Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/MwqpyesVYA3SiDQe_gYsUNaHgho.roa
File: MwqpyesVYA3SiDQe_gYsUNaHgho.roa (raw, json)
Hash identifier: DTL27ykAsxNz3ciYm9p1pXPqk6KXZx1AnSSON092aSA=
Subject key identifier: 33:0A:A9:C9:EB:15:60:0D:D2:88:34:1E:FE:06:2C:50:D6:87:82:1A
Certificate issuer: /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Certificate serial: 01A0FD00E999CDF9945AAFAFB779AFF77746
Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/MwqpyesVYA3SiDQe_gYsUNaHgho.roa
Signing time: Fri 02 Oct 2026 14:24:50 +0000
ROA not before: Fri 02 Oct 2026 14:24:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218524
IP address blocks: 185.228.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:00:e9:99:cd:f9:94:5a:af:af:b7:79:af:f7:77:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Validity
Not Before: Oct 2 14:24:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=330aa9c9eb15600dd288341efe062c50d687821a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:84:bc:70:94:b1:fa:0f:94:9b:03:e5:6a:
65:0c:28:4c:9d:1e:ab:80:5a:81:38:c4:7c:af:87:
93:e4:09:3f:04:b8:aa:b7:54:f7:d0:88:06:c9:fe:
bf:0e:0b:87:f8:53:5f:f0:26:f9:6a:3c:14:f5:e2:
f5:b9:83:ed:aa:49:72:40:f0:b6:64:9d:95:81:b4:
30:66:83:05:36:6e:2b:64:39:03:c7:d0:1c:24:56:
cf:f2:35:be:15:c5:c5:77:4f:3e:ab:28:cf:b8:1d:
41:e3:a1:44:92:08:59:da:a8:83:76:af:b5:9f:9c:
ef:c6:6e:98:20:3d:00:71:c8:ba:03:11:ef:1b:98:
b1:c7:a1:e4:f6:64:98:aa:19:78:a7:27:f2:de:b5:
10:b5:c0:d3:6f:75:6a:d1:6b:40:53:b9:e1:2d:7f:
84:ca:0e:6f:96:f9:36:56:7a:2b:d3:f3:0f:6f:ba:
17:a3:bd:7a:c9:6e:21:6b:92:74:22:a6:7b:c3:da:
66:e1:db:54:dc:46:5c:81:16:99:fc:f2:27:46:32:
f7:57:11:33:c7:af:05:ff:f9:20:81:77:80:d5:0a:
47:4e:25:8d:fa:1c:8e:6a:ff:92:56:c8:13:e9:0c:
92:6c:e5:8a:ea:4f:56:19:d8:8a:ba:cb:57:0d:37:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0A:A9:C9:EB:15:60:0D:D2:88:34:1E:FE:06:2C:50:D6:87:82:1A
X509v3 Authority Key Identifier:
keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/MwqpyesVYA3SiDQe_gYsUNaHgho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.175.0/24
Signature Algorithm: sha256WithRSAEncryption
78:3d:ec:fb:db:c5:a7:82:8d:0f:15:c0:a7:15:a9:e3:91:1b:
ad:d1:38:f8:4b:be:47:1b:f7:4f:9e:f8:6a:65:56:50:0b:1e:
a7:e0:94:cf:40:67:fa:2d:ac:1a:e0:79:dc:b5:1b:25:3a:c4:
cf:8a:79:7a:eb:60:5f:3e:07:86:1c:96:12:a6:a1:62:d3:1b:
bf:be:f2:7b:e3:ac:3e:a8:ec:74:87:02:6c:41:db:8d:45:c6:
6b:01:07:af:89:5c:b5:ff:10:0b:3c:51:b4:5e:89:87:54:f6:
d4:5e:8f:7d:29:05:6c:e8:1b:2d:f4:4d:78:79:41:89:81:05:
f8:b2:5d:97:02:96:5b:73:e8:33:65:d8:b5:2b:6a:e1:2d:c6:
46:12:47:d2:e8:0c:d8:c3:48:68:64:4c:c0:bf:72:83:89:aa:
eb:69:5d:f5:2d:da:86:ee:ef:f2:c4:79:f1:4d:e8:17:af:c4:
23:f7:68:a8:e9:ba:24:39:6b:b4:be:e0:65:e5:de:8d:8a:f3:
c5:fe:d4:f7:65:35:b9:f5:3d:2b:5f:45:3a:78:bf:da:bb:fb:
f4:a0:2d:61:31:cc:00:06:b2:1a:65:b0:0a:97:fc:98:78:15:
a6:6e:3f:f4:78:64:fa:cd:c1:fb:31:ae:1a:76:4a:4e:54:d6:
4b:48:3b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 04:46:26 2026 by rpki-client