Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/MpaMfmjA4uXhju6yGPMxcbYBu4A.roa
File: MpaMfmjA4uXhju6yGPMxcbYBu4A.roa (raw, json)
Hash identifier: fY6Bd8Jwx3Az9knsVe9icW6R6BO4nR3yyPPzfFj5DB8=
Subject key identifier: 32:96:8C:7E:68:C0:E2:E5:E1:8E:EE:B2:18:F3:31:71:B6:01:BB:80
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019FA356FABF86A89ED5A3FE48E581035F09
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/MpaMfmjA4uXhju6yGPMxcbYBu4A.roa
Signing time: Mon 27 Jul 2026 11:30:14 +0000
ROA not before: Mon 27 Jul 2026 11:30:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154725
IP address blocks: 89.43.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:56:fa:bf:86:a8:9e:d5:a3:fe:48:e5:81:03:5f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jul 27 11:30:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32968c7e68c0e2e5e18eeeb218f33171b601bb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:ad:cf:27:18:28:b7:29:10:b9:13:36:fb:
e6:90:17:69:c0:52:f7:6b:1e:31:3b:bd:b2:60:33:
d2:fc:e8:63:e2:8d:4d:19:af:27:b8:50:65:5f:ab:
74:5e:6f:89:98:47:21:f2:cd:ec:91:ff:90:13:cb:
eb:61:3e:6e:8f:8c:98:2c:70:70:96:84:be:31:78:
66:ee:e0:5f:16:42:cb:9c:f3:c9:a1:48:90:b5:c7:
fd:11:56:90:30:62:8b:3c:b5:d3:e3:d3:ee:5e:65:
22:48:ab:65:40:85:41:d9:6c:95:31:71:d1:fc:7b:
fd:f5:00:52:38:7c:72:39:14:29:82:7f:60:27:e9:
4d:ac:eb:44:47:4e:2b:dc:6d:74:58:72:d5:fd:8b:
fa:06:4a:4f:92:2a:02:57:64:15:8e:96:b0:60:ce:
9c:3f:4a:c3:d2:a2:a6:61:2a:1e:66:c4:8c:16:db:
c2:c8:ac:4a:d3:83:cf:b5:b3:77:b2:3b:85:b3:e9:
ef:34:03:3e:e4:5b:9a:73:4d:c3:f2:f9:c5:aa:ca:
4d:e7:80:be:16:64:1b:fb:66:59:dc:08:5b:b3:d1:
cc:2e:fb:19:6d:20:a7:49:22:00:64:e9:62:20:57:
29:7b:0b:55:36:5c:ab:c6:12:55:e7:57:ed:b9:84:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:96:8C:7E:68:C0:E2:E5:E1:8E:EE:B2:18:F3:31:71:B6:01:BB:80
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/MpaMfmjA4uXhju6yGPMxcbYBu4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.45.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:3f:f4:75:88:4b:26:5e:52:14:47:8b:61:e3:7e:dd:cc:44:
cd:7a:01:c4:cf:84:d3:66:25:27:e8:cf:ca:dd:09:1b:dd:10:
18:2f:05:75:9a:51:04:64:42:57:f1:d0:c7:bc:a0:9a:9e:b7:
c1:c1:ea:d4:1b:5d:42:ac:f8:34:66:7e:b4:d6:2b:0b:df:76:
68:f2:9f:e9:bf:24:ef:2e:6f:38:ff:e3:b5:e0:d6:aa:54:c8:
16:d3:f6:0e:56:6a:6a:77:f0:66:4b:40:7c:88:30:85:95:45:
0c:c2:4f:0c:26:db:81:47:a6:58:19:0b:da:3f:51:3f:cf:70:
df:d7:c0:27:9b:76:44:36:84:d2:1c:9b:91:e8:63:f7:67:c7:
0c:14:31:30:15:76:2b:c5:0e:ec:db:dc:1c:15:41:29:98:30:
01:84:ff:d0:5c:7a:6e:00:6d:be:d8:bc:02:de:03:72:6b:22:
48:d0:74:85:df:98:a9:50:92:20:90:4a:6f:25:82:f3:29:63:
76:2e:a8:b7:46:9f:03:1b:d1:cb:4b:26:88:4c:ca:d2:93:a1:
c4:08:d0:df:ef:e8:ed:de:18:34:73:ed:52:72:f2:fb:e0:d2:
b9:d7:38:9f:f4:9a:24:9b:07:76:89:36:f3:89:4a:da:cb:35:
9e:32:86:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:28:34 2026 by rpki-client