Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/MjcZ2MSBSxg92DamLJc9QK2Q0W4.roa
File: MjcZ2MSBSxg92DamLJc9QK2Q0W4.roa (raw, json)
Hash identifier: lCee/CmkjHnZT5K3Eyigfd8O2qmaaH9b1EJIU01pWpE=
Subject key identifier: 32:37:19:D8:C4:81:4B:18:3D:D8:36:A6:2C:97:3D:40:AD:90:D1:6E
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 01A0E6D9897F1E3D2719305358B3CF66D2AD
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/MjcZ2MSBSxg92DamLJc9QK2Q0W4.roa
Signing time: Mon 28 Sep 2026 07:10:11 +0000
ROA not before: Mon 28 Sep 2026 07:10:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60267
IP address blocks: 157.97.172.0/22 maxlen: 22
185.72.15.0/24 maxlen: 24
185.154.56.0/22 maxlen: 22
185.224.48.0/22 maxlen: 22
193.242.164.0/23 maxlen: 23
194.62.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d9:89:7f:1e:3d:27:19:30:53:58:b3:cf:66:d2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Sep 28 07:10:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=323719d8c4814b183dd836a62c973d40ad90d16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:68:08:88:38:59:c6:30:bc:00:a3:8a:d1:
e2:32:9f:26:de:76:d0:da:87:61:d9:3a:03:61:fa:
b2:85:38:dc:85:ba:8a:db:f0:e2:0d:1a:b7:1a:a5:
bd:71:ee:82:f5:4c:2c:36:02:be:00:27:49:00:03:
a6:5e:c9:37:e9:5f:5a:44:20:04:7d:3e:3a:3f:30:
c6:58:29:af:2b:e4:03:73:93:16:80:59:d8:8f:46:
fe:bf:4c:74:b0:2d:ea:ce:79:e8:0f:85:56:a7:35:
87:00:89:50:f0:f3:83:ca:ed:d5:3f:c9:56:51:bc:
8d:81:64:2f:c7:f1:96:f1:1d:99:24:11:08:2c:d8:
f3:ae:35:6d:c3:d4:c3:c2:fb:cb:1c:66:8c:8f:b0:
59:02:3a:7d:5f:3e:20:c8:5b:96:2d:c7:8b:a2:e2:
f2:7c:f1:fe:ee:64:14:8a:b4:df:81:6f:e0:8a:f4:
8d:75:7c:54:5c:02:9b:92:5d:e3:17:e3:fd:b6:ab:
29:54:fc:58:75:eb:c9:d7:3d:a7:ed:c8:76:58:1f:
e1:35:6f:99:03:e4:7d:73:6d:fb:04:80:32:eb:db:
7c:e3:d6:33:a3:41:f7:a8:ee:25:1c:f8:99:db:b8:
7c:86:4f:74:ab:c7:18:93:20:7c:ba:0c:8d:13:66:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:37:19:D8:C4:81:4B:18:3D:D8:36:A6:2C:97:3D:40:AD:90:D1:6E
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/MjcZ2MSBSxg92DamLJc9QK2Q0W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.172.0/22
185.72.15.0/24
185.154.56.0/22
185.224.48.0/22
193.242.164.0/23
194.62.56.0/22
Signature Algorithm: sha256WithRSAEncryption
55:d3:93:a6:4c:fe:6f:9e:9b:10:43:73:58:45:e6:6e:57:59:
2a:b0:bc:f2:26:1f:25:9c:ba:10:57:bc:cd:05:87:e2:64:1c:
e0:53:f5:da:da:13:b7:73:d0:88:90:a7:8d:da:e0:9d:ff:a2:
96:58:e0:5c:95:fb:cc:5f:67:8e:1d:b4:59:2f:ff:12:c6:09:
b1:77:3c:e8:21:51:89:ef:95:d0:63:02:bb:c5:b5:49:84:df:
14:98:ab:5a:b1:05:92:54:82:86:3b:93:bf:0e:df:3f:14:ac:
fc:fc:26:b4:e4:2d:03:d5:67:50:22:8c:44:60:ff:a5:67:fd:
58:cd:a0:93:92:44:8f:a0:a3:2a:3b:27:ea:42:43:4e:a2:0a:
56:9e:31:e4:92:fe:45:bc:01:21:51:77:02:be:ed:b1:f3:68:
55:e8:1d:a2:7a:e1:6b:1c:e8:a8:10:df:02:2f:f1:a4:70:c0:
c6:72:3b:8b:69:25:5e:97:23:ae:00:2b:26:ea:00:89:92:2a:
1e:c0:a4:0d:62:ff:57:97:84:80:5f:dd:fb:2a:a0:1d:63:a6:
e0:45:32:be:1e:35:b9:30:b7:55:63:30:5b:a4:15:7f:72:f4:
10:ed:aa:47:95:cc:3f:a2:ec:b7:6d:29:22:ac:cc:6d:41:21:
67:45:39:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:50:12 2026 by rpki-client