Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/MqNQOt4LWK5yy_kr_4D-8uw74cQ.roa
File: MqNQOt4LWK5yy_kr_4D-8uw74cQ.roa (raw, json)
Hash identifier: Ppv6nC5hgYa3Aq30eFNB51wXXefMYHC1xQabnuvykQQ=
Subject key identifier: 32:A3:50:3A:DE:0B:58:AE:72:CB:F9:2B:FF:80:FE:F2:EC:3B:E1:C4
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019FFEFC7DD1BA2E2D7EA12E8FADB636D735
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/MqNQOt4LWK5yy_kr_4D-8uw74cQ.roa
Signing time: Fri 14 Aug 2026 06:36:27 +0000
ROA not before: Fri 14 Aug 2026 06:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 85.232.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:fc:7d:d1:ba:2e:2d:7e:a1:2e:8f:ad:b6:36:d7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Aug 14 06:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32a3503ade0b58ae72cbf92bff80fef2ec3be1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:12:f9:e4:65:8c:b9:d2:00:7f:df:50:a6:
97:d6:20:c2:42:c7:78:e6:5a:47:f1:ba:5b:90:8d:
49:c7:ab:5e:45:dc:91:ce:dc:94:18:27:b9:43:f2:
f1:0a:ec:1a:a6:2c:46:e4:91:73:11:80:ae:f7:79:
f5:96:ef:d2:36:a7:f2:c9:93:70:78:8d:26:81:4a:
51:b1:7f:f5:c2:34:33:16:3d:46:dc:45:4a:ce:47:
e1:0c:59:6d:24:12:fb:af:83:0b:40:cc:4b:a1:d1:
fd:70:2c:88:d5:6b:04:2e:e9:40:22:f8:73:f6:f9:
9f:33:b6:54:03:e9:de:b9:ee:39:83:a1:36:b6:d3:
ef:92:2b:5f:a7:b1:c8:9d:f7:1c:3d:0d:55:d3:9a:
5e:9e:6f:ef:e5:f6:75:6f:3c:a7:76:31:a9:45:12:
71:7c:aa:bc:d3:ce:04:82:e1:8b:38:bc:d4:99:e0:
d0:91:32:53:7a:e8:05:d2:34:53:c2:40:32:25:fa:
c2:a3:91:62:e2:86:bf:f0:cc:05:30:cc:ed:06:f4:
9b:c1:a8:1c:cb:e7:aa:98:c2:47:db:8b:00:41:67:
5a:86:56:6d:55:b6:38:b0:e1:e3:b9:88:bd:37:75:
91:5b:8a:1a:ac:f0:53:18:33:58:8f:0c:95:2b:b4:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A3:50:3A:DE:0B:58:AE:72:CB:F9:2B:FF:80:FE:F2:EC:3B:E1:C4
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/MqNQOt4LWK5yy_kr_4D-8uw74cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.190.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:8a:5f:83:7b:ea:b0:19:43:3c:52:52:0a:20:cf:ed:36:17:
46:6c:d6:76:7c:41:df:be:ba:23:94:1b:13:15:6b:f0:ea:8c:
68:77:d8:eb:b1:a9:09:cc:2f:1d:7b:73:75:37:e6:d4:d7:39:
5d:b2:6b:b9:55:9d:2b:d9:d6:0e:04:e1:60:c9:7a:96:cd:5e:
d8:35:60:5d:71:88:e6:98:80:b7:d7:62:37:1a:fa:e2:a8:c1:
d2:79:10:ea:43:0f:49:06:58:58:55:e0:26:1c:ae:9d:bb:d3:
3b:80:ef:53:df:0f:7e:1a:df:b3:de:17:40:5b:c4:2f:2d:dd:
d3:8e:d3:03:03:58:5d:49:e0:83:2d:f4:be:53:00:ee:10:6f:
9a:be:4d:bb:07:05:0a:e0:35:23:1d:80:09:61:07:b9:24:65:
61:0f:6a:ca:f0:0e:a9:bb:ac:ab:94:1f:74:32:96:68:71:f7:
d4:af:78:a6:a8:67:d0:6b:da:e4:3f:bb:7e:7e:f0:59:e1:b1:
83:46:01:df:85:b1:06:6e:cf:30:97:b2:29:31:89:4e:59:2c:
ba:ba:13:83:03:f6:ae:b1:68:22:78:dc:0f:2d:c3:29:60:5d:
d0:8b:6b:ca:49:bf:00:08:5c:01:a0:c4:56:f2:ed:56:f7:07:
a7:9f:e4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:05 2026 by rpki-client