Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/MTQgLr13310uI_yhAu6jzZuE1UU.roa
File: MTQgLr13310uI_yhAu6jzZuE1UU.roa (raw, json)
Hash identifier: EsiVzDs2G2DTM0ZWt4HQT604e3bwUYswQO08w19wxAA=
Subject key identifier: 31:34:20:2E:BD:77:DF:5D:2E:23:FC:A1:02:EE:A3:CD:9B:84:D5:45
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 01A111DC334C4E43D4B5E89F46546EEC0CA4
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/MTQgLr13310uI_yhAu6jzZuE1UU.roa
Signing time: Tue 06 Oct 2026 15:36:45 +0000
ROA not before: Tue 06 Oct 2026 15:36:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 130.183.0.0/16 maxlen: 16
134.104.0.0/16 maxlen: 16
139.19.0.0/16 maxlen: 16
141.5.0.0/16 maxlen: 24
149.217.0.0/16 maxlen: 16
192.68.254.0/24 maxlen: 24
2a02:d480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:dc:33:4c:4e:43:d4:b5:e8:9f:46:54:6e:ec:0c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Oct 6 15:36:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3134202ebd77df5d2e23fca102eea3cd9b84d545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:dc:44:1e:99:c8:ce:d0:10:d7:57:d0:f7:
48:86:b3:fd:85:d5:5f:d7:21:c3:2b:e0:b0:39:4a:
8a:fc:e2:95:b5:58:11:ce:60:49:df:97:f1:8d:26:
5a:6d:e9:0c:3d:d1:44:87:3a:a1:cb:95:ac:65:4b:
17:75:ba:ff:6b:49:63:8a:17:c0:c4:23:02:8f:a1:
53:60:49:e0:3b:86:55:05:77:a3:b2:07:36:bc:05:
2b:76:d6:e1:ed:7d:e0:fc:1e:1e:41:4d:d2:df:e4:
58:01:e2:bb:b8:92:cc:0e:17:7c:fd:c9:a9:4d:1a:
17:7e:94:9d:bc:38:5e:1f:3e:ba:c2:42:1e:dd:91:
30:55:83:37:b0:59:3b:5a:98:7b:af:cd:3b:12:fb:
2e:ae:c5:98:31:55:52:64:a0:71:59:e4:e7:cb:d5:
1e:06:9c:98:6b:d1:ea:20:9e:f0:89:84:38:39:ce:
ed:cd:95:28:d4:4d:e2:34:ed:44:e9:d4:9e:91:ab:
b6:b5:bd:db:2c:ed:05:11:1b:51:74:bc:f3:d8:fe:
e7:7f:13:7f:5f:63:51:e3:66:20:15:75:08:db:f9:
7e:e0:e7:a1:5b:73:6c:14:28:c4:57:23:b4:3d:eb:
26:c7:70:78:f4:6e:09:19:96:2a:6c:c2:b2:ae:b7:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:34:20:2E:BD:77:DF:5D:2E:23:FC:A1:02:EE:A3:CD:9B:84:D5:45
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/MTQgLr13310uI_yhAu6jzZuE1UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.183.0.0/16
134.104.0.0/16
139.19.0.0/16
141.5.0.0/16
149.217.0.0/16
192.68.254.0/24
IPv6:
2a02:d480::/32
Signature Algorithm: sha256WithRSAEncryption
71:a3:62:d4:6b:da:73:50:d2:e6:b5:9f:e4:74:ff:89:fb:c6:
21:6e:59:9d:ba:60:94:9b:60:7c:66:cd:2b:c0:75:d5:e4:31:
30:54:72:f6:25:d0:ae:51:e1:1c:06:c3:a9:5e:30:70:1d:ee:
6b:b7:80:c3:0b:a3:3e:63:f6:a4:a6:71:7c:2f:00:81:53:7a:
c8:8c:76:33:46:a4:32:dd:3e:6c:c0:ed:33:0d:86:46:d1:19:
4d:4d:19:2a:96:7a:dd:08:11:46:d2:d9:25:42:5f:eb:30:9e:
88:54:a1:94:93:d4:98:ee:e0:cb:64:fe:01:bd:b1:17:f6:0d:
d9:4a:d9:b0:dd:31:3e:f9:94:3e:55:18:d5:29:b5:41:aa:92:
12:cc:82:24:09:e9:37:52:1f:03:aa:23:5c:20:c4:72:b0:70:
ca:44:f7:42:fd:d8:64:bb:81:da:f1:96:3b:ff:85:6e:b4:0e:
11:00:9a:a2:a6:fd:09:05:3e:8e:12:4e:d7:b1:7f:d5:21:0e:
f4:b9:bd:dc:75:c6:6a:ad:59:77:80:ff:22:a2:f2:b7:2a:c5:
d5:dd:f2:a4:34:bc:7c:c7:66:09:78:bf:55:20:03:1e:ca:dd:
32:bd:d6:99:60:d7:df:26:3a:a5:77:b8:0a:09:08:ac:46:35:
30:d5:23:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:24:45 2026 by rpki-client