Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/MzUDlWJ08E5Q1WQwAU8jVlCOIzU.roa
File: MzUDlWJ08E5Q1WQwAU8jVlCOIzU.roa (raw, json)
Hash identifier: E7gY1khE/iHSsyZOMgvVIwL4dOu/D2U77f56beQ3YKE=
Subject key identifier: 33:35:03:95:62:74:F0:4E:50:D5:64:30:01:4F:23:56:50:8E:23:35
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019E88A493580C80BB1FBE1E511DAB04AB16
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/MzUDlWJ08E5Q1WQwAU8jVlCOIzU.roa
Signing time: Tue 02 Jun 2026 14:02:27 +0000
ROA not before: Tue 02 Jun 2026 14:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215051
IP address blocks: 87.229.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:a4:93:58:0c:80:bb:1f:be:1e:51:1d:ab:04:ab:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 2 14:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=333503956274f04e50d56430014f2356508e2335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:4d:9f:c4:bd:98:4b:83:5f:b5:47:50:e8:
ca:00:0d:03:bf:c4:9a:44:b9:0c:95:c3:35:a2:bd:
a8:bf:d3:dc:35:e0:2f:01:8d:d2:79:25:5a:58:a8:
c6:99:4e:b7:be:b9:ee:e2:9d:99:1a:c9:2a:27:90:
12:d7:3c:41:8d:fe:2c:84:9e:05:94:ba:6f:f4:d3:
b5:0e:e3:f4:4b:54:1a:9d:04:b5:59:40:8a:02:51:
01:41:f6:e7:31:33:c0:fa:b6:e6:78:7e:49:a4:f2:
e9:e3:f9:de:73:dd:79:95:70:ec:1e:35:8f:e7:66:
67:4c:bd:b7:3f:4f:da:b1:ee:55:81:24:2d:1a:c4:
57:18:5d:d7:60:73:0f:84:41:ab:e6:d2:63:1c:3f:
6e:7b:cd:b6:9a:e6:a1:92:35:cb:13:ae:60:0d:b0:
9b:5e:78:4b:89:e8:73:c8:15:87:cd:c4:02:52:fb:
ba:6b:72:99:43:8b:73:34:94:78:de:e8:12:4f:c0:
96:14:44:3e:1f:00:14:7c:fa:86:a2:13:a8:e1:29:
b4:01:99:e2:9f:13:34:c2:18:4c:a4:ac:68:7b:a1:
52:17:e8:92:49:d8:d1:c6:6d:a3:71:2e:9c:66:dc:
13:5c:74:1c:ae:65:9c:d4:bb:e6:7f:a5:ea:cd:bf:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:35:03:95:62:74:F0:4E:50:D5:64:30:01:4F:23:56:50:8E:23:35
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/MzUDlWJ08E5Q1WQwAU8jVlCOIzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.52.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a0:f8:95:e6:c4:88:ea:42:a8:b4:30:34:b8:e5:e2:9f:f0:
1b:ae:a7:6a:a8:e2:23:6c:16:24:26:9f:f5:83:c8:61:25:e7:
05:f5:e3:d1:e0:0d:90:80:a4:bd:a0:cf:f9:c3:33:6f:88:9b:
63:00:1e:42:de:7b:cc:57:0d:df:3c:17:ec:e4:c0:be:93:e8:
47:9e:f5:ab:75:03:7d:f3:03:22:1a:a9:e7:82:97:8b:73:1e:
47:eb:17:4c:9a:83:47:81:43:21:3b:cd:79:cb:c9:82:9e:83:
d7:8e:91:bd:ef:cc:97:c4:fd:d1:28:64:1f:b7:e4:77:45:23:
3f:b5:a0:af:8e:ea:3d:07:c1:98:43:b9:bf:7e:36:92:36:50:
5a:e2:03:16:e3:e8:2a:04:96:cc:fd:93:ba:4a:f5:91:b0:9e:
e9:17:42:36:5d:b1:80:ca:6f:16:15:85:3e:21:2d:cb:9c:10:
a2:36:60:e7:2b:c9:b3:76:c2:06:54:ba:65:5b:9b:58:ae:c1:
31:30:5f:71:09:e0:be:7a:66:20:94:19:72:3e:62:00:09:9c:
5d:e8:69:4f:9e:be:c3:94:ef:4b:49:ba:4a:d7:6f:07:72:8c:
8f:40:21:60:71:00:cc:39:12:5d:82:b6:6f:19:5e:cb:48:0d:
19:f3:a6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:35:31 2026 by rpki-client