Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/MjyhcIDP5Cuj0z7nBld4_C2DGvQ.roa
File: MjyhcIDP5Cuj0z7nBld4_C2DGvQ.roa (raw, json)
Hash identifier: 4k0Ys4b3Bg2O9bxcwTlvra4F9uJDHWsWf5y4VFTdqqU=
Subject key identifier: 32:3C:A1:70:80:CF:E4:2B:A3:D3:3E:E7:06:57:78:FC:2D:83:1A:F4
Certificate issuer: /CN=1109cd97f8daf8e28e9e363fa2277147b88c8fd2
Certificate serial: 019F22711339253E013A2789EF2188F29C16
Authority key identifier: 11:09:CD:97:F8:DA:F8:E2:8E:9E:36:3F:A2:27:71:47:B8:8C:8F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQnNl_ja-OKOnjY_oidxR7iMj9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/MjyhcIDP5Cuj0z7nBld4_C2DGvQ.roa
Signing time: Thu 02 Jul 2026 10:47:43 +0000
ROA not before: Thu 02 Jul 2026 10:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200410
IP address blocks: 91.103.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQnNl_ja-OKOnjY_oidxR7iMj9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:71:13:39:25:3e:01:3a:27:89:ef:21:88:f2:9c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1109cd97f8daf8e28e9e363fa2277147b88c8fd2
Validity
Not Before: Jul 2 10:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=323ca17080cfe42ba3d33ee7065778fc2d831af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:bb:c6:92:ee:96:27:6f:5a:4c:34:2e:f5:
aa:18:f0:b9:2f:7a:16:02:96:20:d8:6e:43:14:04:
a8:68:71:b9:94:34:26:99:df:ca:f2:1e:b1:32:ce:
b8:a0:ad:64:10:16:21:09:3b:b9:03:20:1e:d1:11:
e8:02:d7:3f:77:03:88:15:0b:63:f8:6d:07:a7:29:
22:88:d4:05:cd:4a:07:79:39:05:a7:17:55:5a:29:
0f:c6:e5:d7:a4:74:70:db:dc:15:17:db:61:31:d6:
7f:58:17:af:5e:d2:12:62:6d:70:6c:df:cf:80:47:
7f:d8:21:6e:64:82:49:66:08:61:a9:71:b5:88:3a:
c9:6d:b6:7f:5c:31:c1:12:e6:f9:4c:38:f7:46:9a:
c2:12:18:8e:f8:93:05:98:fe:f0:f7:39:fe:02:00:
f2:30:29:e9:a4:31:bd:85:a1:9f:2f:bf:3b:fd:95:
4e:90:97:c7:ae:84:f8:e7:cb:48:13:b8:37:3b:5d:
4d:c5:de:50:e0:e6:3c:4d:0b:f8:6f:8f:1b:ac:82:
0e:3d:8a:9c:42:c6:8b:2d:9a:b4:34:ad:b5:f6:dc:
66:d0:b6:20:73:25:32:88:eb:2d:fc:cf:2a:b9:5c:
96:11:fa:d8:4d:8d:9f:24:43:8a:96:a7:46:46:39:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3C:A1:70:80:CF:E4:2B:A3:D3:3E:E7:06:57:78:FC:2D:83:1A:F4
X509v3 Authority Key Identifier:
keyid:11:09:CD:97:F8:DA:F8:E2:8E:9E:36:3F:A2:27:71:47:B8:8C:8F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQnNl_ja-OKOnjY_oidxR7iMj9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/MjyhcIDP5Cuj0z7nBld4_C2DGvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.138.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c6:cd:ae:7d:04:f3:0a:25:f7:d6:5b:b0:8c:f5:68:78:a3:
7b:fe:d6:07:29:59:81:55:77:81:40:75:22:b6:e0:cf:04:bd:
05:99:d2:74:86:e9:f6:c0:6d:cc:10:38:98:a1:89:12:6f:cc:
dd:b4:ea:a3:fd:0d:d3:a9:b3:a6:79:7c:cb:b2:8d:64:bd:3b:
50:74:1b:a8:6d:c4:17:da:9c:b8:6e:45:83:46:d2:bf:57:8d:
8a:01:2a:99:d2:be:c2:76:08:44:4d:8e:6f:12:ba:1e:65:56:
70:b5:38:97:f7:0c:8f:ba:35:cf:b6:c2:64:dc:84:b7:d8:bb:
65:6d:20:97:de:a7:19:da:f3:59:1b:2f:85:6c:7b:43:ee:40:
d8:d0:d3:74:7b:ff:90:a8:3a:75:ec:4d:a7:04:a6:1e:a8:18:
6d:df:0a:f6:91:74:dc:8e:a6:28:c5:5d:b0:da:bd:09:a7:2e:
0d:5d:7a:a5:f0:3d:13:c9:02:b1:9c:33:4a:d2:28:d3:f8:b5:
88:37:3d:55:4c:60:36:5f:25:e7:32:b1:5f:9d:e2:64:ea:f0:
e6:39:b8:81:9d:04:08:06:9f:40:8e:33:fc:6a:74:cb:27:ff:
e8:77:33:61:2f:4b:93:10:59:dd:b7:e1:b4:9e:18:40:2a:b2:
6d:34:d7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:10:44 2026 by rpki-client