Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MbMwFeonRU0RnvEd6Y4-b2fFAA4.roa
File: MbMwFeonRU0RnvEd6Y4-b2fFAA4.roa (raw, json)
Hash identifier: 8dKoleXfZqLq+fBMW+rcIhdl/dV+ylfCw6iJglXUepU=
Subject key identifier: 31:B3:30:15:EA:27:45:4D:11:9E:F1:1D:E9:8E:3E:6F:67:C5:00:0E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1699B1799F0F72F5A4248DA0C79A8F217
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MbMwFeonRU0RnvEd6Y4-b2fFAA4.roa
Signing time: Fri 23 Oct 2026 16:32:14 +0000
ROA not before: Fri 23 Oct 2026 16:32:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207208
IP address blocks: 82.108.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:9b:17:99:f0:f7:2f:5a:42:48:da:0c:79:a8:f2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 23 16:32:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31b33015ea27454d119ef11de98e3e6f67c5000e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:db:56:76:14:39:c0:92:c3:d4:79:d2:3f:
34:6d:93:8f:ba:4e:5c:b7:62:84:2b:19:e5:09:9c:
8f:9a:b6:3d:98:f9:ae:00:03:ed:7e:1e:76:2f:38:
57:0a:84:c6:af:ad:d2:1b:db:d3:fd:44:9e:4e:04:
f8:ad:cd:7f:09:fe:a2:62:d0:fe:d5:68:7f:b5:1e:
0e:fc:a8:81:2e:bb:84:c1:4f:c0:19:ac:ed:f1:e4:
6d:f0:71:b7:96:b0:7b:21:bf:84:61:dc:57:15:71:
c9:49:57:a2:97:53:14:24:59:81:cf:d3:cf:41:b2:
de:ec:75:90:0d:29:5f:fa:dd:ed:d5:ba:04:b1:e8:
11:34:66:1d:8f:ec:7d:25:50:71:40:e8:8d:c9:82:
bb:b0:cc:5b:b9:cf:24:f9:50:18:74:42:f0:35:f9:
fa:28:fc:14:bf:ed:5d:06:74:2d:82:97:0c:e8:a5:
f7:9f:11:bf:6b:9d:c0:33:b8:cf:6e:6f:62:71:8b:
02:40:8b:15:fd:e1:78:ab:20:4a:88:8f:74:4e:00:
37:34:ce:e5:61:dc:7a:63:9c:c0:53:0c:0e:aa:cc:
11:e5:9e:a1:ce:65:f9:80:af:6e:69:12:36:08:cb:
8e:48:84:4c:28:2c:b1:05:65:69:a1:3c:86:d7:3c:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B3:30:15:EA:27:45:4D:11:9E:F1:1D:E9:8E:3E:6F:67:C5:00:0E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MbMwFeonRU0RnvEd6Y4-b2fFAA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:27:64:02:44:7f:2e:f6:14:f2:0b:db:46:e5:17:ff:4d:af:
7e:88:5f:50:55:ba:b8:ee:85:66:12:49:1e:a4:a2:7f:35:37:
9a:34:99:f8:40:43:ee:d3:2d:90:40:0a:bb:77:17:3f:fb:57:
6c:f0:9b:df:7d:17:d9:21:89:86:fe:f0:d2:b6:11:fb:97:46:
d1:98:09:86:fb:f9:e5:c1:85:05:06:b8:2f:ed:c1:d1:12:96:
9d:a0:84:e7:10:cc:df:56:59:8c:5f:de:87:62:87:c6:2c:24:
ee:e0:af:c8:69:8a:ab:b4:cc:3d:24:e9:d8:80:4a:53:96:b7:
ba:c4:d1:99:f9:f3:0b:cf:a9:4b:81:92:9f:6e:bc:25:8a:13:
f6:8a:3d:cd:f4:83:c3:34:94:62:17:91:f8:5b:84:cc:bc:fc:
0a:5b:9c:b7:b0:41:e8:d4:38:e9:00:92:4c:3c:b2:ef:86:fa:
c3:d3:12:08:07:70:6f:0c:c0:83:58:d7:4e:8f:cc:92:75:85:
09:6f:d0:a4:83:09:04:f6:ed:5b:7c:b9:d2:2a:0a:92:94:20:
d8:ba:3f:d3:99:72:0f:54:4a:f6:fa:7a:05:06:42:6d:2c:e1:
3d:bf:c9:a2:e1:6e:c7:a7:c3:2b:16:79:d2:56:2e:4c:cc:32:
7c:95:90:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:57:05 2026 by rpki-client