Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/MloCUaQjIaff5rD0I_V7IQUgMHA.roa
File: MloCUaQjIaff5rD0I_V7IQUgMHA.roa (raw, json)
Hash identifier: z4QEYPJ8c5S4F1m2QTf25snrDWXe9stPlhx7/VyKtfE=
Subject key identifier: 32:5A:02:51:A4:23:21:A7:DF:E6:B0:F4:23:F5:7B:21:05:20:30:70
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019C6ABA7EF2C15917D5EF20E0A543983898
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/MloCUaQjIaff5rD0I_V7IQUgMHA.roa
Signing time: Tue 17 Feb 2026 08:32:12 +0000
ROA not before: Tue 17 Feb 2026 08:32:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 5.159.49.0/24 maxlen: 24
109.122.246.0/24 maxlen: 24
185.239.0.0/24 maxlen: 24
185.239.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6a:ba:7e:f2:c1:59:17:d5:ef:20:e0:a5:43:98:38:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Feb 17 08:32:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=325a0251a42321a7dfe6b0f423f57b2105203070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:68:4c:41:1e:18:9d:3e:ce:a7:30:ba:48:
2d:c7:7e:53:5b:24:5b:b3:b9:23:95:6d:1a:68:ae:
5d:ac:5c:1d:9d:44:06:ca:68:c6:f7:61:1e:80:19:
de:89:f2:14:f7:84:02:9b:94:b1:8c:91:63:4e:de:
9b:91:3a:f6:08:c9:f3:1a:33:09:03:b8:49:6f:75:
72:9f:73:66:4f:fb:73:fc:76:ad:08:6a:84:3d:1f:
ad:bf:15:ed:f0:ae:3b:7b:6a:f8:e9:54:63:3e:b3:
dc:5c:7c:3e:0e:44:87:d3:47:bb:d7:f0:ec:ef:5b:
ef:1b:9c:f2:4b:91:73:7b:ad:3b:4a:d6:4e:ac:5b:
ae:ec:3c:d2:30:c1:83:86:b6:55:1a:c5:27:80:41:
80:f9:34:77:67:52:35:f9:d0:f0:40:b1:d2:6d:d4:
bd:64:b1:94:d9:c6:f8:30:45:cd:cf:50:4a:cf:a3:
69:a6:45:b2:d1:cd:4b:a0:0c:91:a4:c7:11:bb:c8:
ed:3f:8f:b7:cd:d7:5d:c2:03:58:18:04:3a:50:7d:
d6:f5:96:bb:cf:1d:69:b3:d8:ef:d9:60:d9:00:51:
5e:d9:4a:1f:24:31:00:b9:b4:da:19:d7:8a:a2:c4:
e5:64:b0:0f:7b:9f:3f:ca:06:9f:47:ec:dc:9f:be:
40:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5A:02:51:A4:23:21:A7:DF:E6:B0:F4:23:F5:7B:21:05:20:30:70
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/MloCUaQjIaff5rD0I_V7IQUgMHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.49.0/24
109.122.246.0/24
185.239.0.0/24
185.239.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:3d:80:47:68:ab:89:0c:7b:3e:ee:74:a5:ce:33:ff:ce:c7:
6b:26:82:c9:20:6c:43:83:ed:0a:55:13:9f:9c:11:c4:e9:70:
82:bb:10:ba:35:45:39:1b:ed:89:c7:a5:54:af:a2:d7:1a:05:
c2:74:63:7b:6b:8f:69:6f:6e:c2:79:54:78:fc:f7:0b:16:a7:
e7:1b:41:68:2c:62:2e:e0:9c:dd:cb:2f:4e:f9:d7:bd:ed:55:
ee:64:2d:26:03:00:6c:27:be:f8:bb:42:01:05:b2:64:d7:53:
17:97:cd:e4:bd:71:c7:03:73:22:a1:28:4b:cd:54:58:f0:cf:
7d:7e:ac:1b:ad:08:20:94:f0:49:25:e7:f3:be:33:c1:47:7e:
f8:b7:bb:5a:9a:86:92:14:70:c4:d7:a1:01:20:65:bb:08:01:
a7:07:fa:2d:14:80:ae:0c:45:a1:0f:04:da:66:35:8b:18:ca:
e6:99:8f:cc:1b:19:d5:ca:b4:ee:30:29:07:ae:77:89:7f:7d:
0d:d0:1a:0a:2d:63:43:4e:e9:8d:9b:c7:49:43:40:a9:42:aa:
d5:6b:ae:cf:88:91:4c:19:75:2a:f7:1c:ed:cd:aa:39:40:ba:
71:cd:c1:0f:f7:3d:c0:fe:e1:60:20:36:36:e0:a2:8d:d3:96:
23:9f:6d:7c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZxqun7ywVkX1e8g4KVDmDiYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjYwMjE3MDgzMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjVhMDI1MWE0MjMyMWE3ZGZlNmIwZjQyM2Y1N2IyMTA1MjAzMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7ZoTEEeGJ0+zqcwukgtx35TWyRb
s7kjlW0aaK5drFwdnUQGymjG92EegBneifIU94QCm5SxjJFjTt6bkTr2CMnzGjMJ
A7hJb3Vyn3NmT/tz/HatCGqEPR+tvxXt8K47e2r46VRjPrPcXHw+DkSH00e71/Ds
71vvG5zyS5Fze607StZOrFuu7DzSMMGDhrZVGsUngEGA+TR3Z1I1+dDwQLHSbdS9
ZLGU2cb4MEXNz1BKz6NppkWy0c1LoAyRpMcRu8jtP4+3zdddwgNYGAQ6UH3W9Za7
zx1ps9jv2WDZAFFe2UofJDEAubTaGdeKosTlZLAPe58/ygafR+zcn75AbQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDJaAlGkIyGn3+aw9CP1eyEFIDBwMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvTWxvQ1VhUWpJYWZmNXJEMElfVjdJUVVnTUhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABZ8xAwQA
bXr2AwQAue8AAwQAue8DMA0GCSqGSIb3DQEBCwUAA4IBAQBbPYBHaKuJDHs+7nSl
zjP/zsdrJoLJIGxDg+0KVROfnBHE6XCCuxC6NUU5G+2Jx6VUr6LXGgXCdGN7a49p
b27CeVR4/PcLFqfnG0FoLGIu4Jzdyy9O+de97VXuZC0mAwBsJ774u0IBBbJk11MX
l83kvXHHA3MioShLzVRY8M99fqwbrQgglPBJJefzvjPBR374t7tamoaSFHDE16EB
IGW7CAGnB/otFICuDEWhDwTaZjWLGMrmmY/MGxnVyrTuMCkHrneJf30N0BoKLWND
TumNm8dJQ0CpQqrVa67PiJFMGXUq9xztzao5QLpxzcEP9z3A/uFgIDY24KKN05Yj
n218
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:55:59 2026 by rpki-client