Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/00mpbC_1JmCGvHKe0z2zaHtA5PQ.roa
File: 00mpbC_1JmCGvHKe0z2zaHtA5PQ.roa (raw, json)
Hash identifier: LLmDkjRvFt1hVBFvKuw7Zmu70GRGPD2J1bIXkVgO/r8=
Subject key identifier: D3:49:A9:6C:2F:F5:26:60:86:BC:72:9E:D3:3D:B3:68:7B:40:E4:F4
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 01A1774742B13C281DA8A24AEE18821B64E8
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/00mpbC_1JmCGvHKe0z2zaHtA5PQ.roa
Signing time: Mon 26 Oct 2026 08:15:21 +0000
ROA not before: Mon 26 Oct 2026 08:15:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152606
IP address blocks: 185.228.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:47:42:b1:3c:28:1d:a8:a2:4a:ee:18:82:1b:64:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Oct 26 08:15:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d349a96c2ff5266086bc729ed33db3687b40e4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:db:96:11:5c:ad:d3:02:21:fa:a1:4f:eb:
e8:c9:10:69:95:d1:f2:1b:21:c4:80:0b:8e:9c:01:
7c:a7:57:ae:a0:3c:8b:99:b4:5e:7d:3f:17:81:b3:
35:72:90:11:61:af:96:da:12:08:82:f7:3b:ce:d7:
7d:d6:03:99:9c:49:e6:ec:d6:41:dd:06:5c:37:44:
85:b4:07:11:34:3b:89:60:ee:26:45:0a:49:45:db:
4c:70:e1:7f:99:90:50:f4:0b:b1:9a:4c:42:4a:ff:
23:ee:c5:10:a8:0e:05:2e:f6:ea:f5:96:b1:f3:8a:
10:97:46:44:5d:bf:04:ee:71:03:48:ed:26:d5:52:
6e:a6:99:ca:f8:9b:af:d9:05:9a:cf:20:2d:a3:7b:
ca:b8:92:43:83:c6:17:e6:43:74:93:c0:08:66:03:
14:05:bc:6f:c7:46:00:90:4f:36:3d:59:6c:4a:d9:
97:ba:c9:cb:4c:e9:90:89:0d:2e:ec:93:dd:39:7e:
ed:f1:ac:21:b1:c4:a0:a1:b3:3d:30:0b:18:fb:58:
05:1a:bf:b9:6b:a9:dc:c9:d0:14:53:94:88:29:76:
22:e7:a6:ae:48:fb:9b:7e:fa:fc:98:f3:ef:24:2d:
56:fb:5d:af:63:c6:de:e3:3e:34:77:b4:0f:70:90:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:49:A9:6C:2F:F5:26:60:86:BC:72:9E:D3:3D:B3:68:7B:40:E4:F4
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/00mpbC_1JmCGvHKe0z2zaHtA5PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.2.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b1:dd:cf:b5:8f:99:69:73:76:8c:8a:7e:06:56:9c:38:f4:
3c:11:90:49:d5:e7:7b:b2:64:3b:da:93:fa:fa:1b:05:47:a9:
3d:f9:1f:4a:ef:68:2a:0d:4a:e6:b8:21:be:aa:6c:e9:10:e7:
bf:58:48:bf:b1:f6:09:b9:0b:88:7c:2b:2e:f1:8e:88:1c:2e:
f6:31:c8:4c:6a:56:60:ff:3e:2c:37:98:d3:33:c5:d1:ea:4c:
bf:13:7f:26:c0:ae:b9:ff:df:86:09:6c:46:c1:aa:c6:13:86:
73:02:fd:15:b1:de:a2:50:c8:95:fb:ad:c1:d1:08:63:dd:f4:
3d:e4:a7:6d:8b:a0:a7:8a:d1:d8:60:43:ec:93:d5:db:b0:ae:
67:ae:c6:dd:7f:12:66:6f:64:52:44:59:14:7d:83:9d:fd:54:
f0:83:9a:bf:e0:0a:fe:b9:d6:1a:f2:34:3e:8b:15:e8:f0:49:
50:75:94:8a:ce:64:dd:e8:5d:d6:54:16:27:2a:c6:d8:f6:10:
03:48:63:85:fe:df:b9:24:90:86:6c:a1:3b:18:a1:50:96:2f:
10:7e:3a:f6:cb:49:9f:fd:17:92:b8:f8:f3:71:0c:05:46:a5:
ad:67:36:34:f6:f8:a6:7a:84:47:79:b6:d1:a0:2d:18:e5:52:
45:ac:39:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:19:27 2026 by rpki-client