Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/MzxH_HuEC4Rnx1gRVPy9PHXIXUA.roa
File: MzxH_HuEC4Rnx1gRVPy9PHXIXUA.roa (raw, json)
Hash identifier: jHAUz8aC5n1g2lWxlKJIn1cpib2ziHKB5OGbQfH9jq0=
Subject key identifier: 33:3C:47:FC:7B:84:0B:84:67:C7:58:11:54:FC:BD:3C:75:C8:5D:40
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A13B466D0CE3A141F9F9DFEC4531D3E01D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/MzxH_HuEC4Rnx1gRVPy9PHXIXUA.roa
Signing time: Wed 14 Oct 2026 16:37:13 +0000
ROA not before: Wed 14 Oct 2026 16:37:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 93.119.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:46:6d:0c:e3:a1:41:f9:f9:df:ec:45:31:d3:e0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 14 16:37:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=333c47fc7b840b8467c7581154fcbd3c75c85d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:09:e3:ef:05:d2:a2:e2:ad:d8:4f:12:87:
f6:c4:a1:38:1c:ee:62:9e:da:b0:c1:07:df:28:04:
8c:d2:5f:f3:a3:a1:11:a3:ec:65:9e:44:6b:18:03:
6d:f0:4f:98:13:ad:d5:ef:08:2b:00:ac:e5:92:fb:
79:ab:82:94:d1:e8:8b:f3:23:52:bc:3c:4c:40:ea:
c1:79:1a:a5:2c:7b:f6:fe:62:eb:a1:50:83:c3:bd:
65:25:aa:b6:98:a9:a6:7a:98:d0:29:e9:93:47:78:
ad:06:e6:a1:5e:1c:d0:ea:65:19:ee:8a:83:76:60:
d0:48:4a:15:b2:ab:f3:04:78:cd:9f:f3:0c:fa:49:
d1:a0:2a:1c:02:3b:03:88:e7:43:12:e7:17:72:58:
25:bf:54:38:59:2b:ab:70:e2:36:8a:05:6a:1b:36:
27:fc:6c:d3:65:74:78:99:73:96:eb:09:04:6f:8e:
8e:7d:fd:b3:40:ab:bc:a0:f6:78:ed:a8:cb:46:a1:
01:a2:dc:3b:2f:04:7b:08:75:9a:27:72:a2:40:1e:
d0:57:d5:63:fa:28:6d:95:02:66:9e:6a:ec:ff:85:
27:c9:de:c2:d2:b7:eb:97:04:0f:05:f2:ba:5f:60:
e9:bf:bf:f8:c5:6e:90:55:4c:71:34:c5:e2:d3:53:
8e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3C:47:FC:7B:84:0B:84:67:C7:58:11:54:FC:BD:3C:75:C8:5D:40
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/MzxH_HuEC4Rnx1gRVPy9PHXIXUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:cd:f8:69:a6:48:a2:36:f7:e0:90:41:16:83:2c:78:5a:58:
9c:af:27:4f:05:db:93:3e:60:90:f3:a0:97:ea:8d:c0:0e:d5:
1b:0f:08:48:6c:0e:27:37:4b:9f:20:97:34:1e:43:fd:bb:79:
87:12:6f:ff:48:5e:42:7f:9a:59:da:fd:cc:ba:9c:e8:6a:98:
67:98:c0:e3:99:72:e1:74:c8:54:88:da:eb:f6:ce:a2:e2:99:
1e:ff:3d:db:fc:3d:a4:6f:0e:02:e3:0f:08:72:2b:31:b8:f9:
6b:49:6e:c2:55:aa:4f:1d:a8:9f:cc:6e:79:21:6c:7e:cd:45:
33:7b:00:97:d3:0e:fd:36:d9:e6:df:ad:dc:31:60:f8:3b:44:
ae:a6:7d:f1:ca:6e:3a:f8:a9:22:79:d4:48:e1:f1:01:dd:1f:
e9:93:5b:3a:58:ba:39:9f:f0:ef:5f:04:d4:0d:86:99:79:14:
5a:c8:72:29:fe:52:2e:ed:ea:7e:84:8f:58:72:c0:f8:ef:17:
cf:c0:1e:b6:76:05:f0:87:d6:b2:af:9c:1e:f6:46:75:3f:4c:
76:30:2b:ac:49:90:7f:53:3c:5d:e5:41:20:42:e0:0f:c5:c3:
35:95:12:11:fb:07:81:2a:1b:18:cd:08:34:02:c0:42:4c:7d:
4e:d3:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:42:18 2026 by rpki-client