Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/MXZba0tESw49AjMPwwibSoN-lPc.roa
File: MXZba0tESw49AjMPwwibSoN-lPc.roa (raw, json)
Hash identifier: m+4MMGXf2B9TTaheZiIhQXkwcGgwJAEi9LfQm4ngttk=
Subject key identifier: 31:76:5B:6B:4B:44:4B:0E:3D:02:33:0F:C3:08:9B:4A:83:7E:94:F7
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019D9A7E97D77D480FE76A592AC8440823FF
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/MXZba0tESw49AjMPwwibSoN-lPc.roa
Signing time: Fri 17 Apr 2026 08:11:20 +0000
ROA not before: Fri 17 Apr 2026 08:11:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214515
IP address blocks: 37.32.41.0/24 maxlen: 24
185.215.229.0/24 maxlen: 24
185.243.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:7e:97:d7:7d:48:0f:e7:6a:59:2a:c8:44:08:23:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Apr 17 08:11:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31765b6b4b444b0e3d02330fc3089b4a837e94f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c9:d4:af:92:2f:7a:1e:8e:82:d8:fb:8f:8d:
c1:7f:59:11:45:66:35:9f:f3:fe:3d:5b:c4:cf:05:
5e:cd:68:c6:25:8b:64:22:bf:8a:e5:33:4a:a6:52:
a2:a8:c6:03:a6:e4:11:bf:7c:c0:9d:8d:b3:1b:f8:
d5:cb:7e:e2:f0:f6:cc:94:de:c5:df:9a:75:16:62:
ce:ce:43:a7:f1:e4:59:09:3f:a1:c0:db:2a:39:c7:
b7:b1:50:50:f8:3f:92:17:ca:54:33:7e:9a:5b:2b:
59:15:cc:07:19:e4:a9:d9:a8:36:a7:c2:12:2a:f0:
0c:60:51:fc:b2:e9:e0:8f:cd:49:a2:88:a0:66:16:
05:35:7d:d1:54:c0:1d:58:e3:e7:80:38:80:dd:fb:
f2:2a:65:86:d7:89:fa:db:a0:19:96:30:40:50:9e:
19:22:5b:29:3f:f3:26:72:ba:fc:f9:5b:f0:b8:aa:
4f:ff:e5:13:13:5d:05:c2:ea:18:29:1b:ae:12:81:
ea:11:60:02:0f:ca:25:f0:b0:50:08:84:48:f3:52:
5d:d4:2d:8a:93:fc:1e:27:31:52:ab:75:63:b7:5c:
fb:72:f2:17:12:32:56:fe:c1:70:58:40:92:ce:d2:
07:87:9f:d1:de:b5:15:6e:fa:56:27:73:d0:5a:a4:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:76:5B:6B:4B:44:4B:0E:3D:02:33:0F:C3:08:9B:4A:83:7E:94:F7
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/MXZba0tESw49AjMPwwibSoN-lPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.41.0/24
185.215.229.0/24
185.243.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:33:77:09:7e:38:6f:4b:00:3e:20:3d:8f:47:bc:7b:9e:2f:
03:2e:d5:04:f9:45:23:bb:bf:73:c3:64:60:0c:06:1c:f2:98:
2b:f4:73:68:e5:01:bd:bf:4b:4b:1b:bf:f9:44:62:82:30:e4:
ab:8a:62:fe:44:30:c4:9f:be:80:60:a8:51:ee:79:93:68:fa:
53:cf:4f:36:a0:4c:86:c3:95:88:0f:35:3a:24:c9:32:f2:6d:
14:77:de:3c:31:91:8c:12:e0:4d:ef:99:2b:43:96:e1:d7:58:
4e:23:66:c7:9e:40:c8:f5:ef:19:0b:b1:d1:65:ff:52:03:b2:
82:f7:71:e0:66:b6:e2:03:eb:13:aa:93:e7:72:7a:f8:bf:97:
87:f5:1d:39:d5:90:51:19:22:ef:7e:d8:0a:92:1e:05:6c:86:
d1:92:e4:d9:8b:6e:ae:e3:40:99:f7:59:16:67:08:1d:9c:1c:
9a:d1:3f:d1:e2:e7:86:b3:af:9c:50:d2:ec:db:05:5a:6d:d4:
8d:80:4e:58:d5:27:f3:80:d6:8e:fc:68:c0:cd:f4:d7:b2:5b:
d3:56:fa:92:58:cc:1b:80:d6:2a:91:be:9f:04:80:ca:0b:12:
92:33:1c:a3:6c:80:40:af:a3:04:22:e9:14:df:6c:34:c7:52:
fc:6a:fc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:09 2026 by rpki-client