Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/MRI12LDIfuxDk-RAsS5kzIsowbg.roa
File: MRI12LDIfuxDk-RAsS5kzIsowbg.roa (raw, json)
Hash identifier: G51ODDOqrLhdbvBDKBaAFuDk7Db8dc3Q2aZnUmjS+3o=
Subject key identifier: 31:12:35:D8:B0:C8:7E:EC:43:93:E4:40:B1:2E:64:CC:8B:28:C1:B8
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F4B43507725212DA6BA9CD514F88CB681
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/MRI12LDIfuxDk-RAsS5kzIsowbg.roa
Signing time: Fri 10 Jul 2026 09:02:10 +0000
ROA not before: Fri 10 Jul 2026 09:02:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197200
IP address blocks: 83.245.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:43:50:77:25:21:2d:a6:ba:9c:d5:14:f8:8c:b6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 10 09:02:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=311235d8b0c87eec4393e440b12e64cc8b28c1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:0f:fb:30:cc:40:4d:43:82:f6:12:eb:67:
15:88:3d:34:bf:de:f4:0b:d4:2e:33:2e:60:47:02:
20:7d:97:dd:7b:84:01:3e:3b:52:8b:cd:d3:16:cd:
6d:54:de:ba:bd:14:a9:b9:b9:79:48:13:ad:e3:f5:
8e:16:ee:75:93:16:b0:47:fd:f2:4a:12:f1:f9:06:
dc:76:75:b5:f5:94:c9:1c:40:77:59:70:31:e0:93:
40:17:ae:d1:64:01:c3:a2:a8:83:e4:7b:b4:a1:7f:
61:c8:ce:92:72:ea:ba:8e:3e:0c:a1:69:aa:c8:1e:
ab:4d:78:88:0c:55:3e:07:0c:dc:f3:18:9d:04:47:
48:b0:c6:f4:b4:36:61:55:ff:9f:fe:bf:ae:95:45:
24:23:74:02:5a:71:a5:54:66:dc:c3:04:36:e2:dd:
bf:0d:12:85:85:62:bf:09:35:57:69:53:ea:79:c4:
79:25:9b:07:0f:9e:74:c9:99:a0:3e:2e:29:a4:64:
5c:ae:57:5f:3a:0f:b2:74:5e:0c:00:9a:ca:06:0c:
0f:6e:62:b8:0e:fe:a6:98:07:19:20:a8:26:b8:7c:
d2:b3:bb:cf:83:1f:51:6c:31:4c:8d:95:5e:aa:72:
d8:48:ba:cb:94:1a:68:8a:b5:a0:6e:21:71:0c:e0:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:12:35:D8:B0:C8:7E:EC:43:93:E4:40:B1:2E:64:CC:8B:28:C1:B8
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/MRI12LDIfuxDk-RAsS5kzIsowbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.108.0/24
Signature Algorithm: sha256WithRSAEncryption
86:32:7b:80:91:db:e9:48:1b:26:ca:65:a7:ee:f7:f6:21:4b:
bd:59:61:b5:ee:e0:35:68:01:c0:8a:32:d7:e0:ad:e7:6b:89:
6b:6a:73:4c:b9:c6:d2:c5:6d:9b:95:ea:de:4b:6e:ec:e4:24:
29:53:46:62:cd:44:70:c7:0a:97:06:40:f1:55:d5:ff:af:6c:
37:cd:b8:62:8d:5c:4a:93:5e:95:de:b5:72:5e:37:59:94:ab:
89:85:2c:f8:6a:12:af:d7:6a:d8:4e:34:24:e6:d1:53:01:80:
ba:fc:4a:e6:41:37:dc:a1:12:c5:b9:06:63:86:24:06:11:05:
39:47:6f:b1:e1:a8:77:68:b7:bf:ff:b9:c0:56:b6:88:6d:f6:
08:10:9b:55:58:bf:15:9e:76:1e:17:46:ae:e3:93:9b:c6:87:
ae:ad:81:cb:a8:14:bf:17:d1:b8:ca:20:3a:4a:6e:31:43:70:
9b:8f:96:de:05:7e:85:66:3a:b0:de:9c:87:22:58:bb:82:18:
48:45:bd:da:c9:8a:75:3c:d9:2d:b2:e3:61:44:d6:3f:ff:bb:
d8:9a:91:a5:b2:ba:e3:c9:49:d1:c6:f6:84:44:d9:5e:c1:5b:
9d:9c:79:f7:b0:db:09:e6:66:3c:a1:80:26:54:8e:1f:03:6d:
1f:9f:30:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9LQ1B3JSEtprqc1RT4jLaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjYwNzEwMDkwMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTEyMzVkOGIwYzg3ZWVjNDM5M2U0NDBiMTJlNjRjYzhiMjhjMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx30P+zDMQE1DgvYS62cViD00v970
C9QuMy5gRwIgfZfde4QBPjtSi83TFs1tVN66vRSpubl5SBOt4/WOFu51kxawR/3y
ShLx+QbcdnW19ZTJHEB3WXAx4JNAF67RZAHDoqiD5Hu0oX9hyM6Scuq6jj4MoWmq
yB6rTXiIDFU+Bwzc8xidBEdIsMb0tDZhVf+f/r+ulUUkI3QCWnGlVGbcwwQ24t2/
DRKFhWK/CTVXaVPqecR5JZsHD550yZmgPi4ppGRcrldfOg+ydF4MAJrKBgwPbmK4
Dv6mmAcZIKgmuHzSs7vPgx9RbDFMjZVeqnLYSLrLlBpoirWgbiFxDOA+PwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDESNdiwyH7sQ5PkQLEuZMyLKMG4MB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvTVJJMTJMRElmdXhEay1SQXNTNWt6SXNvd2JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU/VsMA0G
CSqGSIb3DQEBCwUAA4IBAQCGMnuAkdvpSBsmymWn7vf2IUu9WWG17uA1aAHAijLX
4K3na4lranNMucbSxW2blereS27s5CQpU0ZizURwxwqXBkDxVdX/r2w3zbhijVxK
k16V3rVyXjdZlKuJhSz4ahKv12rYTjQk5tFTAYC6/ErmQTfcoRLFuQZjhiQGEQU5
R2+x4ah3aLe//7nAVraIbfYIEJtVWL8VnnYeF0au45ObxoeurYHLqBS/F9G4yiA6
Sm4xQ3Cbj5beBX6FZjqw3pyHIli7ghhIRb3ayYp1PNktsuNhRNY//7vYmpGlsrrj
yUnRxvaERNlewVudnHn3sNsJ5mY8oYAmVI4fA20fnzBA
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:58:54 2026 by rpki-client