Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/MPnZ2IAC1xgd07uCZkieW893YC0.roa
File: MPnZ2IAC1xgd07uCZkieW893YC0.roa (raw, json)
Hash identifier: Pp3PeX0RbMqeepjALv8Rlw2HnxxIY16HtKih3ySkz5c=
Subject key identifier: 30:F9:D9:D8:80:02:D7:18:1D:D3:BB:82:66:48:9E:5B:CF:77:60:2D
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 01A0685BC821464FB318F6D17C813822E9A3
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/MPnZ2IAC1xgd07uCZkieW893YC0.roa
Signing time: Thu 03 Sep 2026 17:40:40 +0000
ROA not before: Thu 03 Sep 2026 17:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56707
IP address blocks: 46.166.240.0/21 maxlen: 21
212.107.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:5b:c8:21:46:4f:b3:18:f6:d1:7c:81:38:22:e9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Sep 3 17:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30f9d9d88002d7181dd3bb8266489e5bcf77602d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:4c:42:e7:aa:c9:6c:53:0d:aa:16:55:88:
fa:46:53:88:06:15:5c:2e:ef:6a:f9:24:44:0d:59:
9d:44:46:ce:86:d1:53:25:5a:e0:19:f4:74:08:68:
0f:0a:75:4e:71:f7:16:01:d5:b3:a5:db:3a:8e:47:
a7:1d:cc:fe:23:16:ba:ce:a1:12:e1:6d:2b:60:d1:
c3:d4:b4:4b:6d:89:2c:a6:4b:42:36:82:9e:52:3c:
bf:8a:f9:67:df:b0:c0:8c:ed:f0:8f:61:0e:6c:ea:
4b:a9:3c:d1:a0:06:ae:d6:49:a1:1e:81:b3:c7:61:
ed:17:68:9b:c3:ea:05:29:18:7b:0f:3b:14:92:90:
eb:5b:4d:e3:d1:b5:42:82:4a:1c:cb:08:8d:14:97:
b5:10:f9:b3:6e:93:1e:8a:60:55:18:c8:da:09:d7:
30:f6:4e:0b:0b:ba:8d:93:39:f9:aa:ff:93:a7:ee:
07:d5:ae:ce:aa:52:2f:1a:12:19:90:38:37:46:1d:
0c:2c:cf:c4:87:25:a9:86:0a:7b:91:e3:c4:d2:ac:
4d:6d:e0:e0:f5:52:ba:a9:af:3f:b8:e2:72:b4:91:
c5:f4:99:99:ce:ce:4a:f8:8f:e9:7b:31:df:18:69:
0f:1c:f1:a8:66:df:4d:3a:71:3c:26:f1:3f:55:e2:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F9:D9:D8:80:02:D7:18:1D:D3:BB:82:66:48:9E:5B:CF:77:60:2D
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/MPnZ2IAC1xgd07uCZkieW893YC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.166.240.0/21
212.107.240.0/21
Signature Algorithm: sha256WithRSAEncryption
70:43:88:29:f6:ce:80:76:2f:ae:d1:be:92:59:a8:5d:6c:4a:
07:ac:3b:99:44:12:db:5c:74:18:e6:ca:83:aa:a7:86:18:bb:
f2:39:02:cd:14:80:fd:c5:9e:a5:ac:de:48:dd:d2:e9:61:13:
a7:d2:86:34:71:b1:39:4c:33:d1:18:2a:4f:a0:20:8d:27:db:
fc:65:43:73:12:5e:46:c3:40:ea:56:bd:20:eb:13:1a:e2:ff:
09:0f:c3:26:6c:0f:3c:f8:78:df:b7:03:83:25:5d:68:7a:a8:
fc:2c:5f:08:ae:23:62:d9:be:32:ab:05:c0:d4:4d:50:a5:d4:
03:49:52:2d:04:14:05:e1:f0:78:4c:0f:36:ac:8c:d8:10:aa:
e5:78:c9:ed:22:df:d7:f4:64:3a:43:40:1a:78:d9:c5:16:2f:
d6:2d:03:97:45:df:2f:9d:bc:3e:59:63:df:fe:32:79:78:71:
3b:73:47:bb:0e:aa:3a:4f:3b:f4:93:67:52:f3:a9:5c:87:86:
64:05:93:21:cb:b8:48:9d:0f:f7:3e:0f:43:06:39:c1:b9:4f:
98:66:d8:9e:70:d0:23:7f:84:66:53:77:c6:0d:87:14:cc:ce:
48:a5:3c:4a:1f:86:7f:1e:79:7e:73:42:76:d3:37:19:8e:81:
27:28:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:56:09 2026 by rpki-client