Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/MxA928FQcjAkVCSjwwJv4JJaR-k.roa
File: MxA928FQcjAkVCSjwwJv4JJaR-k.roa (raw, json)
Hash identifier: 5QkknIrAdDlN1xL+joC+ThR26We1aMoSSm0KuEF+lcM=
Subject key identifier: 33:10:3D:DB:C1:50:72:30:24:54:24:A3:C3:02:6F:E0:92:5A:47:E9
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 019ECFA4CE08F78BB9C52F238C6F7D40C574
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/MxA928FQcjAkVCSjwwJv4JJaR-k.roa
Signing time: Tue 16 Jun 2026 08:55:44 +0000
ROA not before: Tue 16 Jun 2026 08:55:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.191.146.0/24 maxlen: 24
185.191.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:a4:ce:08:f7:8b:b9:c5:2f:23:8c:6f:7d:40:c5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Jun 16 08:55:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33103ddbc1507230245424a3c3026fe0925a47e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:da:c5:55:a2:32:b7:6a:47:60:b3:6e:92:
92:ab:a0:8a:04:a5:8d:31:6c:66:4b:71:b7:1b:03:
67:5e:ee:0f:8f:48:06:47:6e:82:0a:57:7a:9a:c3:
e4:5a:3d:74:af:0a:08:01:aa:e5:ac:8c:c2:97:1c:
6e:0f:7a:7f:fc:ab:39:bd:16:bc:56:1a:54:00:1c:
b7:2a:91:65:4c:4d:8d:1f:4b:b9:63:f9:ca:5c:ca:
bd:b5:14:3d:75:55:7c:5b:63:63:3b:13:54:6a:0b:
64:55:3f:c7:da:0c:0c:f7:20:dd:71:8b:62:80:30:
36:62:3c:09:cd:a7:87:c9:21:04:b1:c5:e8:cb:f5:
06:ad:a7:d4:db:86:f2:cd:38:37:3c:53:66:dd:c3:
d8:cf:95:06:25:b4:7f:ca:8f:e7:14:01:af:3a:31:
f2:32:69:f6:06:cf:60:54:c6:9e:b4:1d:46:62:9d:
41:40:59:78:bc:c3:2d:ef:36:70:32:61:d6:d0:e6:
49:09:50:78:ae:da:81:87:fb:b0:f1:65:a1:e5:73:
c8:9d:7d:2a:46:81:a7:b6:e5:79:84:40:2a:9d:9b:
7c:a7:38:98:09:0e:02:59:6a:eb:ff:ee:cb:cd:59:
a3:44:b1:ff:dc:ae:ff:39:c4:91:74:76:b3:6f:60:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:10:3D:DB:C1:50:72:30:24:54:24:A3:C3:02:6F:E0:92:5A:47:E9
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/MxA928FQcjAkVCSjwwJv4JJaR-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.146.0/23
Signature Algorithm: sha256WithRSAEncryption
94:11:4a:2f:11:3c:57:3f:42:c9:6f:41:50:95:a8:c3:87:aa:
e8:05:24:b5:cf:fa:73:34:d4:4f:b2:0e:86:a5:c0:93:b3:b3:
65:6a:4a:ae:a8:47:9a:19:db:61:7a:72:57:ae:72:85:c6:57:
d8:ce:db:58:01:1b:9c:2a:38:54:88:e5:5f:f7:84:cf:e9:3c:
97:b7:84:3f:86:9c:2a:04:f0:63:9a:8c:65:e0:b0:28:0a:de:
00:1a:9c:67:0c:27:bc:93:93:1b:fe:2b:fa:a8:de:ca:dc:d7:
1e:74:1a:19:2a:ee:98:b2:c2:a0:c2:94:51:62:2f:23:05:f2:
14:67:21:a5:8d:7d:b1:a9:37:8f:88:93:48:4e:21:41:a7:23:
10:e6:33:67:3d:81:d7:33:65:dd:42:05:58:cb:e4:2b:bd:82:
d7:82:da:40:c8:c3:fa:f3:54:de:0e:71:55:0b:a0:1c:26:e2:
a4:af:23:3f:b0:7a:0b:4e:79:89:f7:e9:a3:c5:83:e8:1f:41:
65:ac:19:11:29:fd:f0:54:04:c7:58:78:82:c6:1e:0d:c1:aa:
4e:c2:87:3e:5a:c0:62:08:7a:4b:be:d8:23:0d:94:08:b3:dc:
47:a3:c7:76:0a:43:c7:be:fb:d1:12:59:c4:1e:a3:e3:fc:b4:
f8:71:59:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7PpM4I94u5xS8jjG99QMV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNjQwMzM5ZTU5YWRkYzc1ZmQ5NzgxMDFiNDAwODJiNWQy
Yjg3OTYwHhcNMjYwNjE2MDg1NTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzEwM2RkYmMxNTA3MjMwMjQ1NDI0YTNjMzAyNmZlMDkyNWE0N2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMzaxVWiMrdqR2CzbpKSq6CKBKWN
MWxmS3G3GwNnXu4Pj0gGR26CCld6msPkWj10rwoIAarlrIzClxxuD3p//Ks5vRa8
VhpUABy3KpFlTE2NH0u5Y/nKXMq9tRQ9dVV8W2NjOxNUagtkVT/H2gwM9yDdcYti
gDA2YjwJzaeHySEEscXoy/UGrafU24byzTg3PFNm3cPYz5UGJbR/yo/nFAGvOjHy
Mmn2Bs9gVMaetB1GYp1BQFl4vMMt7zZwMmHW0OZJCVB4rtqBh/uw8WWh5XPInX0q
RoGntuV5hEAqnZt8pziYCQ4CWWrr/+7LzVmjRLH/3K7/OcSRdHazb2D6wQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDMQPdvBUHIwJFQko8MCb+CSWkfpMB8GA1UdIwQY
MBaAFN1kAznlmt3HX9l4EBtACCtdK4eWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAt
NjFiNzMzNTRhYmRiLzEvTXhBOTI4RlFjakFrVkNTand3SnY0SkphUi1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAtNjFiNzMzNTRhYmRi
LzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBub+SMA0G
CSqGSIb3DQEBCwUAA4IBAQCUEUovETxXP0LJb0FQlajDh6roBSS1z/pzNNRPsg6G
pcCTs7NlakquqEeaGdthenJXrnKFxlfYzttYARucKjhUiOVf94TP6TyXt4Q/hpwq
BPBjmoxl4LAoCt4AGpxnDCe8k5Mb/iv6qN7K3NcedBoZKu6YssKgwpRRYi8jBfIU
ZyGljX2xqTePiJNITiFBpyMQ5jNnPYHXM2XdQgVYy+QrvYLXgtpAyMP681TeDnFV
C6AcJuKkryM/sHoLTnmJ9+mjxYPoH0FlrBkRKf3wVATHWHiCxh4NwapOwoc+WsBi
CHpLvtgjDZQIs9xHo8d2CkPHvvvRElnEHqPj/LT4cVml
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:53 2026 by rpki-client