Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/MW7a5ozeRK7aTF0-v1kkuN3zmBw.roa
File: MW7a5ozeRK7aTF0-v1kkuN3zmBw.roa (raw, json)
Hash identifier: v0rscB9FZzDyiyT/UQbPiAzxWoDQj9aXYnD+nqDYtG0=
Subject key identifier: 31:6E:DA:E6:8C:DE:44:AE:DA:4C:5D:3E:BF:59:24:B8:DD:F3:98:1C
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A09E417E7B2190736969D4576507E2F795
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/MW7a5ozeRK7aTF0-v1kkuN3zmBw.roa
Signing time: Mon 14 Sep 2026 04:51:27 +0000
ROA not before: Mon 14 Sep 2026 04:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 87.232.81.0/24 maxlen: 24
87.232.85.0/24 maxlen: 24
89.126.224.0/24 maxlen: 24
89.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:41:7e:7b:21:90:73:69:69:d4:57:65:07:e2:f7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Sep 14 04:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=316edae68cde44aeda4c5d3ebf5924b8ddf3981c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:2d:52:78:5a:68:c8:e7:9d:86:c1:8e:3d:
a5:a8:9e:64:f3:20:b3:2c:ba:97:b6:0f:17:ff:61:
12:9c:7a:3a:78:93:f3:df:a3:a5:76:19:45:fe:5d:
1c:66:ea:4c:fa:d0:89:3b:53:10:00:28:03:ec:5f:
23:e2:f1:a8:68:45:81:ab:72:7f:5e:d5:43:31:fe:
a1:97:9f:49:7d:2c:ca:25:ff:99:17:dd:d1:c2:0b:
fa:eb:9a:a8:0b:ac:08:ac:a6:d8:bb:08:9c:52:1d:
a6:18:f0:9a:66:d4:4e:ac:8f:20:0d:4b:b0:93:b9:
ff:f6:b8:dc:99:56:08:30:5b:4d:c4:68:ca:d5:f1:
44:39:d8:0d:f7:bf:98:5e:59:36:92:ba:15:e3:67:
a2:8d:83:17:18:8f:2a:ec:f8:8e:f2:ae:09:25:94:
1a:2b:c6:03:db:c0:1c:94:d8:4f:6c:f4:d4:cc:c9:
69:c2:0a:78:e6:f8:7c:cb:d2:49:a3:f5:6f:99:b2:
a1:8c:83:8e:f1:d2:16:a5:5d:e0:9d:71:e5:c2:d7:
a6:ed:2c:3f:7d:99:d9:90:e6:40:d5:ca:98:52:87:
66:b0:ea:43:9b:68:6e:e1:52:c2:92:a2:de:56:2d:
9e:21:bf:1f:a1:69:d8:24:9d:73:0b:07:cc:ba:ac:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6E:DA:E6:8C:DE:44:AE:DA:4C:5D:3E:BF:59:24:B8:DD:F3:98:1C
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/MW7a5ozeRK7aTF0-v1kkuN3zmBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.81.0/24
87.232.85.0/24
89.126.224.0/24
89.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:51:cc:7f:50:ff:c0:9e:81:e9:c7:39:96:1f:84:9f:81:53:
00:20:cb:d7:f1:d7:c5:7c:86:06:a8:2f:49:94:d6:8f:05:6a:
ee:81:e2:1f:37:b3:e0:f0:d3:8d:1b:b5:7f:d2:88:e1:b9:07:
a0:8c:ba:a0:6a:b6:99:ea:38:fd:b8:4c:ff:66:4a:e4:cf:bf:
a5:54:85:21:18:31:60:22:2a:77:8b:2f:6b:33:77:40:46:cc:
75:20:5c:a2:cc:0b:e2:68:6b:85:a4:97:9f:3f:2d:a5:15:ef:
aa:e9:ec:19:a6:d8:26:66:fc:7e:a8:9b:30:71:f6:3f:70:78:
36:ea:5a:93:0c:17:b5:cb:59:7a:c0:0e:de:99:cb:34:32:2d:
24:e4:ad:bf:78:ec:c2:7e:32:6b:e9:f5:f9:9c:c7:16:1a:0a:
49:ac:05:0b:89:3c:dc:11:c0:f2:b7:22:f1:08:d2:69:e4:14:
30:49:4c:aa:1a:4b:50:8e:33:3f:b8:49:53:ca:42:de:11:4f:
5f:24:e6:cd:60:cf:ae:9f:f3:c1:2a:d7:cc:9d:d2:7f:32:66:
3b:79:7b:69:b9:f4:2d:02:d3:be:d3:f5:49:4e:bd:35:ef:9f:
84:0d:4a:e0:f6:05:b5:ac:05:6b:0a:ff:fc:c5:0d:6e:c9:89:
39:7a:d1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:09 2026 by rpki-client