Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/MSV5CHJYpQbuP0skgdsi6lI4oMk.roa
File: MSV5CHJYpQbuP0skgdsi6lI4oMk.roa (raw, json)
Hash identifier: Aa/GxFI1W+qWmQUcZ4JZotvG3eQQ4xGMe6oALgOxsRQ=
Subject key identifier: 31:25:79:08:72:58:A5:06:EE:3F:4B:24:81:DB:22:EA:52:38:A0:C9
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019FAE8A6929C7286860C77DBA6485F37A1E
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/MSV5CHJYpQbuP0skgdsi6lI4oMk.roa
Signing time: Wed 29 Jul 2026 15:42:14 +0000
ROA not before: Wed 29 Jul 2026 15:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46450
IP address blocks: 9.151.240.0/21 maxlen: 21
9.232.16.0/21 maxlen: 21
9.232.28.0/22 maxlen: 22
9.233.120.0/21 maxlen: 21
135.132.0.0/19 maxlen: 24
135.132.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:8a:69:29:c7:28:68:60:c7:7d:ba:64:85:f3:7a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jul 29 15:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=312579087258a506ee3f4b2481db22ea5238a0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:43:e3:8a:be:2d:33:2f:aa:d9:5a:7f:f0:eb:
ef:9c:66:cd:c2:3a:c6:d1:ce:5e:fb:2d:60:35:c4:
cd:a9:24:ad:73:15:c3:26:61:85:08:ac:5a:fc:36:
46:4d:d6:88:9e:44:d0:c5:6d:0d:32:59:3d:32:d8:
b0:20:85:cb:3e:09:bb:14:bb:2a:44:e5:aa:be:cf:
80:20:89:f3:67:6f:1c:c7:32:92:ac:cf:c1:e3:cf:
0f:ee:6b:e8:1a:9e:de:69:31:0f:f3:d0:71:fe:6a:
ec:cf:76:55:23:7e:63:ef:93:dd:fe:97:44:d1:9b:
ad:93:85:92:80:89:31:6a:11:30:c3:c0:3a:ff:08:
64:a4:69:e4:e6:19:f2:d7:03:84:da:af:04:32:09:
06:67:44:39:ca:90:da:bf:8c:a1:4f:ce:8d:60:39:
d1:2b:4e:b5:eb:fc:2f:0c:91:d6:82:da:7a:d7:86:
eb:4f:f4:b9:e6:2c:36:5c:ba:3e:3a:d4:2e:ca:ab:
30:bf:63:58:4e:c4:bd:55:3b:26:0f:58:6e:9f:30:
09:d2:23:47:05:59:c7:26:27:53:8c:d0:8f:c7:de:
bc:a2:68:0a:67:00:48:9d:7a:77:9d:cf:01:e6:b9:
ea:d5:89:5f:f8:44:6b:cf:0e:30:a2:6f:b7:0f:bb:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:25:79:08:72:58:A5:06:EE:3F:4B:24:81:DB:22:EA:52:38:A0:C9
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/MSV5CHJYpQbuP0skgdsi6lI4oMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.151.240.0/21
9.232.16.0/21
9.232.28.0/22
9.233.120.0/21
135.132.0.0/19
135.132.96.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:2c:24:4d:53:bd:5e:99:10:98:98:d5:9e:60:03:26:96:66:
80:bb:29:49:e5:82:99:e8:d6:87:67:fc:6c:46:c5:bd:ec:e4:
6e:0f:a6:25:ac:dc:39:4f:7b:88:73:4a:a7:63:8c:be:bf:8b:
bc:66:8b:78:d7:8e:b8:5e:56:6c:03:83:7a:08:d6:81:f6:cf:
9d:c4:f4:fe:6a:77:51:c6:46:57:ec:af:b8:6c:1a:bc:34:75:
1c:59:0e:e7:c3:b5:e5:27:4d:a1:66:07:8c:dc:b8:4c:1d:24:
e5:a2:98:b9:30:45:11:48:fa:e7:03:69:7d:de:51:f8:fc:02:
bb:42:07:b1:4e:c4:52:41:dd:37:36:6e:30:6d:ca:be:11:ce:
b4:42:6f:09:04:9e:44:52:4a:73:20:4e:1a:21:c1:22:97:5d:
43:25:58:b4:d6:90:fa:df:6d:70:57:de:9d:9b:10:17:4c:b0:
b2:0d:86:09:1e:a8:d5:b1:f6:8e:78:f5:58:eb:2f:d5:6c:5c:
52:ca:8a:66:cb:55:56:77:90:24:cc:2c:6c:94:fc:b4:e3:09:
0d:39:36:22:8c:64:3b:4e:53:9b:2e:8e:c2:5e:74:87:b2:13:
57:25:dd:cd:9f:fd:f1:55:e5:5f:54:bd:4b:2b:d0:8d:cc:75:
f1:80:b5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:47:15 2026 by rpki-client