Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/MZJU2AypL3FC20GJ1hJjTFnwkqI.roa
File: MZJU2AypL3FC20GJ1hJjTFnwkqI.roa (raw, json)
Hash identifier: piyI7bLY1o0PQm271LX1OYpOzkybAh+Ovs5nIs+zWe0=
Subject key identifier: 31:92:54:D8:0C:A9:2F:71:42:DB:41:89:D6:12:63:4C:59:F0:92:A2
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DE20AD5E3DD59C1FB6D05D5074699DC6F
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/MZJU2AypL3FC20GJ1hJjTFnwkqI.roa
Signing time: Fri 01 May 2026 05:37:33 +0000
ROA not before: Fri 01 May 2026 05:37:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 147.90.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:0a:d5:e3:dd:59:c1:fb:6d:05:d5:07:46:99:dc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 1 05:37:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=319254d80ca92f7142db4189d612634c59f092a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:56:ba:70:b6:82:b2:d4:10:09:eb:1b:bb:
0b:66:da:03:d8:e5:71:2c:61:56:5b:97:01:a6:63:
1b:29:59:b1:93:ab:a1:aa:35:cd:f0:7a:5d:85:6b:
56:18:56:95:7c:97:92:71:80:1d:0e:ca:d0:83:03:
ea:ac:5e:fd:c5:35:76:66:70:90:13:34:f0:0b:52:
a6:8d:e9:4e:46:5a:e6:7c:8a:95:19:b0:4b:50:57:
15:5c:eb:7b:6b:63:54:18:7a:45:e1:72:18:7b:72:
83:f6:db:b4:70:ea:df:d0:a3:bb:42:9a:7b:31:74:
db:ec:7b:f0:93:19:c4:dd:68:6b:2e:9e:af:e8:73:
1c:70:4d:90:b1:8c:a4:56:91:a0:5f:02:4d:af:f3:
87:8d:82:8a:37:98:aa:1d:20:6b:76:4a:9d:ac:79:
10:c2:45:c4:c1:61:99:7e:ed:ea:57:f0:63:1e:ba:
c5:b9:7b:9a:ab:31:5d:24:3c:fd:e7:b6:8d:3d:13:
31:71:14:57:34:8b:c6:1e:e9:8a:7e:73:b2:c8:90:
55:98:5e:a8:f4:20:1a:4a:f4:0e:03:2e:0a:74:f4:
02:67:d9:08:1c:49:ff:29:2a:02:2c:89:0e:57:ae:
d7:74:9c:9c:fa:6d:d3:f3:83:85:0b:4a:25:5b:e2:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:92:54:D8:0C:A9:2F:71:42:DB:41:89:D6:12:63:4C:59:F0:92:A2
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/MZJU2AypL3FC20GJ1hJjTFnwkqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.66.0/23
Signature Algorithm: sha256WithRSAEncryption
86:be:7b:21:6e:84:64:f7:37:a2:0a:91:b4:ff:bf:7a:e6:a2:
4f:a7:04:bd:3d:d9:38:f7:7b:ae:32:f9:fc:83:89:7f:89:61:
41:be:4d:9c:43:05:f4:ac:ba:75:a2:49:54:9b:e2:69:02:bb:
be:6e:ab:ec:19:09:ac:86:23:e6:f5:f1:04:3a:44:27:d7:5e:
48:8e:65:c3:ed:2d:9c:ab:94:ba:51:56:d9:71:32:b3:3b:fe:
64:45:2e:07:78:f8:e6:0b:03:d4:7e:06:d3:e6:ac:23:f9:e5:
b5:23:ef:d8:8f:bb:ce:9f:5b:3a:52:04:ad:67:4d:29:e5:3d:
e6:a5:ab:b7:8a:17:2d:6e:a5:cc:65:69:e9:da:c5:25:89:58:
9d:6e:e5:2f:63:98:32:57:dd:26:21:45:93:cc:94:83:67:81:
bb:33:e2:e9:05:20:01:ef:25:41:41:0b:88:1e:a7:52:d9:7a:
d2:40:f5:c1:d3:77:b8:d7:d9:f7:17:28:fd:dc:8a:3a:8b:25:
6b:c0:51:b4:eb:66:c9:7e:83:84:99:1a:c5:7d:f3:63:4b:48:
a9:f7:bf:cb:48:18:e2:b2:87:4c:4b:96:0d:f0:ae:34:3e:e2:
b9:08:c2:ab:ae:f4:46:69:20:b2:79:b1:6a:6b:bd:6a:28:f7:
b4:fe:69:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:55 2026 by rpki-client