Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/174eac-fcba-4d45-9e9a-c37876b18ff1/1/MGUaHqJegBCE1l5_MxFp5h6jh7k.roa
File: MGUaHqJegBCE1l5_MxFp5h6jh7k.roa (raw, json)
Hash identifier: DaB3NesThc8p9XuYgoBEssWaRNTwh2QHlV9mYtKvRU0=
Subject key identifier: 30:65:1A:1E:A2:5E:80:10:84:D6:5E:7F:33:11:69:E6:1E:A3:87:B9
Certificate issuer: /CN=01b1c9b9ff3066068bb31257009ea204bb7b9f0a
Certificate serial: 019E92F6855D26A1624D25E7A2B64E0FB879
Authority key identifier: 01:B1:C9:B9:FF:30:66:06:8B:B3:12:57:00:9E:A2:04:BB:7B:9F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbHJuf8wZgaLsxJXAJ6iBLt7nwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/174eac-fcba-4d45-9e9a-c37876b18ff1/1/MGUaHqJegBCE1l5_MxFp5h6jh7k.roa
Signing time: Thu 04 Jun 2026 14:08:09 +0000
ROA not before: Thu 04 Jun 2026 14:08:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20973
IP address blocks: 185.110.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/174eac-fcba-4d45-9e9a-c37876b18ff1/1/AbHJuf8wZgaLsxJXAJ6iBLt7nwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/174eac-fcba-4d45-9e9a-c37876b18ff1/1/AbHJuf8wZgaLsxJXAJ6iBLt7nwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbHJuf8wZgaLsxJXAJ6iBLt7nwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:f6:85:5d:26:a1:62:4d:25:e7:a2:b6:4e:0f:b8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b1c9b9ff3066068bb31257009ea204bb7b9f0a
Validity
Not Before: Jun 4 14:08:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30651a1ea25e801084d65e7f331169e61ea387b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:e2:4e:49:b5:c5:5a:64:4b:12:7a:e3:cb:
32:96:ee:ee:b8:0d:9d:34:3f:2e:1f:41:20:2f:02:
53:dc:1b:0b:f7:3a:be:b4:6b:bb:f1:bb:57:ee:99:
89:8a:3f:2c:ef:29:ba:ad:28:63:68:03:0d:ef:5e:
82:3b:c1:63:9a:a5:9d:de:2a:67:79:c3:12:0a:38:
23:24:31:e4:06:7b:72:f4:25:9d:92:9d:e8:67:bd:
5d:7d:a1:06:f6:a6:b0:22:ac:7b:11:44:fa:0f:41:
30:88:1b:3d:5a:cf:5b:f4:35:db:04:1a:d1:25:76:
fb:a4:ed:b3:2a:a4:c1:80:3a:36:aa:49:81:81:00:
3c:82:a6:a2:76:51:6d:78:d5:c1:cc:6b:50:1e:ad:
8a:d8:fa:2a:e4:0f:68:d0:56:3a:1f:2b:ff:f9:7f:
4e:4b:ca:c3:e0:55:42:e4:5f:38:cc:67:f7:04:1f:
59:96:df:28:79:5e:cc:b9:7f:6e:fd:8a:69:6f:89:
71:9c:49:0a:08:85:84:28:77:fc:a0:6f:33:db:c5:
b3:6f:6b:5d:b6:ef:9a:70:a7:23:69:4f:85:9f:c9:
d9:10:d3:08:98:cd:a9:8e:b6:19:b5:c7:99:89:0e:
2b:e5:a0:a0:67:37:2f:47:4b:f2:53:fc:c3:20:ac:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:65:1A:1E:A2:5E:80:10:84:D6:5E:7F:33:11:69:E6:1E:A3:87:B9
X509v3 Authority Key Identifier:
keyid:01:B1:C9:B9:FF:30:66:06:8B:B3:12:57:00:9E:A2:04:BB:7B:9F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbHJuf8wZgaLsxJXAJ6iBLt7nwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/174eac-fcba-4d45-9e9a-c37876b18ff1/1/MGUaHqJegBCE1l5_MxFp5h6jh7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/174eac-fcba-4d45-9e9a-c37876b18ff1/1/AbHJuf8wZgaLsxJXAJ6iBLt7nwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:b4:6a:56:96:90:02:fe:e8:b1:29:0c:ee:60:c8:34:49:78:
5c:67:25:6c:1e:68:9a:99:bb:ca:c6:09:0c:0d:e9:95:77:97:
fd:58:a4:25:0b:29:30:55:33:47:2f:aa:c5:74:3a:a2:48:63:
a6:10:45:8b:35:23:48:16:fd:73:9c:5e:de:4f:3a:c9:c8:d4:
c9:42:26:25:27:4e:24:5f:9f:2d:1c:d5:4a:23:a3:c9:48:e5:
9f:c2:07:28:67:7f:6b:f9:c0:c0:ab:a7:4d:47:e7:b8:4c:31:
82:d7:8e:d5:8d:73:20:33:6d:a5:6b:5e:82:c6:64:1e:26:de:
17:02:29:e6:23:fc:b4:34:87:17:24:36:25:04:2d:c7:8f:c0:
73:ec:cc:e2:1f:c8:1d:fc:7a:ee:c0:17:c3:b7:3b:8c:50:b4:
36:9f:ce:be:13:bb:ec:6d:46:d4:6b:de:af:d8:9e:26:65:4b:
76:90:92:68:a1:a0:98:f6:51:f8:8a:f1:01:60:07:11:0d:f2:
b8:6b:cb:51:7c:82:15:2b:98:b4:9d:59:8d:bc:7f:8a:a4:c4:
c3:93:6b:b3:bb:ac:db:4d:4d:8a:a0:18:a3:3d:19:e1:ea:1c:
a0:5c:92:aa:81:9d:df:ef:f2:96:96:41:af:3d:fc:56:eb:95:
03:f2:95:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:29:04 2026 by rpki-client