Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/88ac46-f007-4407-bbbc-47858f1be578/1/Mu58GDSUJfn4UvJE7EqOfrlPplQ.roa
File: Mu58GDSUJfn4UvJE7EqOfrlPplQ.roa (raw, json)
Hash identifier: gL9Y1xqwkLUDYq6J0sSoP72n6rICDqrysxPHVx7d7Lk=
Subject key identifier: 32:EE:7C:18:34:94:25:F9:F8:52:F2:44:EC:4A:8E:7E:B9:4F:A6:54
Certificate issuer: /CN=0f66f90e4cb38e32b00460927ec1528cdd755339
Certificate serial: 019FF04DB06CBDA27EA4ECC2BAC581726205
Authority key identifier: 0F:66:F9:0E:4C:B3:8E:32:B0:04:60:92:7E:C1:52:8C:DD:75:53:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2b5DkyzjjKwBGCSfsFSjN11Uzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/88ac46-f007-4407-bbbc-47858f1be578/1/Mu58GDSUJfn4UvJE7EqOfrlPplQ.roa
Signing time: Tue 11 Aug 2026 10:10:51 +0000
ROA not before: Tue 11 Aug 2026 10:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21139
IP address blocks: 80.88.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/88ac46-f007-4407-bbbc-47858f1be578/1/D2b5DkyzjjKwBGCSfsFSjN11Uzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/88ac46-f007-4407-bbbc-47858f1be578/1/D2b5DkyzjjKwBGCSfsFSjN11Uzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2b5DkyzjjKwBGCSfsFSjN11Uzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:4d:b0:6c:bd:a2:7e:a4:ec:c2:ba:c5:81:72:62:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f66f90e4cb38e32b00460927ec1528cdd755339
Validity
Not Before: Aug 11 10:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32ee7c18349425f9f852f244ec4a8e7eb94fa654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:b7:49:16:cc:cb:dd:b3:da:7f:f9:bf:28:
8b:c8:20:95:5a:d0:1d:f0:93:29:2d:a9:84:b7:71:
de:8b:00:f8:f3:fe:35:72:75:3f:2c:7e:0c:c1:0b:
9b:be:83:0e:15:d1:ec:f3:6c:a2:2d:35:07:47:0a:
1d:13:f4:9d:d8:a3:0e:dd:64:db:65:5c:3c:f9:f2:
7c:0b:96:5c:89:aa:b6:25:dd:71:34:cd:b2:62:d2:
c0:dc:be:55:c8:42:64:04:98:73:1a:93:ee:71:e8:
eb:0b:ed:c3:a8:0c:2e:cf:a4:8e:dd:f5:a0:1a:6e:
72:0e:36:2d:23:ed:73:e8:b8:76:13:21:04:3f:29:
71:99:a2:ee:ab:5d:8b:09:56:91:6d:df:49:1c:0f:
db:4a:ae:8d:ce:ba:1b:64:86:f1:bf:15:ed:4c:2e:
57:2c:9c:cb:67:a8:72:3b:48:82:6e:92:e9:bd:73:
26:07:4c:0f:ad:eb:d7:6c:bf:0a:b9:db:ac:4d:54:
3d:32:48:28:74:4c:72:98:c6:ce:82:69:c1:ad:1b:
5c:b3:67:06:f0:ca:75:13:b1:3e:8a:80:fe:e9:49:
4e:31:74:28:35:12:80:08:97:cb:a7:03:29:45:df:
73:02:63:7c:5f:da:b0:27:64:42:21:3e:a0:9a:23:
59:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EE:7C:18:34:94:25:F9:F8:52:F2:44:EC:4A:8E:7E:B9:4F:A6:54
X509v3 Authority Key Identifier:
keyid:0F:66:F9:0E:4C:B3:8E:32:B0:04:60:92:7E:C1:52:8C:DD:75:53:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2b5DkyzjjKwBGCSfsFSjN11Uzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/88ac46-f007-4407-bbbc-47858f1be578/1/Mu58GDSUJfn4UvJE7EqOfrlPplQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/88ac46-f007-4407-bbbc-47858f1be578/1/D2b5DkyzjjKwBGCSfsFSjN11Uzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.88.32.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:5c:71:11:c7:35:31:68:67:10:1b:d0:f3:19:80:f2:33:1d:
e5:99:d4:01:0a:b0:0d:66:b4:2c:b7:36:a8:7f:41:76:b5:56:
bd:36:d3:7b:a1:28:22:e6:cd:24:43:63:72:c7:f4:9e:fe:53:
70:2a:c5:13:68:dc:95:66:55:bd:ee:c1:a9:ce:0b:0c:53:f5:
f0:d6:ab:cb:19:3e:4a:f5:2b:11:b7:31:99:20:56:17:80:e1:
87:d9:46:52:03:95:bf:93:29:7b:7c:2a:b0:a3:9a:81:ae:20:
ec:2c:a8:d6:dc:be:88:a5:bc:b9:18:c4:68:ff:c1:2b:bd:da:
12:1b:af:1e:70:77:c2:b8:ad:a6:27:99:56:68:dd:64:b2:b5:
86:d6:d0:b5:72:d3:c1:50:57:ec:dc:bf:df:88:3c:f3:ba:f4:
42:a8:f9:c7:d5:21:0a:10:a9:17:33:23:a6:aa:bb:c0:10:97:
f6:1c:40:7a:33:03:36:b8:51:1e:ae:21:31:86:53:e5:31:47:
fa:6a:64:5b:34:86:32:2f:b6:e0:58:eb:31:df:4e:b8:94:0a:
f1:36:c3:46:2b:94:75:31:aa:a7:59:d2:06:b9:26:53:39:00:
9b:27:8f:11:dc:fe:30:f1:5c:0a:78:4b:c3:f7:d8:d2:8d:5f:
52:3e:95:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:31:41 2026 by rpki-client