Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/MoYUgffviiPeADSdZFuk0-PlxG8.roa
File: MoYUgffviiPeADSdZFuk0-PlxG8.roa (raw, json)
Hash identifier: bL0U0C+BvRbuUVGBt4mIGhNW64bof79FYnK3rvVowmE=
Subject key identifier: 32:86:14:81:F7:EF:8A:23:DE:00:34:9D:64:5B:A4:D3:E3:E5:C4:6F
Certificate issuer: /CN=f88b443e992c665658942e6890d298d68cde6425
Certificate serial: 019D00BBA2448D53A2175DC1C798BB92E519
Authority key identifier: F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/MoYUgffviiPeADSdZFuk0-PlxG8.roa
Signing time: Wed 18 Mar 2026 11:36:29 +0000
ROA not before: Wed 18 Mar 2026 11:36:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 80.248.142.0/24 maxlen: 24
2a12:fdc0:1::/48 maxlen: 48
2a12:fdc0:2::/48 maxlen: 48
2a12:fdc0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:bb:a2:44:8d:53:a2:17:5d:c1:c7:98:bb:92:e5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88b443e992c665658942e6890d298d68cde6425
Validity
Not Before: Mar 18 11:36:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32861481f7ef8a23de00349d645ba4d3e3e5c46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:61:cd:28:4d:44:39:d9:ea:c5:41:a3:5c:
7b:f2:f3:94:aa:bf:fe:d9:bf:55:b5:c4:03:08:06:
63:0c:95:61:98:67:2f:f7:b7:bc:ff:ca:eb:5b:ae:
62:5f:64:ba:f7:90:33:27:22:a5:f8:48:95:89:07:
6b:47:ed:be:d2:76:0d:71:e2:84:33:83:f0:b7:7e:
a0:88:01:87:a5:c0:1d:73:6a:16:40:fc:aa:38:65:
74:1e:9e:16:f1:e9:81:b6:d7:49:1e:75:b4:2a:58:
1a:2c:0e:6e:9d:aa:34:b5:d6:fc:7f:62:38:36:67:
14:cf:d4:b5:50:ff:ae:6f:44:8e:2f:c1:ca:8e:69:
dc:02:cd:ba:55:ad:92:77:81:9d:68:f2:95:af:3b:
08:27:35:1a:14:9d:bf:78:a5:17:07:0c:f2:4b:db:
3e:a6:f7:0e:8e:93:ab:81:99:b5:14:5b:34:ae:bf:
53:29:25:52:5e:3b:f6:f8:b4:76:e2:9a:08:c5:56:
c9:19:60:11:04:d8:b5:c3:30:f0:b3:8a:87:94:68:
de:52:db:ad:5f:b6:e2:9f:5b:2f:5c:98:47:c4:c2:
9c:fb:29:d5:25:1f:4c:43:c2:55:bc:76:a1:d1:59:
3a:88:67:53:87:e7:4f:42:da:61:c2:61:40:4d:7e:
92:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:86:14:81:F7:EF:8A:23:DE:00:34:9D:64:5B:A4:D3:E3:E5:C4:6F
X509v3 Authority Key Identifier:
keyid:F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/MoYUgffviiPeADSdZFuk0-PlxG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.248.142.0/24
IPv6:
2a12:fdc0:1::-2a12:fdc0:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
15:72:62:e6:14:18:97:ff:8c:69:6c:8b:a8:99:7a:0d:5d:9f:
37:2f:4a:59:0f:a9:bd:e7:5a:b3:71:7e:92:16:94:68:e3:ee:
94:02:b7:fb:f8:9c:c6:a0:62:21:4f:b2:ce:f3:aa:d1:da:44:
9e:bb:34:7e:7a:21:3e:6a:ec:0c:60:79:e8:74:c7:87:92:6f:
1d:9b:e7:55:72:4c:f5:05:33:bc:ce:64:5a:38:cd:07:df:77:
82:7a:ec:78:26:7c:1e:d8:84:e4:c2:1c:4f:a7:6f:5d:65:c9:
25:00:16:03:f3:0f:b5:cf:1e:41:39:95:61:14:63:69:a3:a1:
32:d6:6d:48:78:d3:43:eb:4e:ec:02:e7:bf:99:7c:86:be:92:
a0:5f:13:c5:15:7e:61:ee:8e:23:8a:b1:03:63:5a:0e:fa:05:
b2:dd:63:1c:49:ca:ef:bb:0a:07:c3:85:0f:df:5c:c9:55:b7:
82:04:c1:2f:13:da:09:3d:6a:96:4f:48:4e:d2:a9:d0:67:e7:
4a:d3:ac:92:f7:e7:e3:f6:46:c0:bf:ae:85:6d:85:2a:54:fd:
ee:78:c5:46:2f:d7:cb:30:0d:6f:a1:b1:b7:6f:99:90:7c:8e:
c9:c3:9b:98:48:50:ff:fc:21:e9:55:e9:6a:47:87:75:76:2e:
3a:8e:63:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:12 2026 by rpki-client