Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/MKLnBwEoTvJQ6Ll9HAStk_6b-lo.roa
File: MKLnBwEoTvJQ6Ll9HAStk_6b-lo.roa (raw, json)
Hash identifier: UcMYN8ihICS5eRjwAvcwUGC2jCQeNNKHfqsuNIFnBhE=
Subject key identifier: 30:A2:E7:07:01:28:4E:F2:50:E8:B9:7D:1C:04:AD:93:FE:9B:FA:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 019B7B3690096E4793CC417367AD12632E00
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/MKLnBwEoTvJQ6Ll9HAStk_6b-lo.roa
Signing time: Thu 01 Jan 2026 20:18:51 +0000
ROA not before: Thu 01 Jan 2026 20:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213100
IP address blocks: 193.17.35.0/24 maxlen: 24
2a10:cdc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:90:09:6e:47:93:cc:41:73:67:ad:12:63:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Jan 1 20:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30a2e70701284ef250e8b97d1c04ad93fe9bfa5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:69:23:4c:57:90:cb:80:53:0c:ba:c9:bc:
3b:35:a2:7b:2d:64:0b:c4:a6:df:e4:18:02:a2:26:
11:45:a4:41:75:df:79:72:c4:65:14:94:2a:f4:62:
48:44:2b:1d:fb:95:1a:15:9b:bb:68:20:48:b2:69:
e1:4f:b8:d1:98:34:6d:df:59:f8:4a:69:07:48:1c:
e9:29:e2:60:23:ae:da:eb:9e:90:da:ad:63:64:a3:
0e:55:eb:c8:8a:41:c5:d7:ac:17:87:d9:94:c4:9c:
54:cb:69:bd:a9:67:cc:39:91:8f:ba:61:de:76:41:
7f:8a:f1:76:83:df:01:7a:1f:15:e0:ca:61:83:e3:
c1:e3:a8:13:38:83:29:fc:07:4b:a0:23:24:cf:1a:
18:2f:a7:6b:82:59:96:1a:35:17:48:80:4f:05:6c:
e4:34:6f:a9:96:09:5b:cd:aa:eb:2f:46:ec:a7:39:
0a:a8:7b:81:8d:2c:99:fb:b5:97:ed:27:ae:94:17:
d8:a4:c8:c8:6f:3b:07:d7:f2:01:89:72:e4:ec:53:
77:3b:f8:2b:c0:7c:21:df:3f:0a:e6:37:f4:1f:be:
37:5e:82:b7:0a:e1:1b:4a:25:46:cc:0a:91:94:b2:
b4:72:b8:66:fc:76:3f:37:55:22:de:a0:f8:18:a3:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A2:E7:07:01:28:4E:F2:50:E8:B9:7D:1C:04:AD:93:FE:9B:FA:5A
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/MKLnBwEoTvJQ6Ll9HAStk_6b-lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.35.0/24
IPv6:
2a10:cdc0::/29
Signature Algorithm: sha256WithRSAEncryption
7d:9a:ef:87:ad:77:23:14:d9:52:4b:6c:5b:a4:65:4a:27:f4:
5f:f3:13:57:e8:e6:27:3f:4e:e6:3e:f5:a1:2e:9c:ce:38:b6:
14:3d:39:aa:4b:a5:74:8a:46:02:7f:02:ab:b1:fc:8b:8b:23:
76:40:cc:52:1f:85:a2:e3:93:e7:54:be:1c:37:41:78:44:2a:
2c:3f:33:1e:6b:87:88:7e:89:5a:3d:64:81:c7:36:60:00:66:
ed:1c:7e:1d:5b:52:45:c3:e5:af:77:21:06:01:c0:da:c3:c9:
52:11:b0:04:40:77:bf:d5:fe:62:42:f9:ca:17:79:84:2b:88:
b9:70:62:48:2d:98:81:a0:4d:71:be:5e:e8:ff:24:4c:e7:fd:
0b:c4:21:5a:a6:da:94:f7:e3:8d:14:6e:58:29:29:0e:9d:a6:
de:58:32:b5:22:1f:a1:a9:65:37:3c:fd:85:fa:ec:ca:c2:7c:
32:21:62:8e:90:8d:19:68:c1:7e:7f:c0:d2:36:0b:fe:62:8c:
32:d0:dc:97:10:94:42:b7:51:c3:cc:12:61:fc:b8:0d:bb:74:
a9:32:d5:fa:89:46:d2:ff:af:0b:24:66:12:c5:9b:7b:7b:8d:
97:a5:4e:f2:55:e0:ab:57:28:cd:60:30:1f:c7:9c:dd:0b:a4:
02:4e:12:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:22 2026 by rpki-client