Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/MzhlnEkPFfLYk1_xoS-eW2rxNzo.roa
File: MzhlnEkPFfLYk1_xoS-eW2rxNzo.roa (raw, json)
Hash identifier: xES0NKYjiPe+r5Rk7WIVkRnpa0zN2uHpDR7T+kBqWs4=
Subject key identifier: 33:38:65:9C:49:0F:15:F2:D8:93:5F:F1:A1:2F:9E:5B:6A:F1:37:3A
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 019FA30A12C21CA51D84B69758A475D4D149
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/MzhlnEkPFfLYk1_xoS-eW2rxNzo.roa
Signing time: Mon 27 Jul 2026 10:06:14 +0000
ROA not before: Mon 27 Jul 2026 10:06:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214405
IP address blocks: 2.152.74.0/24 maxlen: 24
212.32.45.0/24 maxlen: 24
2a01:fe00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:0a:12:c2:1c:a5:1d:84:b6:97:58:a4:75:d4:d1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Jul 27 10:06:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3338659c490f15f2d8935ff1a12f9e5b6af1373a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:0d:31:69:bd:e7:27:70:e5:a0:89:2e:44:
ec:9e:e5:e6:8c:80:5f:90:a1:7c:06:ba:a7:64:7b:
89:e2:d2:45:6a:47:b4:82:48:8c:17:55:f6:11:70:
04:60:0f:eb:ca:8f:54:06:1c:61:73:72:68:69:e6:
b2:ee:21:77:ba:6a:d7:7e:25:c2:41:93:42:cf:c8:
e5:94:ed:18:b5:a8:04:07:49:12:a5:91:c1:cc:29:
7e:c1:59:5b:8c:3e:60:e1:b3:bc:84:95:f2:6d:d6:
cc:2b:59:96:e4:d3:fd:59:b0:dc:c4:49:0c:6e:4f:
c4:65:41:ff:50:9b:af:85:96:13:55:9f:16:47:ac:
c1:c7:77:64:02:d9:0b:74:62:24:f2:59:e0:c3:f2:
99:04:bf:35:08:d0:8d:c9:f4:28:0c:11:01:eb:2a:
a8:1c:57:94:3e:bf:46:d7:64:83:7a:69:a0:3f:6e:
b2:cb:ce:37:39:83:5d:83:c5:7e:c4:04:a6:ca:c0:
fd:11:98:a5:a3:de:b4:cc:ca:00:96:0e:24:2e:0c:
1b:32:21:89:65:9a:db:f4:0c:71:7d:72:31:4d:f7:
38:8c:31:39:5b:5f:6a:9c:77:a5:bc:03:66:12:5c:
cc:61:15:0b:17:30:28:6f:2c:0f:e9:94:d9:71:96:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:38:65:9C:49:0F:15:F2:D8:93:5F:F1:A1:2F:9E:5B:6A:F1:37:3A
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/MzhlnEkPFfLYk1_xoS-eW2rxNzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.74.0/24
212.32.45.0/24
IPv6:
2a01:fe00::/48
Signature Algorithm: sha256WithRSAEncryption
01:60:43:8c:d8:8b:4f:5a:30:cd:fc:50:15:0e:1e:62:a5:6f:
6b:0e:89:62:0a:28:17:d9:85:b0:ec:cd:2d:e7:54:a1:d3:11:
fd:c3:26:c9:96:3c:36:c2:85:e3:13:99:24:60:4c:2b:a3:a5:
1b:67:e3:c1:bd:83:84:5b:4c:6b:25:2c:3f:95:92:0a:82:92:
7b:8a:59:29:9a:50:57:d5:9a:1d:ab:99:4a:be:81:72:3c:e8:
03:5e:bd:e6:87:c6:70:01:6f:2c:5a:4b:1f:2c:5b:ce:71:3c:
74:f6:6b:fa:4d:e9:e6:6f:7e:0c:37:6d:ed:35:b4:5b:74:19:
3b:06:49:39:8d:3d:dd:bd:ec:8b:8d:ad:ff:7f:fb:e2:c2:3c:
9a:d7:27:ed:93:fe:87:0b:61:d4:35:90:b2:28:32:e7:3a:53:
40:79:b0:75:9f:a3:04:c4:4a:68:a2:84:c9:8b:e4:08:eb:87:
12:04:45:28:ef:1c:62:4e:e8:c0:b6:6e:bc:bb:5d:b3:06:ce:
45:18:7c:a0:32:29:37:b4:e2:85:28:c4:63:83:3e:ae:2c:0b:
ab:e3:1a:92:44:0f:86:ff:e9:5d:80:31:97:e1:50:c1:dc:9b:
63:48:15:8b:d8:bb:12:e8:1c:e2:e2:f0:63:d2:73:48:0f:e1:
aa:35:b9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:57:44 2026 by rpki-client