Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MgG2ETYaacLox1kTxjiGddkGVcg.roa
File: MgG2ETYaacLox1kTxjiGddkGVcg.roa (raw, json)
Hash identifier: LRNtg5BxzK20yzSA//d2dXJTnz6qVjrfBhAo+hE4/co=
Subject key identifier: 32:01:B6:11:36:1A:69:C2:E8:C7:59:13:C6:38:86:75:D9:06:55:C8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0CD6DE9E15502150165213A27E2159257
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MgG2ETYaacLox1kTxjiGddkGVcg.roa
Signing time: Wed 23 Sep 2026 08:42:07 +0000
ROA not before: Wed 23 Sep 2026 08:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214143
IP address blocks: 163.5.17.0/24 maxlen: 24
163.5.18.0/24 maxlen: 24
163.5.19.0/24 maxlen: 24
163.5.25.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.44.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:6d:e9:e1:55:02:15:01:65:21:3a:27:e2:15:92:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 23 08:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3201b611361a69c2e8c75913c6388675d90655c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:0a:86:bc:91:5c:e9:6a:77:ad:92:eb:7a:
1f:17:d3:9d:62:d1:d0:03:25:bc:dc:d3:57:b0:65:
3c:c4:89:26:a8:b6:60:6c:5a:e5:fe:de:21:39:ee:
63:08:46:8f:12:5a:2a:ea:63:bf:23:19:90:37:9f:
20:d1:98:a1:d0:e4:20:19:7d:1e:ff:85:7a:7e:31:
3d:b8:5d:64:9b:bf:b4:4b:27:1e:20:b1:a5:04:df:
af:bd:38:b6:80:54:d5:c4:32:18:57:0a:fb:9a:aa:
ad:67:96:f2:d9:39:2b:e2:7d:50:42:89:62:f5:92:
d5:ee:77:3a:3a:3c:18:6f:49:e2:26:1c:48:47:09:
7d:0b:4c:89:87:d8:96:86:72:fd:2e:d7:ff:93:03:
28:8e:5a:9f:00:44:02:cc:6e:ed:53:0a:9d:7f:3a:
68:3d:be:6d:3e:ab:f8:89:65:35:c1:84:80:1f:73:
a4:0e:91:cd:4a:66:87:64:b7:be:c4:cc:44:1c:96:
d4:f2:3a:dd:b5:1a:d9:30:2e:c4:9f:25:e9:9c:a9:
a7:6d:e7:3f:82:12:85:d2:83:16:64:43:ec:ef:41:
a6:19:c6:ce:6d:46:6b:44:f2:55:df:e2:5d:27:d2:
02:bc:75:ec:0b:f6:37:13:6c:e3:c7:7f:1a:a9:52:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:01:B6:11:36:1A:69:C2:E8:C7:59:13:C6:38:86:75:D9:06:55:C8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MgG2ETYaacLox1kTxjiGddkGVcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.17.0-163.5.19.255
163.5.25.0/24
163.5.35.0/24
163.5.44.0/24
163.5.110.0/24
163.5.126.0/24
163.5.179.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b4:80:b6:d9:c5:c8:d4:bd:cf:a2:59:63:e4:5b:6b:79:86:
4d:10:9c:71:10:ca:d5:ff:29:1a:c5:f1:73:17:ed:f4:7b:d9:
f0:a2:c0:16:81:f5:e3:6c:d5:06:4a:49:34:1b:89:cc:b6:73:
89:3a:f7:2b:54:28:a4:70:64:90:21:e6:5d:34:31:fa:98:bd:
0f:45:af:db:f2:ef:80:93:bf:7e:59:71:ad:a2:e2:30:21:ba:
ad:5c:c2:a8:1f:92:02:25:71:e6:05:8d:17:b5:de:bb:dc:15:
98:7c:05:30:d0:07:5d:ef:71:89:da:6b:ee:ec:41:52:ba:6a:
06:a4:a2:d8:27:7d:f5:2f:c2:4c:2b:94:22:cd:e5:c6:1c:03:
ce:13:a1:c5:f7:68:b8:b7:78:ae:1c:84:57:92:a9:18:3c:ae:
28:4e:a4:a6:a2:51:40:49:d7:ac:2b:32:71:86:b0:3d:e0:d7:
de:ba:57:99:04:13:29:a8:84:57:52:42:93:6f:26:35:e3:a5:
bb:3b:38:29:3b:97:e7:3c:b8:86:23:5b:58:65:1c:62:ed:8f:
4a:14:3f:51:9f:59:66:00:f3:58:50:46:e3:28:c5:63:7b:92:
a7:3b:f3:6e:93:b6:4f:94:65:52:25:bd:ed:4f:f5:63:e9:62:
7f:76:b4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:54:36 2026 by rpki-client