Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/MpVDdZVjs6o-qMOD190Ng2Ab-BA.roa
File: MpVDdZVjs6o-qMOD190Ng2Ab-BA.roa (raw, json)
Hash identifier: XTqryQxsgwnMnz4dorfEpaXMEpUJlVrgZAs/SsGa4Ko=
Subject key identifier: 32:95:43:75:95:63:B3:AA:3E:A8:C3:83:D7:DD:0D:83:60:1B:F8:10
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01A16332105912C4D7F2E2F99060923F3A56
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/MpVDdZVjs6o-qMOD190Ng2Ab-BA.roa
Signing time: Thu 22 Oct 2026 10:39:47 +0000
ROA not before: Thu 22 Oct 2026 10:39:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219202
IP address blocks: 178.130.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:32:10:59:12:c4:d7:f2:e2:f9:90:60:92:3f:3a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Oct 22 10:39:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=329543759563b3aa3ea8c383d7dd0d83601bf810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:9f:b3:7f:dd:e1:dd:eb:0d:59:5c:7c:a0:
b1:d0:03:e9:6d:28:63:85:ba:f1:96:0c:01:73:86:
57:28:4f:3a:8a:69:df:51:2b:3e:24:16:79:af:ee:
55:39:d8:10:cc:ff:01:97:c5:e4:16:53:b7:bc:ee:
1f:ef:41:73:db:9b:47:7b:53:e7:54:65:a8:31:9e:
f8:e3:ce:4f:60:59:98:39:7f:03:78:fa:c6:cb:ec:
48:56:1b:65:5d:44:67:fa:ca:eb:59:72:ab:90:15:
c6:cc:a9:6b:9f:08:45:0f:d2:1d:c9:d1:70:8b:7b:
ab:a8:d4:25:6d:3e:b2:9b:ad:cb:e2:1e:c0:6b:57:
83:da:36:86:00:aa:52:35:aa:60:c0:5e:28:d1:2e:
9d:3d:b3:6e:c8:23:2f:73:37:42:23:08:1e:c5:8b:
d0:5d:3a:8c:a2:b9:4d:76:40:e6:b9:70:3b:df:17:
04:1c:d4:26:11:95:ca:42:21:47:4d:1e:b2:9b:c6:
b5:a9:8a:5a:a8:bd:8a:d5:da:8c:4c:53:42:d7:24:
88:34:fb:df:2e:fe:e5:d5:68:1d:3f:46:3d:12:8d:
9d:bb:20:ff:ab:ec:32:d1:87:03:18:40:59:96:39:
2a:5c:fd:23:b0:b2:a0:bf:95:95:58:55:58:c1:ab:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:95:43:75:95:63:B3:AA:3E:A8:C3:83:D7:DD:0D:83:60:1B:F8:10
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/MpVDdZVjs6o-qMOD190Ng2Ab-BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.130.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f5:f7:f4:d1:7b:d2:ea:09:f6:dc:ce:70:bc:b1:cf:45:95:
ae:55:d9:72:94:b9:37:e8:bd:ec:48:9e:a6:2e:84:e3:83:44:
dd:96:86:43:b7:6d:a9:c2:24:a2:3b:0e:1b:f5:c9:42:5e:7a:
7e:40:0e:02:07:de:f1:9b:65:dd:0e:b4:ee:71:b2:5e:56:c6:
67:44:24:55:61:e8:79:63:5a:e0:3d:78:bc:16:8e:71:90:9b:
52:c5:f8:99:84:d4:a8:e4:71:fa:5d:1b:d9:e6:21:37:5a:31:
30:67:80:d5:44:b0:42:07:f6:61:e4:2b:5c:b3:f2:79:9f:51:
89:2f:51:89:62:2f:14:a1:e0:37:e4:94:b2:8d:c3:eb:a3:2e:
50:08:34:d1:25:7f:a9:ce:7b:05:7e:62:3f:f4:b4:4f:63:fb:
53:e1:ac:8c:7f:52:a7:13:7a:a1:e3:26:7b:81:36:cc:c4:f9:
ec:fe:7c:48:8f:07:33:fa:7b:c5:9f:90:8b:a4:7b:5b:e5:fd:
68:3f:56:61:02:02:31:25:66:03:65:68:9a:46:58:41:69:1a:
75:f5:64:0a:ba:cc:d1:17:db:02:30:02:08:05:8c:70:a1:1e:
33:2e:41:dd:ae:8e:89:da:5a:52:f3:de:5b:2b:01:f8:59:0e:
65:71:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:36:07 2026 by rpki-client