Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/MtpEto0-9RDZdJKLup0JfMMPGIE.roa
File: MtpEto0-9RDZdJKLup0JfMMPGIE.roa (raw, json)
Hash identifier: SGYo5LM15qsG5Z/kxlP88G54S0Ys+UdLIr7hVGjbpUE=
Subject key identifier: 32:DA:44:B6:8D:3E:F5:10:D9:74:92:8B:BA:9D:09:7C:C3:0F:18:81
Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial: 01A10C81349E6D22ABF0187D2C1FCC96DA62
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/MtpEto0-9RDZdJKLup0JfMMPGIE.roa
Signing time: Mon 05 Oct 2026 14:39:16 +0000
ROA not before: Mon 05 Oct 2026 14:39:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219091
IP address blocks: 91.244.130.0/24 maxlen: 24
91.244.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:81:34:9e:6d:22:ab:f0:18:7d:2c:1f:cc:96:da:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Validity
Not Before: Oct 5 14:39:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32da44b68d3ef510d974928bba9d097cc30f1881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f1:03:39:f3:82:a7:b4:56:d0:2c:09:79:aa:
78:10:d8:4a:85:a5:2e:0c:4c:b4:17:b9:23:40:ce:
bb:23:5b:f2:5d:bc:25:12:c3:4a:f3:eb:dd:cf:66:
ac:79:a5:92:2b:ef:51:58:90:69:6e:a7:05:ab:d8:
11:3d:bf:0d:8a:f6:ba:20:6e:c6:18:64:bb:71:2e:
42:32:9a:04:cc:bc:b0:b0:bb:27:0b:65:7e:05:68:
eb:63:6a:fa:3e:54:bc:f9:9c:55:57:3c:0b:2e:98:
8d:96:07:c3:e3:46:be:1c:4c:da:93:19:d9:f5:16:
15:95:c6:1b:c3:b0:ab:fe:55:c4:7a:05:45:ca:94:
0f:8b:c4:be:6f:f9:77:6b:2d:bb:f3:39:55:f1:8f:
d7:d9:b5:d7:b4:e3:af:9e:00:41:22:aa:1e:6a:e6:
96:c4:48:2b:a2:2d:f8:cf:8a:1d:ac:fa:2b:94:a5:
54:03:28:0f:08:de:91:11:10:68:09:33:11:b0:36:
4a:16:9a:aa:75:27:01:a6:f9:5f:7e:72:e4:42:a2:
8e:c0:b0:e4:b4:a9:ea:e6:51:dc:7d:bb:f2:d7:67:
f7:69:72:e2:fd:17:5f:d5:28:3e:89:58:6a:cf:f8:
5c:cd:f3:2f:9c:1c:fa:49:9c:b8:63:c4:96:1a:32:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DA:44:B6:8D:3E:F5:10:D9:74:92:8B:BA:9D:09:7C:C3:0F:18:81
X509v3 Authority Key Identifier:
keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/MtpEto0-9RDZdJKLup0JfMMPGIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.130.0/24
91.244.132.0/24
Signature Algorithm: sha256WithRSAEncryption
26:40:ef:62:a6:f0:98:89:71:cd:6c:11:87:61:2e:de:cc:cc:
47:00:7b:67:33:77:8e:1c:af:5f:da:88:66:64:61:75:ba:b2:
69:86:55:78:d9:28:a4:88:b3:61:66:aa:39:5d:97:29:4f:0c:
33:e8:8b:50:59:1c:eb:9c:46:ab:56:b7:50:14:2c:13:67:25:
f9:bc:3c:b1:18:ed:1b:b8:e0:36:fe:e9:4e:03:b3:95:99:c6:
90:85:b7:b4:15:ae:da:1a:6d:cc:35:b2:f3:04:59:c5:7e:d1:
67:76:78:01:a5:f8:01:49:12:99:eb:d2:17:df:21:09:a3:1d:
80:66:4c:5b:14:45:cd:35:1c:a8:45:19:45:18:ea:32:4c:f0:
30:34:b1:dc:95:2b:6f:3c:40:60:4f:d4:3c:82:6d:b9:21:8e:
4b:fc:ba:ab:95:07:56:1a:17:40:ae:2e:e1:0c:ed:ac:a0:1c:
00:b5:3e:77:42:54:2c:b6:8f:19:82:84:3d:10:a4:5d:bc:89:
d7:04:a8:d5:80:9b:d4:5b:98:2a:83:08:6b:f3:23:69:3f:56:
c2:c6:1e:c0:b6:5b:92:41:4e:ae:8b:e5:5f:75:bf:d3:d2:32:
6a:39:5d:e2:28:e3:ca:28:4b:2e:04:1f:05:20:a1:e2:d9:ac:
12:ee:ef:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:00:24 2026 by rpki-client