Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/MpV_ycO4tTz0-ilBvtKC36nuWAI.roa
File: MpV_ycO4tTz0-ilBvtKC36nuWAI.roa (raw, json)
Hash identifier: vSAtW4LqIhE9X5JdTxt3hPAgyiDA1mTD5qXNu6hLJVg=
Subject key identifier: 32:95:7F:C9:C3:B8:B5:3C:F4:FA:29:41:BE:D2:82:DF:A9:EE:58:02
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 019ECC5046CFFDF7D91CEFD5B594CA2172AA
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/MpV_ycO4tTz0-ilBvtKC36nuWAI.roa
Signing time: Mon 15 Jun 2026 17:24:33 +0000
ROA not before: Mon 15 Jun 2026 17:24:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 194.88.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cc:50:46:cf:fd:f7:d9:1c:ef:d5:b5:94:ca:21:72:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Jun 15 17:24:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32957fc9c3b8b53cf4fa2941bed282dfa9ee5802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:8c:97:f1:00:b1:d3:d8:f7:76:5a:8f:a8:
da:11:0a:93:0e:bc:cb:fc:01:90:76:e6:7f:e7:4d:
57:39:cf:b7:0f:f4:59:11:d8:64:cd:af:85:7b:8b:
42:83:b9:b5:17:23:14:e8:5d:92:50:00:8f:76:55:
c0:33:e0:a5:bb:75:c4:f3:81:c8:35:4b:9c:e6:e9:
10:38:fd:d1:91:70:6a:b0:24:18:22:41:7c:8b:76:
7f:ed:b1:33:97:ee:36:da:ad:7c:c2:97:fa:05:99:
a1:33:f4:c0:b3:35:a3:ab:b0:69:01:ff:1f:13:eb:
47:f4:ad:a4:11:29:55:8c:5b:d2:0a:d8:59:94:4f:
fd:28:ac:4f:8f:03:1d:aa:6c:3d:b0:97:f0:cc:e7:
b0:19:2e:4c:67:b2:84:d2:5c:10:17:ff:89:c4:2a:
b3:4e:16:15:ea:8a:bd:07:78:db:cf:69:89:f4:c5:
9a:a5:bd:c8:ec:9b:37:91:98:3a:b8:fd:29:e0:a9:
fb:3e:93:11:29:10:38:40:a6:a1:c2:3d:c2:c8:8c:
8a:aa:25:18:16:52:59:13:0b:8f:34:56:3f:99:4d:
35:78:12:d7:0b:b0:db:13:12:bd:86:4c:f8:7b:c4:
cd:d4:3b:29:fe:4f:9f:3c:9b:ad:de:39:71:75:ef:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:95:7F:C9:C3:B8:B5:3C:F4:FA:29:41:BE:D2:82:DF:A9:EE:58:02
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/MpV_ycO4tTz0-ilBvtKC36nuWAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.150.0/23
Signature Algorithm: sha256WithRSAEncryption
13:e8:7d:9c:83:e6:3a:96:c2:ad:e1:d3:da:2e:6a:37:4c:cd:
3a:27:f4:93:e0:08:2f:bb:c2:af:14:df:e9:76:e2:81:e1:b8:
58:67:0e:55:ce:16:4d:fe:c2:2b:3c:3b:44:04:0b:08:67:12:
e9:aa:c0:3d:e1:1e:44:05:ee:4c:e1:f1:c3:f4:1f:88:d5:63:
a5:b8:3d:f5:10:5e:f3:2e:ae:2d:17:b6:82:09:c4:4a:05:e1:
3a:5f:1f:a8:ec:6d:99:b9:a6:8d:f9:c3:cf:b0:bd:65:d8:3b:
9e:2b:9e:8c:52:bd:d9:98:8e:9f:7f:7f:d2:ab:aa:d4:ef:5c:
0d:c9:9c:d3:a7:ef:3c:33:c9:37:c0:23:3f:09:fd:66:5b:b1:
c6:db:3b:0e:52:b9:ab:e5:d3:1c:21:91:df:e5:0d:3a:9f:4d:
5e:2d:41:bf:7f:41:b1:87:96:a6:27:f8:a1:ef:d3:39:c7:5e:
7d:0e:1a:4e:24:38:7d:0d:5d:90:19:78:99:e0:2d:78:d4:10:
dc:42:43:e2:db:45:21:1e:2c:bf:00:2a:da:cb:fc:d5:0a:d0:
36:ef:53:3d:c2:db:b2:29:07:e7:dc:96:d3:20:9c:ba:64:51:
ff:5c:e1:79:84:d5:fd:85:b9:d9:a7:3c:f2:f8:32:e4:94:47:
11:f2:53:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:33:57 2026 by rpki-client