Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/67mzmlcfW-MThijZjFA8TI2pGeY.roa
File: 67mzmlcfW-MThijZjFA8TI2pGeY.roa (raw, json)
Hash identifier: 4lAI+ascPSlQrYkNSvuZZ0T5sJFR615ZGf43z4kD5YI=
Subject key identifier: EB:B9:B3:9A:57:1F:5B:E3:13:86:28:D9:8C:50:3C:4C:8D:A9:19:E6
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019D668E76FD26464CC320DCA499BACC33EF
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/67mzmlcfW-MThijZjFA8TI2pGeY.roa
Signing time: Tue 07 Apr 2026 06:08:25 +0000
ROA not before: Tue 07 Apr 2026 06:08:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 81.29.148.0/24 maxlen: 24
81.29.153.0/24 maxlen: 24
81.29.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:8e:76:fd:26:46:4c:c3:20:dc:a4:99:ba:cc:33:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Apr 7 06:08:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebb9b39a571f5be3138628d98c503c4c8da919e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ab:fa:a3:59:3c:f0:9d:9b:71:8c:a5:3b:6d:
1a:e4:a7:aa:5a:a0:da:c7:5f:c6:d0:46:1e:9c:06:
f5:3e:cc:87:75:65:8d:74:fc:56:f4:3d:ea:10:0f:
8e:ad:2e:7f:4d:91:bd:fa:16:cc:21:51:f2:04:1c:
cb:25:0f:50:e3:59:3a:8a:8e:48:8f:9d:e4:52:12:
5b:8d:11:a4:c8:a3:6d:12:c6:2d:25:c6:03:f5:a2:
a9:4d:68:92:4c:34:ae:28:61:86:41:34:ed:8a:3a:
b0:f8:d2:0e:29:f0:4a:52:7c:f1:ab:aa:d6:2a:13:
13:b4:77:4f:48:2b:62:34:20:ac:4b:7c:00:5a:db:
7f:e4:36:5d:07:9d:3c:f7:5d:35:ca:1c:ec:13:83:
58:30:c0:c7:e7:a5:7a:ac:26:b3:f8:99:f2:2d:14:
e4:f2:6f:f3:0b:9a:66:19:da:11:85:5d:ed:6a:50:
49:bd:55:3c:16:4d:b0:ae:24:2d:78:d9:e5:84:66:
d7:73:05:e1:a5:00:8c:fd:33:c0:e0:01:a1:40:a3:
0e:7e:a5:99:c7:2a:12:8a:48:f2:6e:01:a4:8e:1b:
32:0c:62:d5:df:aa:94:26:60:b3:b5:05:ea:cb:f4:
61:78:2e:2e:19:79:5d:9c:ef:5c:3b:cb:e0:ac:8c:
88:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B9:B3:9A:57:1F:5B:E3:13:86:28:D9:8C:50:3C:4C:8D:A9:19:E6
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/67mzmlcfW-MThijZjFA8TI2pGeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.148.0/24
81.29.153.0/24
81.29.159.0/24
Signature Algorithm: sha256WithRSAEncryption
75:df:c2:85:06:07:1e:4f:42:9a:a6:f6:48:1c:ef:56:18:97:
20:9a:70:6f:08:8c:af:3f:ff:30:10:35:4b:52:54:1f:88:7a:
eb:c0:39:46:26:59:28:1a:05:19:e0:f6:9f:bc:04:93:b4:33:
48:e2:0f:67:e7:c5:e2:22:a6:f0:ae:98:55:a0:7d:a7:5a:85:
04:8d:65:88:c3:34:cf:a9:99:66:c5:c5:88:6f:43:b1:ec:d3:
c9:06:29:ce:16:4c:b4:de:94:16:26:6d:0f:da:13:90:87:54:
2b:db:fe:00:f4:60:84:f1:8f:9d:cd:62:e6:70:ef:57:15:41:
66:90:14:64:67:d3:e3:b4:e4:c3:e9:37:63:a9:d4:d5:75:52:
2e:5c:66:c2:9b:cb:a1:c3:ec:0a:d0:ef:8e:1a:d5:76:31:75:
d7:c5:ef:65:89:bd:9f:be:b5:47:ef:95:af:3b:5b:90:08:4e:
22:61:bf:36:d7:e9:4d:d4:1c:0f:38:e3:35:8d:3b:1e:0b:0c:
a4:04:5b:04:08:71:f1:32:81:ea:3e:f1:c6:bf:98:43:ba:d9:
c7:da:0a:22:7d:0b:86:d5:01:13:ae:9f:95:3f:44:ce:7c:f5:
7a:ff:0f:98:9e:8f:2c:d4:ee:c5:0e:8b:b1:00:26:dc:0e:66:
89:8a:b0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:08 2026 by rpki-client