Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/MDnbMrcEtQO3LUvd5PYrO0KOouI.roa
File: MDnbMrcEtQO3LUvd5PYrO0KOouI.roa (raw, json)
Hash identifier: pJtoBFRrJd+WRsGQ11VpMD8GneaY/fB5G1JQRXHxSA8=
Subject key identifier: 30:39:DB:32:B7:04:B5:03:B7:2D:4B:DD:E4:F6:2B:3B:42:8E:A2:E2
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A0DDC78054ECF3EE15B37434EC9727B710
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/MDnbMrcEtQO3LUvd5PYrO0KOouI.roa
Signing time: Sat 26 Sep 2026 12:53:54 +0000
ROA not before: Sat 26 Sep 2026 12:53:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218626
IP address blocks: 85.133.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 15:39:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:c7:80:54:ec:f3:ee:15:b3:74:34:ec:97:27:b7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 26 12:53:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3039db32b704b503b72d4bdde4f62b3b428ea2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:74:61:26:3b:32:72:51:e8:5b:2f:6c:c2:
fd:2a:44:7d:f7:d8:30:0e:39:5a:63:13:44:11:9d:
9c:8a:1d:ba:47:62:3a:d2:78:b0:87:45:76:e9:97:
30:15:39:0c:d7:42:92:91:de:02:e6:2e:4c:11:4f:
0a:43:10:78:b4:8f:10:ca:80:35:45:a0:73:73:f8:
5d:48:8b:0c:4a:c3:21:a9:f5:5d:f9:2d:6d:f0:c7:
76:db:cd:46:4f:eb:1f:6f:0d:07:3b:1c:58:2f:3b:
6e:f3:41:45:10:76:57:5a:83:4f:23:9d:3f:6c:37:
2b:f0:f1:35:2d:52:df:af:c6:72:38:3f:ae:4e:5e:
a8:1e:fa:2c:fa:4d:2a:e0:38:31:10:fe:2d:15:ea:
8d:ac:ce:54:6e:58:9e:17:a8:88:e8:4b:71:0c:01:
cc:c2:a2:ae:94:c1:a2:99:07:92:4d:c6:3c:93:ca:
6b:44:63:cf:23:3f:6c:0e:0c:81:3b:b5:c8:0e:9d:
c0:1c:ea:2f:6b:dc:4c:55:65:93:3a:e6:24:90:46:
bc:7b:a6:3a:3e:9d:35:da:30:e6:42:17:cb:ed:73:
9b:2e:b7:f8:5f:ed:f3:3e:3b:d9:bd:6e:bf:33:ac:
18:69:a2:bd:fb:c9:9b:12:9b:a4:07:e3:a1:0a:b4:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:39:DB:32:B7:04:B5:03:B7:2D:4B:DD:E4:F6:2B:3B:42:8E:A2:E2
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/MDnbMrcEtQO3LUvd5PYrO0KOouI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:1f:af:d7:d2:c8:e2:16:61:f9:1c:fa:8e:14:95:03:ba:17:
6a:34:5b:fc:57:ce:e7:0e:37:17:f4:3f:ca:d8:94:e7:bc:6d:
f0:f3:1a:02:d6:b6:c3:e9:7a:f2:b0:62:5d:a7:84:6e:08:4a:
fb:aa:f9:ac:c8:3b:5a:14:7d:cc:0b:a5:34:89:f9:3f:6d:e3:
84:39:19:e3:1c:ae:19:fc:fa:70:c8:a4:34:0f:a4:3e:20:05:
b3:af:9e:b3:91:9f:d2:f0:31:b3:f4:7d:83:e9:08:f0:4f:81:
1d:a0:d6:4a:4c:af:c0:36:fa:dc:0d:b2:88:9c:23:2e:43:01:
61:3e:cb:e8:05:73:7f:c9:d3:65:b0:ff:ac:de:90:f3:40:a3:
da:ec:ac:ab:57:33:8e:8d:f5:a9:4c:ab:0d:db:e5:51:4a:9c:
00:69:02:d9:7b:dd:31:9b:0f:f1:e0:f0:8d:8d:be:02:38:fe:
3e:1c:19:a8:e6:e6:1b:35:b9:aa:63:f9:06:d2:a9:75:51:e7:
62:ae:6e:67:b2:74:dc:f0:00:ec:bd:f9:78:c9:55:a5:fa:8c:
3d:62:4c:2a:10:ba:43:c6:24:e5:b7:03:f1:f2:6c:32:f3:e0:
2f:c0:6f:64:91:52:dc:58:b7:30:7c:d3:ba:60:36:0f:98:c4:
5d:06:01:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:49:41 2026 by rpki-client