Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MUVw74wh52eOaYfgHXDpQj70saQ.roa
File: MUVw74wh52eOaYfgHXDpQj70saQ.roa (raw, json)
Hash identifier: r11ipMGCd1Sxy8FxoqT8IS618bT1jFmr3XV+w9hlLhg=
Subject key identifier: 31:45:70:EF:8C:21:E7:67:8E:69:87:E0:1D:70:E9:42:3E:F4:B1:A4
Certificate issuer: /CN=316711da5e31c3b668329af9d9b8ec58eda09de8
Certificate serial: 01A09044D0AF33DDACD6E47453AE5ED89BAE
Authority key identifier: 31:67:11:DA:5E:31:C3:B6:68:32:9A:F9:D9:B8:EC:58:ED:A0:9D:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWcR2l4xw7ZoMpr52bjsWO2gneg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MUVw74wh52eOaYfgHXDpQj70saQ.roa
Signing time: Fri 11 Sep 2026 11:40:23 +0000
ROA not before: Fri 11 Sep 2026 11:40:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50625
IP address blocks: 91.230.76.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MWcR2l4xw7ZoMpr52bjsWO2gneg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MWcR2l4xw7ZoMpr52bjsWO2gneg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWcR2l4xw7ZoMpr52bjsWO2gneg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:44:d0:af:33:dd:ac:d6:e4:74:53:ae:5e:d8:9b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316711da5e31c3b668329af9d9b8ec58eda09de8
Validity
Not Before: Sep 11 11:40:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=314570ef8c21e7678e6987e01d70e9423ef4b1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:d8:a8:63:ec:03:d8:44:06:2d:2f:0f:37:
28:48:37:a2:57:43:f7:d9:3a:5c:d5:f4:95:e4:87:
10:a0:a8:3e:f0:d4:9a:2b:6b:0a:5b:2d:a0:c5:e0:
e7:28:54:2b:9f:67:90:ca:df:5e:d1:6b:45:63:ba:
ef:e2:47:7a:ff:bf:9f:24:ab:5b:c2:80:dc:4c:84:
fd:90:b3:66:a3:4a:71:12:75:3c:94:46:6e:f4:ed:
e8:a0:37:97:24:a9:46:46:e1:da:15:d4:70:3a:84:
9e:be:e4:e0:3b:58:74:d4:ff:cb:18:8d:cd:30:1f:
a1:09:9d:33:84:05:5c:7e:9f:2e:22:98:48:80:b9:
8a:b5:91:bc:6f:38:46:da:4b:fd:0f:a7:50:6b:87:
b4:3a:0b:95:9c:8e:32:b3:90:ed:4e:78:c0:8b:46:
57:5f:25:99:7c:80:2c:f2:d2:21:8f:5d:53:4c:c1:
21:6d:c5:2c:27:85:35:79:2d:4c:d7:1e:51:c1:2f:
af:5b:6e:12:ba:05:2f:a2:ad:b3:12:80:d5:10:f5:
7f:3c:ca:fe:01:3f:cf:ad:ef:aa:cf:d1:2f:f4:c0:
6e:bd:f6:77:33:b6:11:e7:69:48:ea:27:b4:e7:34:
67:97:22:62:85:f3:0a:4a:5f:44:e0:5b:c6:84:7f:
77:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:45:70:EF:8C:21:E7:67:8E:69:87:E0:1D:70:E9:42:3E:F4:B1:A4
X509v3 Authority Key Identifier:
keyid:31:67:11:DA:5E:31:C3:B6:68:32:9A:F9:D9:B8:EC:58:ED:A0:9D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWcR2l4xw7ZoMpr52bjsWO2gneg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MUVw74wh52eOaYfgHXDpQj70saQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MWcR2l4xw7ZoMpr52bjsWO2gneg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.76.0/23
Signature Algorithm: sha256WithRSAEncryption
61:e9:bf:bb:b3:e9:1d:86:41:1e:4e:df:6a:7e:ac:97:dc:3e:
df:c3:3a:a8:38:d8:44:fd:cf:1a:34:e9:92:83:63:2f:3f:de:
af:cf:9c:90:2d:28:e7:dc:8c:f1:84:b0:2e:30:b1:66:5b:f2:
f5:1a:6f:c6:eb:41:b5:3c:08:a3:58:88:cb:4f:7f:be:01:70:
6b:1d:2b:a1:8e:19:fd:c3:55:9d:a9:e0:4c:ed:62:b2:ef:7c:
0d:1f:13:91:2b:fd:6a:ff:17:23:74:45:ee:cf:05:ae:2b:b1:
7c:e9:9a:4b:18:50:20:79:2f:29:2a:61:2d:5c:e7:23:af:ac:
0f:c1:05:69:e6:9a:4b:fe:47:77:f4:84:3f:22:73:9c:e9:d3:
17:28:5f:b5:63:6a:e9:30:84:74:c8:89:69:85:d4:e5:00:d0:
fc:57:39:b0:34:ad:a5:73:41:aa:9a:06:af:1f:81:56:3e:6f:
e3:9a:b3:3c:52:2d:87:72:63:f5:f1:5d:52:fc:19:6a:b4:15:
59:d2:e4:58:62:d2:1d:f2:56:d3:bd:bf:56:ae:d6:a6:41:a4:
52:69:0b:d4:e1:6c:20:b6:5f:f2:3f:36:9a:60:e6:6d:d8:9b:
ef:65:f7:1e:2a:0c:27:bc:27:be:32:b0:2d:40:ed:fc:37:c2:
42:1f:6c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:59:08 2026 by rpki-client