Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/MlJBYbax3t58n6UyQAjgc7I1pFo.roa
File: MlJBYbax3t58n6UyQAjgc7I1pFo.roa (raw, json)
Hash identifier: e3iDQ3FYINgIQmMaeKUDVugt5cK6QeLA+QYPHV3bv/I=
Subject key identifier: 32:52:41:61:B6:B1:DE:DE:7C:9F:A5:32:40:08:E0:73:B2:35:A4:5A
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 019E2AFCF5B2C788AD8DDD6622D123020165
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/MlJBYbax3t58n6UyQAjgc7I1pFo.roa
Signing time: Fri 15 May 2026 09:34:41 +0000
ROA not before: Fri 15 May 2026 09:34:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35280
IP address blocks: 185.142.148.0/24 maxlen: 24
185.142.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:fc:f5:b2:c7:88:ad:8d:dd:66:22:d1:23:02:01:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: May 15 09:34:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32524161b6b1dede7c9fa5324008e073b235a45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:66:3f:03:12:34:a0:c2:ea:f2:d2:7b:c5:
ee:eb:50:e6:10:79:3c:b5:0f:55:a3:66:40:7b:99:
fb:c3:89:e4:6d:c5:df:87:12:ae:95:01:98:f7:86:
29:2a:d9:a6:80:2e:df:88:98:2b:72:35:8d:5f:30:
f8:87:df:76:75:98:0b:0e:77:93:1c:e5:62:de:b5:
d4:1c:0a:1a:22:fc:6c:33:72:f8:a5:af:d3:69:4c:
0a:ca:17:7d:49:c6:03:55:b7:85:e2:1e:26:b6:60:
47:28:b5:2c:cd:10:0b:c9:1a:4a:1e:43:5b:b8:af:
7d:e4:92:e8:a8:65:e2:3e:28:6e:dc:98:37:ca:f4:
3c:23:d1:fe:cd:5c:cb:75:24:5f:f7:cf:d1:ca:83:
75:04:dd:e2:81:a8:58:c1:e4:f1:46:e9:bb:8e:2d:
8a:c3:cb:b5:d5:e1:40:a4:eb:ec:2f:b1:70:52:59:
71:2a:dd:70:81:bf:f3:9e:39:08:a4:d8:32:70:71:
53:7d:35:46:ec:38:b6:a8:77:5f:72:f2:fa:ba:94:
df:72:f2:60:7d:bf:f1:83:86:38:4f:94:5e:49:63:
7d:10:8a:81:16:aa:71:7a:d5:86:e5:54:b4:b4:b3:
dc:8d:c4:35:73:58:9d:b8:b7:0d:a4:12:39:81:4b:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:52:41:61:B6:B1:DE:DE:7C:9F:A5:32:40:08:E0:73:B2:35:A4:5A
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/MlJBYbax3t58n6UyQAjgc7I1pFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.148.0/23
Signature Algorithm: sha256WithRSAEncryption
31:a3:5f:02:da:92:e7:7f:f4:36:21:4e:e3:1f:78:6b:9d:02:
e3:fd:50:2e:d9:3a:06:2d:8d:50:79:72:26:c5:9d:1b:4f:1d:
d4:59:e7:2a:6f:ea:ec:e4:a2:c1:e7:07:dd:60:42:c2:5f:e2:
32:06:e2:46:e6:9a:85:40:8a:87:e2:56:96:df:2f:0e:af:01:
56:8e:78:80:f7:0f:42:23:21:28:86:cd:11:b5:36:d2:f8:96:
d0:90:8c:e7:ca:50:13:7b:41:62:c3:e6:1d:fb:a7:fb:1c:5d:
5a:90:e8:0b:ec:5f:ac:e6:6b:d1:4e:53:ad:91:d3:06:79:bf:
b5:f2:7f:93:a8:ec:75:33:63:1f:59:be:6a:22:e2:07:8f:65:
18:4e:4f:e5:e8:98:ba:39:a1:32:65:c7:6e:1e:b9:35:f3:4e:
14:6c:6d:12:60:85:db:ed:cd:ab:24:bf:ec:e9:8b:9f:44:a6:
37:a3:8b:f3:df:58:a0:86:bb:ea:59:e3:d8:29:1a:cf:c2:35:
44:d7:eb:d4:89:56:0e:31:f9:36:21:d9:de:cc:1a:7a:a6:56:
4b:80:c1:90:f1:ff:83:40:a8:56:4c:47:50:83:b8:ee:2e:d2:
fa:37:49:cc:f3:66:d8:76:ba:20:e2:17:2e:f1:c6:39:97:48:
f2:7c:0b:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4q/PWyx4itjd1mItEjAgFlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NjFjY2IwMzc0MTA1NjcxNWE2YmU0ODA1MzIxNjYyZDg4
ZTdlN2MwHhcNMjYwNTE1MDkzNDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjUyNDE2MWI2YjFkZWRlN2M5ZmE1MzI0MDA4ZTA3M2IyMzVhNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxtmPwMSNKDC6vLSe8Xu61DmEHk8
tQ9Vo2ZAe5n7w4nkbcXfhxKulQGY94YpKtmmgC7fiJgrcjWNXzD4h992dZgLDneT
HOVi3rXUHAoaIvxsM3L4pa/TaUwKyhd9ScYDVbeF4h4mtmBHKLUszRALyRpKHkNb
uK995JLoqGXiPihu3Jg3yvQ8I9H+zVzLdSRf98/RyoN1BN3igahYweTxRum7ji2K
w8u11eFApOvsL7FwUllxKt1wgb/znjkIpNgycHFTfTVG7Di2qHdfcvL6upTfcvJg
fb/xg4Y4T5ReSWN9EIqBFqpxetWG5VS0tLPcjcQ1c1iduLcNpBI5gUuinwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDJSQWG2sd7efJ+lMkAI4HOyNaRaMB8GA1UdIwQY
MBaAFKVhzLA3QQVnFaa+SAUyFmLYjn58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODkt
YWU0ZTY5ODY2NGYxLzEvTWxKQlliYXgzdDU4bjZVeVFBamdjN0kxcEZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODktYWU0ZTY5ODY2NGYx
LzEvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuY6UMA0G
CSqGSIb3DQEBCwUAA4IBAQAxo18C2pLnf/Q2IU7jH3hrnQLj/VAu2ToGLY1QeXIm
xZ0bTx3UWecqb+rs5KLB5wfdYELCX+IyBuJG5pqFQIqH4laW3y8OrwFWjniA9w9C
IyEohs0RtTbS+JbQkIznylATe0Fiw+Yd+6f7HF1akOgL7F+s5mvRTlOtkdMGeb+1
8n+TqOx1M2MfWb5qIuIHj2UYTk/l6Ji6OaEyZcduHrk1804UbG0SYIXb7c2rJL/s
6YufRKY3o4vz31ighrvqWePYKRrPwjVE1+vUiVYOMfk2IdnezBp6plZLgMGQ8f+D
QKhWTEdQg7juLtL6N0nM82bYdrog4hcu8cY5l0jyfAth
-----END CERTIFICATE-----
Generated at Sun May 31 12:42:49 2026 by rpki-client