Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/MtiFhvTFU6eR6K3JPWffFMPpWmA.roa
File: MtiFhvTFU6eR6K3JPWffFMPpWmA.roa (raw, json)
Hash identifier: DwTW8G9tlrgSrBgtQLqohKIvgiVA/TbEnEkmiFwX6uc=
Subject key identifier: 32:D8:85:86:F4:C5:53:A7:91:E8:AD:C9:3D:67:DF:14:C3:E9:5A:60
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 019E6E5E3009F8A4C5DBDF5ACB53B7FFB4D8
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/MtiFhvTFU6eR6K3JPWffFMPpWmA.roa
Signing time: Thu 28 May 2026 11:35:26 +0000
ROA not before: Thu 28 May 2026 11:35:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209874
IP address blocks: 165.217.161.0/24 maxlen: 24
165.217.162.0/24 maxlen: 24
165.217.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:5e:30:09:f8:a4:c5:db:df:5a:cb:53:b7:ff:b4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: May 28 11:35:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32d88586f4c553a791e8adc93d67df14c3e95a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:16:5c:1c:28:f3:51:68:ff:de:0e:b3:2c:
2a:3e:18:5d:10:fc:8b:f2:ac:27:17:bf:17:55:86:
2e:18:bc:d2:a7:a5:4d:b6:b2:f5:79:97:1e:4c:53:
eb:c4:dd:95:58:91:eb:66:d8:77:d1:8e:c7:9b:82:
ce:32:bd:3a:dc:0b:92:02:2d:80:9e:9f:83:0a:23:
bb:b0:83:1d:72:2f:38:01:0f:5a:9b:f8:ca:02:0e:
19:56:3f:aa:39:ee:0b:93:1d:84:df:cd:7c:cb:7c:
eb:75:e5:7c:b6:fe:f1:fe:ea:65:bb:6a:ed:56:dc:
6d:8d:57:16:e7:52:e3:aa:54:90:fa:65:f1:bc:f7:
1e:ee:fa:85:34:5f:49:4b:ea:90:9b:ac:28:57:6e:
83:03:4c:4d:31:68:c4:b4:96:7f:7b:08:f5:cc:80:
11:53:08:38:65:8a:75:e5:90:64:d5:19:d5:e4:cd:
60:61:e1:cf:47:43:53:64:09:fd:da:68:48:93:b9:
78:93:cb:86:a5:c4:c2:14:74:ca:ba:dd:59:71:48:
41:64:c1:fb:ca:01:60:59:dd:52:8f:9e:df:23:97:
4b:ea:2e:3e:08:b5:80:32:0b:2c:5d:e9:53:e5:85:
31:bb:1e:ae:ed:45:4d:a9:bc:12:72:aa:77:1e:57:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D8:85:86:F4:C5:53:A7:91:E8:AD:C9:3D:67:DF:14:C3:E9:5A:60
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/MtiFhvTFU6eR6K3JPWffFMPpWmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.217.161.0-165.217.163.255
Signature Algorithm: sha256WithRSAEncryption
27:6b:01:56:47:9c:47:7b:af:49:92:f3:66:a1:b3:14:4b:36:
bd:9e:1a:0c:e4:f8:c3:ac:0f:72:1a:92:08:4b:5b:10:3d:d7:
1a:60:00:6d:5c:48:a5:46:b0:74:c9:48:7c:9a:e5:53:82:b1:
48:2f:11:40:58:5e:f3:3b:d4:27:7e:d7:25:69:b0:e2:f7:10:
f8:cb:4f:8b:c0:9c:ed:f5:ef:45:5a:ec:34:4f:ff:f8:93:44:
76:41:a5:ad:43:98:1c:f3:75:55:85:70:22:69:a3:7c:49:60:
e8:ee:d7:9a:fc:73:8c:ca:6a:14:de:60:36:13:ee:2f:3d:4f:
3a:d9:7e:d9:a5:ee:a2:6c:6f:e5:9f:9e:00:75:f1:33:db:a8:
48:cd:5a:40:bd:4a:86:5d:17:8e:ef:3d:4b:4b:20:3e:b8:18:
c1:44:1c:1d:1e:b7:de:34:5b:0f:9d:2b:78:dd:8c:58:3b:5e:
57:62:80:24:37:6b:64:06:4b:d4:6d:86:e3:59:36:2f:40:c2:
21:40:ad:19:42:77:b4:cd:28:9c:ed:dd:d7:05:dc:40:13:e9:
af:64:2e:8f:a5:e9:b4:6b:6e:9b:e7:74:b1:60:3e:39:52:70:
d6:e8:25:51:50:57:d3:89:7b:ec:8d:65:b7:8c:db:16:73:f9:
f1:93:54:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:04:22 2026 by rpki-client