Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/MONXTRpiilaEoXGYSWhM0oVEqj0.roa
File: MONXTRpiilaEoXGYSWhM0oVEqj0.roa (raw, json)
Hash identifier: h0xRtRGKaX+DBkaTimOV8YhOx3DiyHiTzMhbrNDVSOY=
Subject key identifier: 30:E3:57:4D:1A:62:8A:56:84:A1:71:98:49:68:4C:D2:85:44:AA:3D
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01A1317ED88DB58B96D5A7CDBCA01EC4B855
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/MONXTRpiilaEoXGYSWhM0oVEqj0.roa
Signing time: Mon 12 Oct 2026 19:02:38 +0000
ROA not before: Mon 12 Oct 2026 19:02:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214822
IP address blocks: 185.21.140.0/24 maxlen: 24
213.108.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:7e:d8:8d:b5:8b:96:d5:a7:cd:bc:a0:1e:c4:b8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Oct 12 19:02:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30e3574d1a628a5684a1719849684cd28544aa3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9f:47:f9:79:bd:d0:d8:6d:59:5b:42:b6:0f:
1e:4f:f2:cd:07:e5:c6:6c:34:bf:21:2a:ee:f4:1f:
ac:6f:2f:32:12:d0:15:2f:12:62:a7:83:fd:40:ff:
bd:ac:f3:b5:d1:84:1b:49:bd:a5:7c:c0:97:3d:40:
32:88:b3:28:e9:eb:2c:39:1d:38:fb:e6:2d:ac:46:
c6:5e:e5:93:77:6d:ed:0a:5b:6c:0f:d9:77:24:83:
19:34:29:be:5e:eb:c3:59:cd:94:4b:5c:14:c0:0f:
a4:d1:ff:eb:fb:e2:c0:c1:72:70:79:87:7c:14:55:
84:79:61:a0:de:ce:e4:57:db:f7:cc:e8:2f:3f:df:
9d:bf:f1:bf:bd:ca:ea:e9:59:bb:a9:b1:62:cc:ae:
be:ba:69:f7:fb:a0:d2:65:9d:52:d2:94:0e:4c:95:
da:8b:2a:5d:02:6f:9e:36:01:07:61:78:40:cb:7c:
52:c8:2e:66:68:72:b1:c4:06:d8:c9:78:e8:41:55:
72:9c:d4:00:b1:84:73:92:a4:0a:f1:10:11:57:f8:
ff:80:2e:45:b9:c3:58:92:3c:6f:b2:92:b5:1c:05:
e7:3a:6f:ff:8c:9b:8a:f3:d4:a3:87:f8:65:7d:ca:
1a:8d:38:0b:16:ad:0e:3b:e8:7a:1b:54:93:ea:b5:
1e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E3:57:4D:1A:62:8A:56:84:A1:71:98:49:68:4C:D2:85:44:AA:3D
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/MONXTRpiilaEoXGYSWhM0oVEqj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.140.0/24
213.108.7.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e9:54:3a:2d:47:a9:b0:0c:64:38:6c:ad:d2:a0:fb:36:c5:
95:94:40:5d:61:e7:18:e2:ca:c8:e2:f1:00:72:ba:2d:8e:8e:
a7:02:11:b0:ad:53:16:39:37:13:36:aa:90:dd:1a:b7:3c:66:
4b:a7:16:46:f6:31:79:a0:13:6c:93:64:9b:5e:04:fb:1d:d7:
cf:e4:99:e0:d2:04:32:d3:b0:de:53:2d:fe:3f:18:55:31:89:
e3:90:81:fc:46:a4:9a:e1:f3:f3:3d:24:38:af:09:ae:ad:10:
2c:8d:2a:f2:37:5c:c9:b4:9f:ff:bb:f9:34:4d:00:0c:94:be:
e0:b6:21:89:86:b6:ee:df:87:52:fe:3a:58:b0:87:3e:eb:a7:
ef:f4:d6:2e:bb:46:45:11:20:71:73:e2:44:5c:77:78:a5:9d:
4f:6c:0c:12:89:aa:41:cc:c8:e6:d0:a1:d2:9d:0d:8a:47:ee:
90:97:59:9d:49:58:2a:54:49:60:39:78:5e:ed:9f:02:7a:7c:
33:8a:ae:94:7e:ab:7f:a9:42:f3:69:dd:11:5c:78:e3:71:96:
ca:d8:be:f5:db:78:40:cc:4f:ac:44:eb:49:0a:c2:93:cc:59:
c5:49:ae:45:49:69:28:32:77:cb:22:c5:59:2a:ba:c4:89:9e:
7e:7b:1b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:25:05 2026 by rpki-client