Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MUD8tdW2C4_4iNkJIG7ZO-R-vA8.roa
File: MUD8tdW2C4_4iNkJIG7ZO-R-vA8.roa (raw, json)
Hash identifier: Ph/XH4HSOVP8OnsZYPBqyQwbBXOiAyRtqnuiR86ttOA=
Subject key identifier: 31:40:FC:B5:D5:B6:0B:8F:F8:88:D9:09:20:6E:D9:3B:E4:7E:BC:0F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F9808192045C9ED52939CD082DA838633
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MUD8tdW2C4_4iNkJIG7ZO-R-vA8.roa
Signing time: Sat 25 Jul 2026 06:48:15 +0000
ROA not before: Sat 25 Jul 2026 06:48:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 13.143.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:08:19:20:45:c9:ed:52:93:9c:d0:82:da:83:86:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 25 06:48:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3140fcb5d5b60b8ff888d909206ed93be47ebc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:93:aa:87:f5:17:bc:74:88:ac:08:24:ac:
62:4d:aa:0f:a0:53:59:4b:16:ca:24:97:04:e8:c2:
c4:81:e1:f3:e3:40:cf:cc:23:04:34:ec:b9:a8:47:
a0:b3:78:84:dc:2e:14:6f:92:65:0b:a9:1e:13:df:
e9:41:6b:05:ec:af:c9:21:60:e2:07:65:c8:cc:20:
26:a2:fd:cf:30:11:64:d6:13:71:67:f5:c0:b2:50:
56:27:51:32:69:05:19:31:9f:87:ec:40:b0:cb:6f:
b4:14:6c:f7:e8:f9:40:aa:c7:e0:9f:ca:cb:a0:cd:
17:50:fa:ad:c2:fb:3b:ce:13:0c:db:bc:96:81:3d:
04:d4:18:64:30:57:30:60:bf:df:38:8a:c9:a0:9e:
1c:54:c2:fd:b7:97:77:1d:21:df:d3:88:f4:2a:c2:
41:23:76:68:c4:2d:4d:1a:09:88:c9:4b:b4:bc:2d:
5e:a2:58:72:c4:83:53:3a:15:20:e3:d7:2a:da:d6:
5a:73:b5:aa:91:8f:e1:d6:19:8a:76:c9:99:d9:84:
8b:3a:73:df:7f:a1:95:47:d5:77:3b:12:6a:91:67:
8c:41:24:92:95:c0:a7:83:6d:5b:61:77:fa:6e:a3:
79:4e:87:eb:93:61:d3:7d:f5:98:11:9e:e7:38:a4:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:40:FC:B5:D5:B6:0B:8F:F8:88:D9:09:20:6E:D9:3B:E4:7E:BC:0F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MUD8tdW2C4_4iNkJIG7ZO-R-vA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:3b:af:05:ed:01:29:ce:1a:8f:1b:fc:d1:77:9b:f4:2c:3e:
d5:77:56:1b:a5:ec:3d:a7:6a:8d:22:25:e9:2f:5f:01:be:23:
c8:21:84:35:43:af:9c:08:30:43:c7:7a:6f:02:24:ab:19:96:
2a:cf:22:9f:31:6a:d3:f6:c3:46:2e:a9:0a:ed:31:47:8d:a3:
2b:19:87:17:c3:9e:b7:ce:d6:23:f5:b2:58:cf:f7:b8:1e:aa:
f9:ef:02:18:bd:7d:6b:1c:48:ba:5f:7a:b1:c7:d8:0c:41:5f:
6a:ba:65:05:3e:51:1b:1f:03:ef:34:4b:80:56:09:ef:8a:22:
50:5b:16:8e:de:dc:eb:cb:48:4c:9f:4b:b6:b7:4b:7c:84:89:
fb:f4:f3:9c:87:4f:5e:c6:58:8a:3f:45:30:9a:6a:3c:46:6b:
fe:7e:b2:0a:37:00:cf:3a:b9:82:d6:b0:47:ff:db:e3:d0:e1:
7b:37:e3:52:7f:04:0a:d7:e0:7f:b5:81:75:9a:5a:cf:fd:5c:
0c:ee:d4:d0:ad:cb:e6:3e:b7:4c:13:67:d1:8d:b1:8e:c5:09:
50:7d:5a:b4:0b:ba:bf:71:36:77:ce:e6:fb:17:f3:bc:96:2e:
90:c1:9a:a1:3b:8c:83:15:ae:7d:20:ff:b3:9f:55:3c:c7:1e:
35:de:0d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:56 2026 by rpki-client