Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Mz31DRP-xMtt6ZnOSkel0XLjTeA.roa
File: Mz31DRP-xMtt6ZnOSkel0XLjTeA.roa (raw, json)
Hash identifier: 8H1/dxFtUK1G83Kt/hv6T8bve71sdulqzSH6J6ynu10=
Subject key identifier: 33:3D:F5:0D:13:FE:C4:CB:6D:E9:99:CE:4A:47:A5:D1:72:E3:4D:E0
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019C0E4862791E51ADA715067BCCCB206E78
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Mz31DRP-xMtt6ZnOSkel0XLjTeA.roa
Signing time: Fri 30 Jan 2026 09:42:30 +0000
ROA not before: Fri 30 Jan 2026 09:42:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204301
IP address blocks: 81.15.191.0/24 maxlen: 24
81.15.201.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0e:48:62:79:1e:51:ad:a7:15:06:7b:cc:cb:20:6e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 30 09:42:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=333df50d13fec4cb6de999ce4a47a5d172e34de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:3f:75:5a:a8:c1:21:c5:62:82:6a:d1:52:
81:da:c2:af:31:ee:be:24:92:76:83:da:c8:62:dd:
cc:8a:96:88:12:92:ac:ed:25:cc:e4:89:b4:f7:84:
66:5d:21:de:04:af:05:82:ba:4e:47:1f:98:99:ac:
bc:0f:7c:07:51:45:1b:57:f4:db:13:96:42:a3:f5:
a6:1e:ba:30:61:58:05:11:70:e5:c9:da:0d:cb:7d:
ae:a8:a8:7c:aa:8f:9f:49:0a:93:c5:1a:08:dd:41:
50:db:11:f5:13:52:dc:25:36:60:18:a6:37:14:52:
fa:42:40:76:1b:5d:72:dc:c1:93:bd:fc:11:ef:46:
41:c3:c2:ae:3e:70:91:28:89:88:08:7d:ab:e2:59:
c5:ad:ae:91:3d:51:19:8f:ae:b0:ed:62:83:f0:3b:
13:fb:8b:79:02:d8:28:ad:4f:c1:0b:c6:33:81:e1:
93:39:44:e7:bf:2e:82:ba:78:bb:4d:73:31:cd:9d:
2f:c0:72:6a:da:64:77:6e:a0:ae:45:af:c6:dd:03:
b9:c8:e2:b2:0a:9a:e8:40:b5:97:7b:9e:51:88:8d:
28:ef:8a:5f:69:6f:6b:74:09:7c:f4:17:03:d0:22:
45:cd:68:84:93:eb:b6:f0:a3:44:4f:ab:08:d3:3f:
e8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3D:F5:0D:13:FE:C4:CB:6D:E9:99:CE:4A:47:A5:D1:72:E3:4D:E0
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Mz31DRP-xMtt6ZnOSkel0XLjTeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.191.0/24
81.15.201.0/24
88.220.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b2:94:49:b7:98:38:0a:45:5e:da:98:58:2b:25:a7:85:4f:
c6:01:d6:03:c1:bd:b8:5d:cd:03:76:25:ba:f5:ad:14:72:04:
15:67:e4:d1:b1:cb:4f:6f:68:97:3d:04:d9:c0:64:4b:07:3b:
ec:2d:13:60:99:5e:32:38:7f:32:66:cb:a3:98:0b:d4:ae:49:
2b:d0:14:63:31:9a:3e:5e:cb:33:cf:ed:df:ce:b1:a2:b9:1c:
ce:30:b0:6d:ea:71:94:de:8a:37:52:21:cb:22:1d:5e:e8:4b:
27:f1:25:db:9d:21:84:07:4c:21:6c:5c:ad:24:14:98:11:bf:
8a:f8:81:3b:08:bb:7e:08:b9:55:59:a4:a8:b7:48:d1:f5:38:
03:e6:f4:c8:1b:66:86:4a:7c:26:2b:6a:90:f7:26:ae:50:ef:
57:b3:51:b2:53:c2:b8:78:05:d9:b6:21:70:7b:98:83:85:8b:
42:92:9e:6f:fc:d8:6f:b2:5e:39:96:8d:9a:95:97:df:99:9d:
ce:af:33:dc:34:ac:65:93:11:1c:04:66:76:36:69:bf:e9:a9:
9d:ba:39:af:94:c8:a0:4a:96:c3:cd:88:e1:7d:53:35:83:93:
b8:79:98:8d:05:ac:28:13:2d:71:b6:e3:c0:64:f1:cd:15:2b:
85:41:46:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:53:24 2026 by rpki-client