Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/MT7FDc3brVHPS51pC1TSYkG931E.roa
File: MT7FDc3brVHPS51pC1TSYkG931E.roa (raw, json)
Hash identifier: OXmE7HUkMdWGmBsN2LVDSTT5wVdQkht8zETc4dCdqB4=
Subject key identifier: 31:3E:C5:0D:CD:DB:AD:51:CF:4B:9D:69:0B:54:D2:62:41:BD:DF:51
Certificate issuer: /CN=44f08633c1f5fd7154d88de1d6cc9cd7b80430ad
Certificate serial: 019F31496D9A22915B9616D4D0F7094511CE
Authority key identifier: 44:F0:86:33:C1:F5:FD:71:54:D8:8D:E1:D6:CC:9C:D7:B8:04:30:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/MT7FDc3brVHPS51pC1TSYkG931E.roa
Signing time: Sun 05 Jul 2026 07:58:43 +0000
ROA not before: Sun 05 Jul 2026 07:58:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40992
IP address blocks: 194.50.30.0/23 maxlen: 23
194.50.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:49:6d:9a:22:91:5b:96:16:d4:d0:f7:09:45:11:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f08633c1f5fd7154d88de1d6cc9cd7b80430ad
Validity
Not Before: Jul 5 07:58:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=313ec50dcddbad51cf4b9d690b54d26241bddf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:00:de:a4:d7:7d:e6:1f:46:4f:10:41:60:89:
cf:c0:c2:75:4b:6a:fc:1f:79:05:21:3f:01:32:ad:
fe:a1:e0:ad:d1:d8:79:41:84:97:e4:b1:05:1e:b3:
f1:72:14:6a:70:1c:81:cf:fa:87:eb:c7:d8:95:8f:
a2:45:97:76:8c:f7:45:29:ce:4b:a8:e1:5c:82:55:
33:f1:84:71:7c:e9:1a:f6:f2:60:8d:c8:59:65:93:
10:11:25:a4:e7:65:20:8a:fe:a7:f5:cc:a0:d5:e9:
78:e5:74:58:68:27:48:e6:c0:71:fd:6f:5b:e0:35:
ca:17:b7:93:a0:c7:bb:d0:3a:61:7e:43:78:6d:c8:
e7:74:94:1e:0d:12:42:3e:21:80:2e:86:0c:3e:dd:
5f:ec:15:83:4c:e6:c1:35:02:11:74:6f:b9:80:f6:
b4:ab:96:6e:7b:0b:9f:37:e1:df:64:50:90:e1:b1:
0b:30:cc:a7:e0:4f:e0:6b:66:dd:39:22:cd:bd:00:
65:f4:de:e1:1f:8c:83:bf:2b:96:90:fb:f9:46:b9:
f0:d9:31:28:12:2b:86:56:84:1e:9e:09:3f:16:62:
6d:ed:05:9c:77:bd:4f:49:ea:c1:53:9d:07:76:ce:
d1:4a:23:19:07:ac:f0:db:01:02:b6:51:cf:ca:a1:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3E:C5:0D:CD:DB:AD:51:CF:4B:9D:69:0B:54:D2:62:41:BD:DF:51
X509v3 Authority Key Identifier:
keyid:44:F0:86:33:C1:F5:FD:71:54:D8:8D:E1:D6:CC:9C:D7:B8:04:30:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/MT7FDc3brVHPS51pC1TSYkG931E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.30.0-194.50.32.255
Signature Algorithm: sha256WithRSAEncryption
88:b3:89:f2:a8:a2:b9:49:1f:90:ae:ba:63:40:ce:12:3f:a4:
8f:66:49:e4:0e:6c:f0:ed:57:f8:6d:df:cd:35:55:62:13:f5:
6f:1a:b5:6e:4e:d0:e3:2b:a4:6a:17:10:cd:f0:d2:28:37:54:
41:b7:56:e8:38:c2:92:15:5d:db:14:64:0a:99:49:94:d6:93:
c4:35:b5:8d:ec:6a:e1:c6:dd:37:fb:84:cf:ce:02:a4:f3:6f:
d3:73:67:5d:24:36:3c:06:88:93:35:0b:d6:a7:03:18:45:91:
21:7c:3e:9c:1c:df:63:b2:12:33:22:46:b5:34:1a:80:8e:26:
e8:fb:fc:0c:13:5c:43:f7:09:93:0b:86:3d:43:d0:ed:0e:63:
7a:fb:07:c0:13:0a:af:e7:ca:4b:27:c9:ad:e8:ed:10:e0:fd:
d9:4f:44:64:8e:c3:7b:a0:e5:fd:f2:82:8e:62:3c:73:86:d3:
53:2b:c9:c1:3e:29:ab:e0:1b:28:af:30:b0:71:6e:de:ad:24:
d5:96:e6:e9:eb:00:67:30:26:af:fc:40:8b:48:f5:01:88:d6:
ee:1a:32:39:8c:ee:d7:9b:c2:d7:16:4d:7a:b9:56:b3:9d:92:
58:76:9b:e3:77:ed:3c:e6:48:a0:24:67:76:c3:07:a5:05:50:
b9:85:44:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:45 2026 by rpki-client