4:04:29:2f:2b:87:2a:e0:
3b:ff:a2:5b:69:cf:31:5d:75:b3:9d:67:a7:6d:1b:65:a5:62:
3d:ac:09:44:7e:fa:9e:aa:95:08:59:51:4c:93:19:ee:f7:a5:
62:7c:2d:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaMKS+jWuotBuuFpzlAj2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTI0YzI4YmEyMDJmYzA4NmYwYjViYWEzMDJlNTdhZTg5
ZmUzMGEwHhcNMjYwNzAyMTUxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmVhOTk2YzM3NmQ3YjYxZDRhMTVmMjcwYjQ2MGI4MmU0YzMwNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Hqhd7mjiOl4NQwnsdugtfxVgsk
/ERbl9geZtVGsVhiybXLEDBDNCNpyRxsb7jAv0amEYoHP4VR6YcnQ5QZxB+r48do
vFPSso3Ny27j0hSKUBvDyjQiuBwgM6TF6crVOV2NQvGj/mtPbrauTkpm2RDmyw42
IhHgR1ReTFh0RnUQxct5XUAvNyh38VybxaTnnVb3YcI+JVY2BbowGUCpzgml/Q9S
VwC7tbIdrvHBOIPrSy0klXgI2K+P7WgQwYAyCQCV7idBoX9GsugPXVKv+xNorNzw
lRx3ShMQoXD+3EAV+dJD30FkA4mbh1UqpEDAykxzbXD35LJlHgE7MGJuCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDLqmWw3bXth1KFfJwtGC4LkwwROMB8GA1UdIwQY
MBaAFJmiTCi6IC/AhvC1uqMC5Xron+MKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvTXVxWmJEZHRlMkhVb1Y4bkMwWUxndVREQkU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWdsMA0G
CSqGSIb3DQEBCwUAA4IBAQBvAXjSd1j60rnXLlGJcHzMOCwVFUPpCdBFKCn2sH/e
dfMA54pDiExU5mLE1HhID4rXwNYBAw0VU7DmnuMVv0tTq3+amMfTx+yRTotUSDMl
a56N3R4D+V3K3IzEiBur6bY96hZlSm5aWnVBpoTvUOXgo9UZwzxcJ5+kZB18G71M
BwxLnAACdkvWbjD1fgGTda431wTGjvSfo+Ru2M4p3BsbLn9MVO66F3/jv1k7TBZS
57L4nAQOdXoVkc29u+BKnWLVhl7L4cORaLt3pcp6wP/5pAQpLyuHKuA7/6Jbac8x
XXWznWenbRtlpWI9rAlEfvqeqpUIWVFMkxnu96VifC1j
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:11 2026 by rpki-client