Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/MGzCP-3egIZv-ryFkuQCUFDWEqs.roa
File: MGzCP-3egIZv-ryFkuQCUFDWEqs.roa (raw, json)
Hash identifier: bJhpD6FoorD1c1XWBALWLkhn3d9wdJmlj8XJVxONDqs=
Subject key identifier: 30:6C:C2:3F:ED:DE:80:86:6F:FA:BC:85:92:E4:02:50:50:D6:12:AB
Certificate issuer: /CN=f4e9f8bd2f9a4adb3c71c7b0b03007afb5303de9
Certificate serial: 01A1CF5430A3F7FF1637976E8371C5A8228E
Authority key identifier: F4:E9:F8:BD:2F:9A:4A:DB:3C:71:C7:B0:B0:30:07:AF:B5:30:3D:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9On4vS-aSts8ccewsDAHr7UwPek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/MGzCP-3egIZv-ryFkuQCUFDWEqs.roa
Signing time: Thu 12 Nov 2026 10:36:03 +0000
ROA not before: Thu 12 Nov 2026 10:36:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1680
IP address blocks: 91.199.94.0/24 maxlen: 24
195.216.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9On4vS-aSts8ccewsDAHr7UwPek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:54:30:a3:f7:ff:16:37:97:6e:83:71:c5:a8:22:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9f8bd2f9a4adb3c71c7b0b03007afb5303de9
Validity
Not Before: Nov 12 10:36:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=306cc23fedde80866ffabc8592e4025050d612ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:d8:db:28:60:ff:9f:22:69:a4:39:8f:2a:
b1:d9:ae:4e:f4:97:fa:47:6e:09:61:e7:88:12:c5:
5e:b9:83:8e:bc:c8:6a:e3:6d:02:27:55:c9:ca:95:
55:d5:55:8b:d0:b7:ef:e9:24:a7:a3:e7:18:44:43:
1f:a0:a9:1e:02:8e:61:0d:50:e6:5c:ed:19:b3:58:
7f:19:16:98:fb:7e:d4:2d:1f:ac:50:e3:63:c7:d0:
d5:5a:ed:3d:92:29:4b:ee:82:20:3f:18:ea:24:d8:
58:06:6d:eb:b8:fa:0e:ff:0e:c4:81:1d:3d:31:d4:
90:84:43:50:0d:10:6a:d2:eb:ef:32:c0:6c:1c:fa:
cb:1a:d1:24:e7:e7:fe:99:37:f7:49:f3:6f:0c:b7:
8f:da:1c:48:52:4a:98:fe:62:cd:00:6b:8f:a5:ec:
f5:fe:9d:61:8c:fd:e2:cc:79:28:75:e9:ee:7c:a0:
e2:78:a2:ba:86:91:24:4e:b3:f0:3e:9c:bb:07:c7:
4e:90:ff:e6:54:6f:ec:43:6b:4c:a4:17:d3:5b:f0:
d6:26:cb:02:cd:af:eb:fb:d7:8d:24:50:2f:fd:b9:
43:7e:d4:8c:f0:37:86:e7:c6:84:d4:8f:bf:df:1c:
05:7a:c2:82:53:41:2e:94:2f:8e:70:19:34:c2:c0:
8c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6C:C2:3F:ED:DE:80:86:6F:FA:BC:85:92:E4:02:50:50:D6:12:AB
X509v3 Authority Key Identifier:
keyid:F4:E9:F8:BD:2F:9A:4A:DB:3C:71:C7:B0:B0:30:07:AF:B5:30:3D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9On4vS-aSts8ccewsDAHr7UwPek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/MGzCP-3egIZv-ryFkuQCUFDWEqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.94.0/24
195.216.252.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d6:77:43:f2:d5:da:16:2e:4b:20:c9:1c:e3:e6:4c:e9:51:
f6:ac:1a:f5:cd:75:18:45:dc:52:93:19:5b:cf:1b:42:ed:b1:
68:10:8d:d1:1a:c7:33:5b:46:59:01:e6:48:da:60:3b:b0:d0:
64:d5:9f:f7:e6:02:85:e1:ff:c6:b3:02:a1:b1:04:72:3b:ad:
22:52:d0:1d:43:27:5e:c5:a1:be:67:c4:54:3a:c0:4a:4d:df:
9a:cb:14:10:70:28:83:17:5c:22:c2:0d:3b:9d:e4:7d:f2:79:
dc:b7:c3:c4:71:d1:6f:c4:15:fd:a2:cf:50:8f:a1:ff:a3:a9:
e8:5f:40:ca:a0:f6:49:f8:33:f4:6d:c4:92:eb:bd:73:4a:56:
47:3e:42:bd:77:0e:a2:97:66:94:43:4c:b2:04:e7:14:72:4a:
bc:7e:3d:ca:ce:88:40:9e:7d:26:db:50:84:1d:90:bd:7d:ba:
4e:96:cc:41:46:be:5e:8a:27:90:19:c4:5a:aa:91:19:b1:d0:
47:3f:67:28:5d:f6:fd:8e:dd:81:f5:06:30:90:fa:02:79:7b:
28:27:1f:e0:d0:1b:d8:41:11:d3:d9:79:43:cb:da:88:46:5f:
4a:0f:1c:7e:74:ae:7f:41:7a:84:96:de:2f:40:98:8d:46:41:
5f:fa:2a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:55:07 2026 by rpki-client