Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/MJmEGSwkNgc6tWAjFHwsQalK-pc.roa
File: MJmEGSwkNgc6tWAjFHwsQalK-pc.roa (raw, json)
Hash identifier: zGylhLzO0uiWa1ShFqQYwTVVj/623FBQDk35JT6LjUg=
Subject key identifier: 30:99:84:19:2C:24:36:07:3A:B5:60:23:14:7C:2C:41:A9:4A:FA:97
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 01A00C0A2A7EDEDD495D39CB4FB8387BB28D
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/MJmEGSwkNgc6tWAjFHwsQalK-pc.roa
Signing time: Sun 16 Aug 2026 19:26:27 +0000
ROA not before: Sun 16 Aug 2026 19:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29484
IP address blocks: 134.147.0.0/16 maxlen: 16
185.73.20.0/22 maxlen: 22
185.73.20.0/23 maxlen: 23
185.73.22.0/24 maxlen: 24
185.73.22.0/25 maxlen: 25
185.73.22.128/25 maxlen: 25
185.73.23.0/24 maxlen: 24
185.73.23.0/25 maxlen: 25
185.73.23.128/25 maxlen: 25
2a05:3e00::/29 maxlen: 29
2a05:3e00::/30 maxlen: 30
2a05:3e04::/32 maxlen: 32
2a05:3e05::/32 maxlen: 32
2a05:3e06::/31 maxlen: 31
2a05:3e07:801::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0c:0a:2a:7e:de:dd:49:5d:39:cb:4f:b8:38:7b:b2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Aug 16 19:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=309984192c2436073ab56023147c2c41a94afa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:3d:39:da:f7:35:9d:25:6f:0a:41:b1:1e:
98:d3:e0:57:fc:9f:0a:bc:b0:73:9b:43:f2:33:cf:
d5:fc:3a:52:8d:2a:b0:bf:4a:5e:7b:bf:18:21:ab:
66:eb:bd:71:e5:7c:5c:d5:4f:45:be:82:b4:52:78:
fc:93:1e:14:2e:75:4d:ca:3d:cd:25:e6:3b:83:f5:
a1:df:63:06:00:eb:71:5d:aa:d2:00:6b:b7:25:5a:
4b:0f:d6:44:15:f6:aa:a9:96:28:2a:62:55:3d:83:
52:29:fe:9c:03:35:95:d0:79:2a:4e:7c:58:80:80:
98:ef:0f:b7:85:74:45:e8:3e:7a:8f:89:11:76:5f:
a9:df:59:e5:86:57:8a:22:f4:dd:08:be:5a:07:8e:
72:c7:45:84:0b:37:de:ee:d3:1b:58:64:88:2d:62:
12:8b:16:38:b8:f0:bb:58:17:bb:f1:bd:f5:0f:6e:
80:21:4d:48:20:88:eb:22:d5:46:8b:7f:5f:4a:0e:
28:2e:16:54:fd:1c:41:97:07:e0:e9:89:69:31:5f:
64:07:36:b5:f7:93:91:55:8a:ad:f3:c3:e4:ea:c1:
50:ad:9a:e2:0f:34:60:8e:50:26:8e:92:ca:db:98:
78:b9:92:14:2b:4e:0d:7f:a3:38:c3:3a:cb:c5:86:
3e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:99:84:19:2C:24:36:07:3A:B5:60:23:14:7C:2C:41:A9:4A:FA:97
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/MJmEGSwkNgc6tWAjFHwsQalK-pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.147.0.0/16
185.73.20.0/22
IPv6:
2a05:3e00::/29
Signature Algorithm: sha256WithRSAEncryption
04:61:62:27:42:f1:95:79:08:50:44:41:ae:fa:c5:c2:5d:cb:
95:a7:79:59:b4:44:1a:6e:1f:b0:be:59:31:3b:9e:34:f3:69:
54:cf:17:81:2d:75:2d:dc:ea:a6:ed:62:2d:b3:87:a2:95:71:
63:8e:e3:fb:3d:ff:16:15:4a:24:0c:29:7b:a5:c3:09:61:e9:
d8:98:b3:61:26:87:36:66:20:7c:d8:78:d5:58:af:e0:e6:6d:
d8:02:51:48:92:78:5e:b2:a2:ba:35:fb:c2:bb:26:ab:36:e2:
22:da:a1:f7:4d:b1:23:33:fd:14:23:48:fa:d8:ca:b5:2d:c1:
48:9d:06:30:4c:1b:9e:73:6f:ca:11:19:a5:13:29:3c:54:77:
84:a5:e7:ca:31:d0:ef:30:ca:8e:5a:50:e4:78:73:43:45:91:
ef:1e:e6:c4:84:35:aa:41:bd:03:e3:a7:fe:2f:47:39:50:7d:
b8:40:35:43:31:dd:e4:9f:df:e4:63:1a:09:d0:80:46:23:96:
e0:ee:32:29:fc:dc:72:5e:69:9a:58:6c:94:7f:76:54:8a:f5:
1d:4f:4d:27:de:4c:a9:d6:12:7b:c0:41:e4:18:88:f8:b4:e5:
35:c2:96:d2:06:57:76:f6:10:35:76:2d:48:36:58:35:9a:fe:
04:80:b9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:29:42 2026 by rpki-client