Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/MScRVKmXyA2iT_CEX8Vcd_NcPuk.roa
File: MScRVKmXyA2iT_CEX8Vcd_NcPuk.roa (raw, json)
Hash identifier: 8X1mJRhcs4HUA1BUwufZrZ3ma3rYjjRHTESY45Kcsuw=
Subject key identifier: 31:27:11:54:A9:97:C8:0D:A2:4F:F0:84:5F:C5:5C:77:F3:5C:3E:E9
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 019DBEFAE46BB6BF3294A80E97A3058A3EAB
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/MScRVKmXyA2iT_CEX8Vcd_NcPuk.roa
Signing time: Fri 24 Apr 2026 10:13:26 +0000
ROA not before: Fri 24 Apr 2026 10:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202583
IP address blocks: 185.72.0.0/22 maxlen: 24
185.250.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:be:fa:e4:6b:b6:bf:32:94:a8:0e:97:a3:05:8a:3e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Apr 24 10:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31271154a997c80da24ff0845fc55c77f35c3ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:dc:9f:84:55:ad:11:38:94:f2:8a:2b:a5:
dc:ab:46:bd:e8:a0:fa:a0:93:0f:81:11:07:d6:51:
c0:dc:78:61:db:90:85:8d:1b:8a:18:71:5e:88:a6:
8a:35:9b:5a:dd:dd:64:43:11:fd:0f:e2:64:17:c8:
26:e3:a3:8e:53:47:24:28:11:37:a3:f6:73:7d:41:
6a:31:3d:0a:d9:4f:5b:e0:be:38:b9:d1:59:02:37:
4f:23:0f:0c:34:28:f7:f4:83:25:19:27:98:c1:35:
82:56:3d:c3:cc:6b:39:56:76:8a:d6:b1:de:1c:f8:
18:c5:25:05:0a:72:87:0e:71:30:e1:ab:3e:d3:83:
5f:48:fb:45:d1:df:86:14:8e:5f:c0:c5:07:30:05:
b2:fd:9c:8c:51:36:26:58:9e:eb:ba:89:59:ba:3b:
cd:71:1d:74:f1:a9:56:9e:ba:7e:7b:68:c4:66:2c:
33:7e:32:37:29:55:f7:bc:67:2d:b7:db:00:80:ff:
0b:66:e1:b4:55:fc:13:50:07:c6:c1:4c:c2:ed:a2:
33:7e:ca:50:fc:1d:4b:fc:fd:f9:5a:6d:7f:3c:47:
fc:60:d3:94:06:5b:f1:56:b8:8c:66:ad:08:6a:02:
79:f0:fd:d7:6d:26:a6:ed:98:86:59:30:d1:66:9d:
f5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:27:11:54:A9:97:C8:0D:A2:4F:F0:84:5F:C5:5C:77:F3:5C:3E:E9
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/MScRVKmXyA2iT_CEX8Vcd_NcPuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.0.0/22
185.250.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:20:be:84:45:f0:2d:db:be:23:b3:85:ce:d0:b8:37:6a:e8:
cb:59:3e:f3:6e:f9:ef:b8:ad:70:29:97:46:de:da:41:dc:56:
d7:77:49:81:fe:ea:eb:4f:73:23:e4:d9:a5:30:d3:30:7f:59:
37:6e:8b:44:74:c3:e8:20:c4:f1:f8:e1:8d:bd:83:81:9c:18:
d7:0f:a0:e7:46:73:e7:84:3f:5e:b9:12:a7:f1:a4:2b:e7:15:
df:cd:73:b0:b9:3b:4c:f3:ed:41:07:e1:5b:ed:21:0c:2e:69:
a9:76:cb:de:63:b7:98:9a:b9:21:a6:54:6f:99:c0:ba:b0:b6:
4c:b5:08:e8:a4:96:e7:89:6a:b3:ca:3a:b4:f4:6c:2b:fa:1c:
ff:65:0d:9d:cd:de:36:e3:84:e2:3e:de:62:c6:a6:6d:4e:e5:
32:68:c7:1e:69:17:a3:20:4f:29:63:33:4a:92:c4:a7:f2:bb:
97:c9:84:39:d4:31:a2:3b:90:43:e0:16:3c:4a:f2:6f:40:1c:
ca:57:07:15:2e:13:e5:74:8c:b4:c9:61:d1:2b:75:2e:bf:32:
23:d8:5d:38:a6:43:e7:ef:1e:f4:2b:bd:ff:23:45:c5:e0:f0:
37:13:22:64:ff:2b:46:3e:57:02:e7:0b:8e:27:c3:97:44:35:
dd:39:02:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:05 2026 by rpki-client