Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/MBkrOOhdhon2PhUZJgtjDAd8tOU.roa
File: MBkrOOhdhon2PhUZJgtjDAd8tOU.roa (raw, json)
Hash identifier: hW4AmvxmksvcWmVBpumWyTnm5KximR6PbhMb2CKistg=
Subject key identifier: 30:19:2B:38:E8:5D:86:89:F6:3E:15:19:26:0B:63:0C:07:7C:B4:E5
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 019C951BB70BA980D1F5FE22A233C0AED56B
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/MBkrOOhdhon2PhUZJgtjDAd8tOU.roa
Signing time: Wed 25 Feb 2026 14:02:27 +0000
ROA not before: Wed 25 Feb 2026 14:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207667
IP address blocks: 147.234.74.0/23 maxlen: 24
147.234.74.0/24 maxlen: 24
147.234.75.0/24 maxlen: 24
147.234.88.0/24 maxlen: 24
147.234.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:1b:b7:0b:a9:80:d1:f5:fe:22:a2:33:c0:ae:d5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Feb 25 14:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30192b38e85d8689f63e1519260b630c077cb4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:77:9c:ba:5c:d2:bb:f3:a4:5b:7b:ca:0a:
41:4e:94:db:94:63:f1:06:d0:fa:e8:8d:ea:72:0b:
b7:f6:c7:88:21:18:97:1a:23:c3:a8:d9:f7:ea:1f:
50:41:27:71:6f:08:7c:ce:b5:a8:c5:8d:41:5f:12:
30:61:b4:a2:62:19:43:02:3a:dd:60:fd:a7:c7:dc:
1b:88:4c:8c:5d:b3:2f:32:5c:c8:83:9b:95:74:4e:
6a:35:02:9a:17:47:16:83:3f:28:d1:ef:2d:ca:dc:
19:a6:73:3c:cc:7e:24:63:c0:70:ed:4f:d6:fd:83:
a6:f2:49:b4:3e:8b:08:9e:c0:b8:39:6f:c0:1f:a3:
74:fb:a0:25:98:08:31:ff:b1:84:1f:b9:f5:14:09:
82:c3:5f:c7:53:12:59:3e:1f:8d:05:b2:f1:82:d0:
18:65:6d:51:47:ef:75:e4:d6:24:71:dd:65:61:d9:
f5:6a:3c:e6:d0:8b:82:cc:17:8c:3e:5e:cb:6d:f5:
c8:ab:2d:aa:a7:57:07:b8:7e:fc:69:57:ad:39:cd:
8b:38:89:03:00:8f:d8:0d:a6:9b:d0:14:f3:3d:cd:
ef:a9:5f:48:73:67:50:13:2b:68:17:d3:37:02:72:
f3:e6:28:3a:a7:f4:f0:f8:58:eb:64:1c:15:e4:a9:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:19:2B:38:E8:5D:86:89:F6:3E:15:19:26:0B:63:0C:07:7C:B4:E5
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/MBkrOOhdhon2PhUZJgtjDAd8tOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.74.0/23
147.234.88.0/23
Signature Algorithm: sha256WithRSAEncryption
33:09:b8:c2:31:64:e2:11:a8:ec:28:4f:dc:72:f3:c3:df:5a:
a9:66:25:90:2a:ce:01:e6:f4:e9:30:39:8d:e7:ec:a8:1d:a0:
dc:0c:7a:b4:7f:2c:ce:93:41:37:fa:45:11:a3:93:7a:0d:7f:
0a:a3:a5:e7:98:5e:82:7d:34:02:ca:f1:93:cd:e0:10:20:12:
09:98:91:f6:b9:3c:3e:9c:cc:6a:26:46:85:76:7f:19:39:a4:
91:5f:1d:04:05:93:bb:7f:9e:4e:0c:de:82:50:ae:0a:05:f6:
e2:7e:70:5a:ea:d3:85:6f:7c:49:23:10:db:7d:fd:7e:32:2d:
3d:a2:cc:19:b1:02:14:bd:92:00:be:b8:80:ce:59:b2:14:fd:
99:45:57:23:ed:12:8e:ab:c0:c6:62:52:07:a4:4c:96:6b:b2:
f9:1a:8c:dc:a3:5a:ce:ed:b2:75:55:77:f8:a5:21:84:cb:a2:
0b:c4:8d:31:6d:be:68:c0:23:f7:ca:fb:1b:28:09:5c:37:11:
b2:19:cc:6d:7b:63:d8:f0:ff:06:15:a2:b0:36:5c:b3:c0:8a:
91:de:b3:57:d5:41:c0:bb:55:a7:b0:6f:60:3a:23:a7:c3:93:
71:ba:33:5b:a7:4e:d7:76:ae:e0:e5:21:f1:5a:7b:94:11:e0:
f6:56:3a:58
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZyVG7cLqYDR9f4iojPArtVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjYwMjI1MTQwMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDE5MmIzOGU4NWQ4Njg5ZjYzZTE1MTkyNjBiNjMwYzA3N2NiNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHB3nLpc0rvzpFt7ygpBTpTblGPx
BtD66I3qcgu39seIIRiXGiPDqNn36h9QQSdxbwh8zrWoxY1BXxIwYbSiYhlDAjrd
YP2nx9wbiEyMXbMvMlzIg5uVdE5qNQKaF0cWgz8o0e8tytwZpnM8zH4kY8Bw7U/W
/YOm8km0PosInsC4OW/AH6N0+6AlmAgx/7GEH7n1FAmCw1/HUxJZPh+NBbLxgtAY
ZW1RR+915NYkcd1lYdn1ajzm0IuCzBeMPl7LbfXIqy2qp1cHuH78aVetOc2LOIkD
AI/YDaab0BTzPc3vqV9Ic2dQEytoF9M3AnLz5ig6p/Tw+FjrZBwV5KnoKQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDAZKzjoXYaJ9j4VGSYLYwwHfLTlMB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvTUJrck9PaGRob24yUGhVWkpndGpEQWQ4dE9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBk+pKAwQB
k+pYMA0GCSqGSIb3DQEBCwUAA4IBAQAzCbjCMWTiEajsKE/ccvPD31qpZiWQKs4B
5vTpMDmN5+yoHaDcDHq0fyzOk0E3+kURo5N6DX8Ko6XnmF6CfTQCyvGTzeAQIBIJ
mJH2uTw+nMxqJkaFdn8ZOaSRXx0EBZO7f55ODN6CUK4KBfbifnBa6tOFb3xJIxDb
ff1+Mi09oswZsQIUvZIAvriAzlmyFP2ZRVcj7RKOq8DGYlIHpEyWa7L5Gozco1rO
7bJ1VXf4pSGEy6ILxI0xbb5owCP3yvsbKAlcNxGyGcxte2PY8P8GFaKwNlyzwIqR
3rNX1UHAu1WnsG9gOiOnw5NxujNbp07Xdq7g5SHxWnuUEeD2VjpY
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:13:40 2026 by rpki-client