Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/MTzF4ny-96tIif-EidSHT4X1wno.roa
File: MTzF4ny-96tIif-EidSHT4X1wno.roa (raw, json)
Hash identifier: OBXGWOMrsRP/smPXB6w03mEMeeObFVRS2I+j2/hEmBY=
Subject key identifier: 31:3C:C5:E2:7C:BE:F7:AB:48:89:FF:84:89:D4:87:4F:85:F5:C2:7A
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A0F98F652B3B2ACEFC2351F4C1D47EAD0C
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/MTzF4ny-96tIif-EidSHT4X1wno.roa
Signing time: Thu 01 Oct 2026 22:21:59 +0000
ROA not before: Thu 01 Oct 2026 22:21:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218984
IP address blocks: 91.226.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:21:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:8f:65:2b:3b:2a:ce:fc:23:51:f4:c1:d4:7e:ad:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 1 22:21:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=313cc5e27cbef7ab4889ff8489d4874f85f5c27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:4c:b9:6f:d8:41:6f:9c:13:84:20:a9:33:
e5:a2:83:3b:43:e4:87:35:dc:a1:3a:d5:56:5f:19:
c3:bb:fa:8c:63:a9:04:42:24:6e:75:ed:e1:3b:97:
73:f9:ee:d2:ca:d6:f6:cb:94:08:58:9b:70:33:33:
fc:30:f7:1a:11:85:4a:dd:a3:17:41:2c:f9:c6:b7:
00:bf:2a:24:47:fc:02:80:92:f9:ae:fd:d2:6a:08:
dc:4c:bd:1c:3d:f0:be:85:f2:e5:7e:5b:6c:9e:e1:
62:bb:f1:d7:9c:13:a3:e3:00:01:aa:0e:c3:3b:22:
78:11:0e:6b:6d:e4:f8:8e:75:3a:8d:a8:7f:5c:44:
2c:11:c4:f9:22:63:5d:6a:7c:f2:0d:3d:19:17:d1:
26:df:46:70:19:f7:13:e1:d1:3e:9c:b4:c5:06:60:
19:19:47:e6:86:81:11:73:de:d0:cd:d2:51:84:67:
aa:34:e8:c5:73:61:c1:92:6b:43:30:10:0e:76:f0:
c0:0d:89:df:96:19:63:8c:b6:06:cc:28:31:66:19:
bb:a4:b7:f4:33:74:33:5a:b4:6c:51:08:3a:58:0a:
3f:05:49:7c:3a:e7:1a:bd:43:9b:46:bf:f3:8a:a0:
d6:a3:37:de:8b:fd:b3:b3:95:43:cc:3e:e5:9f:15:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3C:C5:E2:7C:BE:F7:AB:48:89:FF:84:89:D4:87:4F:85:F5:C2:7A
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/MTzF4ny-96tIif-EidSHT4X1wno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.56.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c6:73:e2:20:cb:7a:c5:21:c2:ec:94:03:6d:54:64:f3:2b:
3b:1d:49:1a:01:46:c5:0e:fb:b5:54:78:22:fa:39:3a:ed:e4:
74:d4:d6:12:be:e8:ee:12:8a:ae:89:72:88:fa:f6:58:c7:a0:
4b:8e:27:79:ad:37:bb:a1:d7:7e:63:9b:50:49:75:fe:b9:a1:
24:46:f0:92:d6:47:17:d7:63:ed:85:22:47:4a:55:53:9f:cf:
63:44:73:a7:e6:27:ea:5a:b0:da:86:4f:47:76:40:f3:c9:a1:
1f:e0:ab:aa:14:5a:c4:c5:c2:34:6b:c0:a0:0c:1d:f1:4f:c7:
98:2c:6f:b7:77:f6:0e:db:74:ba:49:86:46:3b:5f:8e:a8:0c:
15:c9:85:e9:71:12:68:35:d2:06:d8:a9:11:0a:01:0a:bc:43:
02:05:e3:c3:d2:b1:ed:93:79:08:fa:a0:8d:82:dd:24:bc:d6:
8e:42:b2:0a:e5:5f:a3:80:8a:f8:7a:0c:74:d8:a9:aa:24:84:
74:9e:e3:50:bb:9e:7a:07:6a:05:94:99:46:49:e6:76:6c:cb:
45:ac:93:22:34:88:b8:ea:91:1c:8e:47:92:ff:b6:5d:e0:fb:
84:ce:36:c2:51:2c:41:51:a3:b5:f9:c9:b5:e1:b0:15:b7:ae:
d4:28:6e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:02:34 2026 by rpki-client