Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/MpLOwnyu2anoLVlED_5oFKlDxB4.roa
File: MpLOwnyu2anoLVlED_5oFKlDxB4.roa (raw, json)
Hash identifier: 8o1FX8BBhwIHnjoaP2OfRA6v8Ril1Bvaqiop7L5Ytzg=
Subject key identifier: 32:92:CE:C2:7C:AE:D9:A9:E8:2D:59:44:0F:FE:68:14:A9:43:C4:1E
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019D8C6BFB7671508659792364BE896821AC
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/MpLOwnyu2anoLVlED_5oFKlDxB4.roa
Signing time: Tue 14 Apr 2026 14:36:20 +0000
ROA not before: Tue 14 Apr 2026 14:36:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206150
IP address blocks: 91.242.245.0/24 maxlen: 24
176.126.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:6b:fb:76:71:50:86:59:79:23:64:be:89:68:21:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Apr 14 14:36:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3292cec27caed9a9e82d59440ffe6814a943c41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:42:04:62:0d:f8:0e:20:20:ba:72:a8:8f:
9a:5c:d0:5f:94:3c:d6:8a:a5:7a:1b:5e:26:a5:67:
28:58:1f:32:e7:4b:9f:ab:e4:eb:6a:e0:fa:0f:50:
55:81:0e:32:f8:fe:f4:1e:73:d9:ca:b9:1c:0a:ca:
a0:4a:db:ec:1d:c1:3d:c4:ba:12:34:e3:94:c0:6e:
d9:6d:0f:85:20:4e:c3:b5:47:81:fa:db:27:83:ec:
e4:cf:75:8a:e5:60:5e:84:42:01:5c:52:bb:f4:c9:
dd:b9:10:c7:83:c0:e1:d3:fc:7e:81:c8:c7:6d:5c:
33:78:55:52:1a:c3:84:2c:e5:6f:66:13:90:5e:9a:
01:ba:80:94:59:c1:43:ed:80:03:f1:74:7a:40:ab:
0f:19:7c:69:88:03:b5:55:0e:85:ca:94:65:68:03:
87:c0:65:30:13:39:e1:86:c2:ea:6a:0c:de:6d:aa:
8e:33:0d:f9:2e:76:55:66:5e:54:d4:1f:9c:13:36:
08:b9:72:b9:00:9a:77:e9:6d:33:16:60:ab:37:14:
43:f0:6c:f9:34:69:90:28:51:be:9a:90:19:e9:16:
ed:dc:ad:08:70:ce:c9:03:5e:f4:84:e9:62:12:b6:
4e:d0:75:2b:aa:6e:64:df:68:98:cc:2a:e4:7a:0b:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:92:CE:C2:7C:AE:D9:A9:E8:2D:59:44:0F:FE:68:14:A9:43:C4:1E
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/MpLOwnyu2anoLVlED_5oFKlDxB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.245.0/24
176.126.100.0/24
Signature Algorithm: sha256WithRSAEncryption
08:16:e2:85:bc:28:45:ab:e7:58:37:8b:d4:55:c6:67:bc:53:
d2:e1:6f:09:6f:c0:53:d8:80:6b:8e:91:d8:be:2d:82:c3:c5:
c0:30:56:82:3d:92:02:b2:ab:79:ae:4e:36:1d:67:bd:85:e5:
15:bc:bb:df:ad:fd:8c:6b:d3:38:e2:6b:3d:75:cf:96:7a:0e:
59:db:ee:0e:22:e6:33:d9:20:b7:c7:fa:8e:5b:f2:9c:45:92:
35:4c:87:ce:0a:12:69:13:a8:a1:90:f2:77:ac:f2:e7:25:cf:
c9:5e:8e:a3:2e:84:7e:6a:ff:3b:a3:cb:20:d9:52:36:ec:32:
24:ba:14:9e:a4:d3:40:1f:37:6c:49:29:96:ac:7c:24:f2:87:
cd:45:3f:a0:fb:94:df:74:44:3a:f6:64:eb:a6:73:c1:2f:1e:
cc:8e:27:b6:06:02:68:be:52:da:9c:17:08:48:e7:38:1f:74:
9e:71:0e:79:b4:1b:8e:d2:6c:39:9d:46:30:67:a7:a1:d7:02:
98:3b:ea:af:76:c0:44:43:1b:5e:7a:1d:3f:17:cb:e1:15:44:
a3:9d:31:f7:47:40:4c:d6:4b:dc:85:6c:f7:a8:07:b0:72:d6:
58:e5:df:4a:20:2c:9f:b1:bc:d9:36:59:ff:02:0c:50:88:1b:
2c:df:5c:d9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ2Ma/t2cVCGWXkjZL6JaCGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2
MmU1NmUwHhcNMjYwNDE0MTQzNjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjkyY2VjMjdjYWVkOWE5ZTgyZDU5NDQwZmZlNjgxNGE5NDNjNDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+hCBGIN+A4gILpyqI+aXNBflDzW
iqV6G14mpWcoWB8y50ufq+TrauD6D1BVgQ4y+P70HnPZyrkcCsqgStvsHcE9xLoS
NOOUwG7ZbQ+FIE7DtUeB+tsng+zkz3WK5WBehEIBXFK79MnduRDHg8Dh0/x+gcjH
bVwzeFVSGsOELOVvZhOQXpoBuoCUWcFD7YAD8XR6QKsPGXxpiAO1VQ6FypRlaAOH
wGUwEznhhsLqagzebaqOMw35LnZVZl5U1B+cEzYIuXK5AJp36W0zFmCrNxRD8Gz5
NGmQKFG+mpAZ6Rbt3K0IcM7JA170hOliErZO0HUrqm5k32iYzCrkeguTCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDKSzsJ8rtmp6C1ZRA/+aBSpQ8QeMB8GA1UdIwQY
MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt
YjBiMzVhMzRlMzg4LzEvTXBMT3dueXUyYW5vTFZsRURfNW9GS2xEeEI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4
LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/L1AwQA
sH5kMA0GCSqGSIb3DQEBCwUAA4IBAQAIFuKFvChFq+dYN4vUVcZnvFPS4W8Jb8BT
2IBrjpHYvi2Cw8XAMFaCPZICsqt5rk42HWe9heUVvLvfrf2Ma9M44ms9dc+Weg5Z
2+4OIuYz2SC3x/qOW/KcRZI1TIfOChJpE6ihkPJ3rPLnJc/JXo6jLoR+av87o8sg
2VI27DIkuhSepNNAHzdsSSmWrHwk8ofNRT+g+5TfdEQ69mTrpnPBLx7Mjie2BgJo
vlLanBcISOc4H3SecQ55tBuO0mw5nUYwZ6eh1wKYO+qvdsBEQxteeh0/F8vhFUSj
nTH3R0BM1kvchWz3qAewctZY5d9KICyfsbzZNln/AgxQiBss31zZ
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:56 2026 by rpki-client