Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/MUCk0SPtOpnrCSsonRUiNf-3RDI.roa
File: MUCk0SPtOpnrCSsonRUiNf-3RDI.roa (raw, json)
Hash identifier: cldvRgqMPrIXa052aZpFy3AIu+aiC2LgD9YfPfUmyIQ=
Subject key identifier: 31:40:A4:D1:23:ED:3A:99:EB:09:2B:28:9D:15:22:35:FF:B7:44:32
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 019C76756C3BE69587124D6169F44D0DB6B8
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/MUCk0SPtOpnrCSsonRUiNf-3RDI.roa
Signing time: Thu 19 Feb 2026 15:12:12 +0000
ROA not before: Thu 19 Feb 2026 15:12:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20738
IP address blocks: 79.170.40.0/21 maxlen: 21
79.170.40.0/24 maxlen: 24
79.170.41.0/24 maxlen: 24
79.170.42.0/24 maxlen: 24
79.170.43.0/24 maxlen: 24
79.170.44.0/24 maxlen: 24
79.170.45.0/24 maxlen: 24
79.170.46.0/24 maxlen: 24
79.170.47.0/24 maxlen: 24
213.155.0.0/21 maxlen: 24
2a01:e840::/32 maxlen: 48
2a01:e840:2::/48 maxlen: 48
2a01:e840:3::/48 maxlen: 48
2a01:e840:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:75:6c:3b:e6:95:87:12:4d:61:69:f4:4d:0d:b6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: Feb 19 15:12:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3140a4d123ed3a99eb092b289d152235ffb74432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:e9:89:69:b5:ed:cb:93:d2:3e:bb:7a:66:
a6:0e:4b:7f:cb:02:bc:df:65:ee:ff:6c:f3:a9:2b:
02:aa:b7:e1:53:81:e0:62:07:12:54:a4:c8:dc:09:
17:d9:82:02:b3:3d:c9:f7:51:c9:95:0d:55:81:74:
7c:31:93:cc:47:e4:4c:86:cf:16:98:0a:33:71:78:
aa:25:95:b3:56:2d:49:71:f5:8c:a2:54:6b:40:69:
29:78:2d:b2:45:87:02:5b:55:2c:f5:0e:50:de:f6:
22:e2:ed:04:b9:1d:b8:cf:50:5d:70:21:35:fb:1e:
2c:0b:ec:f5:f6:64:a9:3b:54:f9:71:77:62:8e:fc:
4e:de:47:46:e6:93:18:24:6b:bf:ac:9c:5a:f4:ba:
11:9a:b6:84:84:ed:3f:b3:f7:c3:2c:2e:19:75:df:
67:03:f7:88:e0:0a:5e:dc:9d:f0:d2:88:2c:e6:fa:
93:b7:9f:d6:6b:5d:f1:52:7e:d9:75:bf:1e:30:3f:
a9:6b:bc:8f:2c:c5:f0:d8:a8:de:de:8f:6e:a1:38:
fc:c8:21:fe:60:55:4c:a1:62:b6:68:4c:25:2e:8e:
20:1b:38:69:f9:37:24:d1:e7:57:f2:77:23:2b:ae:
d0:a4:53:f0:96:26:02:05:25:31:59:58:70:13:a9:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:40:A4:D1:23:ED:3A:99:EB:09:2B:28:9D:15:22:35:FF:B7:44:32
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/MUCk0SPtOpnrCSsonRUiNf-3RDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.40.0/21
213.155.0.0/21
IPv6:
2a01:e840::/32
Signature Algorithm: sha256WithRSAEncryption
3d:1a:c5:a2:38:d3:e9:b5:ff:d4:1f:bb:5c:43:8e:4d:82:93:
8b:b0:94:b1:e9:c7:af:1a:4a:9b:66:57:a6:04:8b:65:26:80:
2f:66:6c:11:88:51:95:c8:37:95:86:3f:37:0d:c4:ec:49:e4:
2c:33:f5:81:34:27:8e:40:a0:db:cc:e0:15:49:cd:38:43:b5:
e5:88:91:24:f2:32:7e:a8:a5:10:cf:53:bb:ab:57:61:51:b7:
bb:64:e0:4c:2d:17:e4:79:18:67:d4:00:0c:17:e1:ac:fc:ab:
e1:87:57:1f:f4:4c:61:14:4a:4d:5a:dc:51:f3:8f:32:c5:b3:
6c:0c:ef:99:ad:be:47:59:6d:c6:80:d5:d9:39:d2:08:6a:e4:
4c:c0:d7:67:39:37:49:55:d3:0a:bc:62:9c:8a:d4:e6:98:72:
d4:43:fa:7e:58:ce:43:32:61:6d:aa:7c:7b:49:99:76:f9:a2:
1a:5e:ea:3b:f3:76:ee:37:88:45:b7:6a:fb:18:d6:73:13:98:
3a:2e:07:57:98:74:26:2c:fe:75:06:e5:13:a1:10:3a:f1:08:
a2:d4:ff:ec:91:18:4b:d9:da:84:de:24:36:33:77:b4:40:31:
de:57:86:84:b5:7f:ff:79:b7:f7:2a:38:9e:74:19:d3:56:ad:
46:46:1a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:18 2026 by rpki-client