Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/MtkMFeCwdMHY3TrtSqt90faUdo0.roa
File: MtkMFeCwdMHY3TrtSqt90faUdo0.roa (raw, json)
Hash identifier: l0UeOKu9JpK0NnRYAC+4ynQckxHuoZ5fWDKY6dAiR4g=
Subject key identifier: 32:D9:0C:15:E0:B0:74:C1:D8:DD:3A:ED:4A:AB:7D:D1:F6:94:76:8D
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 019F8034D6678C7778652EE90069DD74E52B
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/MtkMFeCwdMHY3TrtSqt90faUdo0.roa
Signing time: Mon 20 Jul 2026 15:46:14 +0000
ROA not before: Mon 20 Jul 2026 15:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204033
IP address blocks: 176.126.127.0/24 maxlen: 24
185.20.7.0/24 maxlen: 24
2a13:3d00:fff5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:34:d6:67:8c:77:78:65:2e:e9:00:69:dd:74:e5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Jul 20 15:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32d90c15e0b074c1d8dd3aed4aab7dd1f694768d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:61:1e:7b:e7:c4:44:6c:67:10:f1:87:f2:
ba:7a:b2:85:59:df:12:a8:38:da:3d:e4:c4:77:7e:
09:36:f9:17:b6:a0:62:a8:74:7c:c3:82:16:db:18:
99:12:58:4c:ea:ef:db:35:8d:2e:b2:ec:38:e8:ef:
1e:d6:b1:fe:fe:cf:1f:b1:16:74:ff:d6:b3:28:2a:
99:79:1b:7f:aa:39:af:86:2c:c3:8a:c3:ef:3a:c6:
1c:6e:29:8d:75:8a:df:08:71:21:53:66:88:36:0f:
68:72:b9:eb:50:c8:50:64:b3:8b:7a:dc:cc:87:cb:
67:fd:7d:57:51:1c:99:5e:3a:3f:50:b2:a7:9c:ad:
af:cb:27:bd:6f:99:dd:fa:d2:9f:dd:b6:01:d3:b8:
39:cf:3b:30:7c:5c:03:99:5a:b9:80:88:45:9f:f6:
ef:27:94:16:40:fc:ef:68:2c:d6:c7:fb:b1:97:e3:
06:dc:de:7d:61:11:50:ca:74:c8:d4:0d:2e:5a:44:
c2:a0:0a:4e:47:73:fc:2e:ed:9f:47:79:93:3e:93:
73:16:4e:52:da:76:fd:21:58:65:a9:ba:2b:de:11:
05:94:fe:1c:29:88:88:91:0b:5e:43:5e:8e:f6:9f:
1a:7c:97:2a:bd:26:f4:51:e4:f5:2e:9d:b0:8a:9f:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D9:0C:15:E0:B0:74:C1:D8:DD:3A:ED:4A:AB:7D:D1:F6:94:76:8D
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/MtkMFeCwdMHY3TrtSqt90faUdo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.127.0/24
185.20.7.0/24
IPv6:
2a13:3d00:fff5::/48
Signature Algorithm: sha256WithRSAEncryption
18:56:08:0c:56:3a:a6:d5:57:b3:b3:9a:00:2e:f0:7b:18:e9:
9e:b6:7b:96:b1:b1:72:f3:b0:2d:01:dd:ff:14:12:14:93:6f:
27:7c:d8:c9:24:c5:3f:03:95:b1:64:c5:18:e2:bf:a6:1d:b3:
d4:f1:f0:c3:71:31:a4:27:65:ca:63:62:7a:e5:e8:15:b2:ff:
bc:5e:63:66:c6:b5:ab:ab:2f:98:df:66:07:c6:ca:57:81:9e:
8f:57:64:f2:2b:a3:50:87:c0:63:df:17:50:12:46:9b:63:2a:
68:15:49:0a:b3:fb:4a:1c:9b:4b:5e:50:7a:10:da:52:6f:00:
a6:07:81:d2:8d:38:03:7c:d5:bd:6f:96:d5:d4:ab:18:3f:24:
5f:1f:d1:92:08:8d:b0:bc:ec:08:b8:92:11:cc:f4:a5:33:03:
8c:86:77:58:f4:4d:7a:75:a1:1d:92:db:7d:09:18:55:80:bb:
57:c9:f4:15:d5:f7:59:6e:2f:f3:a1:58:ff:a7:67:94:72:4b:
a6:cc:4a:4a:47:46:13:21:bd:9a:27:c3:53:7d:41:25:02:11:
95:74:67:c5:19:09:0a:28:ad:1a:68:0c:fa:aa:68:a7:cf:86:
c9:64:2c:9d:c4:54:ff:cb:0c:66:dd:0a:f5:9c:21:ec:73:e0:
96:76:af:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:25 2026 by rpki-client