Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/MJvlTgHoG92QdFvf2k_X6Wb43K0.roa
File: MJvlTgHoG92QdFvf2k_X6Wb43K0.roa (raw, json)
Hash identifier: huZaS1m4BKTt9lX0ik1oeLI2WTBDykmxxkVQDzL+ecU=
Subject key identifier: 30:9B:E5:4E:01:E8:1B:DD:90:74:5B:DF:DA:4F:D7:E9:66:F8:DC:AD
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A06E4D62F0C8E4D05A24B4C5895F1EB333
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/MJvlTgHoG92QdFvf2k_X6Wb43K0.roa
Signing time: Fri 04 Sep 2026 21:22:40 +0000
ROA not before: Fri 04 Sep 2026 21:22:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199479
IP address blocks: 91.210.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:4d:62:f0:c8:e4:d0:5a:24:b4:c5:89:5f:1e:b3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 4 21:22:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=309be54e01e81bdd90745bdfda4fd7e966f8dcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:78:6f:4d:05:d7:2b:3d:67:b8:1a:59:fd:
53:5e:67:6e:0d:af:42:07:88:95:0d:e1:7a:bf:39:
a0:62:fe:8e:18:ca:9d:2b:82:8b:79:56:89:16:a1:
dc:a4:28:84:8f:82:20:b7:d5:cf:dd:9d:39:45:f4:
08:45:15:0c:86:71:f2:40:5e:de:40:db:1a:af:0c:
4d:b7:8a:43:bf:d6:28:d3:ad:90:19:73:56:ef:fa:
82:7b:29:30:7e:85:40:b1:4f:3a:bf:0a:69:f3:72:
cf:20:c0:42:f9:69:c1:54:02:4b:c0:21:fd:69:32:
11:03:3e:b2:8f:41:14:9e:08:4f:30:6d:92:d5:99:
03:ae:cd:cd:41:ed:bd:a6:55:c4:5f:43:ff:ee:d9:
f9:b6:9c:83:dd:e8:0b:e9:09:33:0e:ee:72:9a:3f:
61:2d:61:36:17:9f:09:5f:99:a6:b6:a0:84:cf:4d:
8b:64:cb:c0:66:c0:1d:c2:10:6e:1c:33:0e:19:04:
f0:96:8e:4e:18:06:68:2b:99:07:cc:10:61:da:5d:
8a:01:61:03:68:b6:16:64:8b:50:4e:2b:9e:3e:ff:
07:b2:db:e1:7c:fa:b5:d7:28:6e:79:a5:4a:2a:c4:
93:b0:a9:22:17:6c:f0:89:44:b4:a4:20:87:3d:d0:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9B:E5:4E:01:E8:1B:DD:90:74:5B:DF:DA:4F:D7:E9:66:F8:DC:AD
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/MJvlTgHoG92QdFvf2k_X6Wb43K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.146.0/24
Signature Algorithm: sha256WithRSAEncryption
20:cc:8c:8c:2e:f6:13:ed:3b:d7:6f:6d:c2:7f:6e:d2:3b:e8:
c2:b0:66:36:a6:6b:db:51:68:5f:51:98:2e:d4:1c:00:1b:25:
70:70:05:af:49:a9:77:5f:fd:a0:8f:e1:33:ec:a6:55:fa:f3:
5d:de:c6:1a:84:a4:b9:8a:37:de:dc:6b:8a:71:9c:29:f5:13:
e5:a3:32:80:d4:90:3d:d9:48:bc:fb:dc:98:24:e4:c7:58:51:
1b:34:80:86:f7:21:88:d2:7e:1f:55:65:1d:ae:5a:87:3c:90:
ae:45:62:13:af:22:51:33:41:c2:3c:56:57:e2:14:e8:96:56:
a8:c7:c7:23:6c:9c:38:0b:d7:7c:c2:78:95:ff:5f:d7:d3:38:
1a:29:12:8c:6e:b1:8f:10:72:f2:f0:d6:d6:0c:cd:23:1f:7e:
5a:e5:ce:c1:b4:fc:74:67:d2:72:67:03:49:28:d1:91:43:06:
23:b8:3c:3b:2e:1d:26:c5:43:f2:27:8b:7c:e0:44:35:64:32:
68:3a:72:fc:90:d3:47:6a:04:dd:a1:6e:6f:f1:2b:c9:90:6b:
64:c0:53:ea:8d:cc:8e:d7:a0:71:c0:ec:cb:60:b3:79:aa:34:
61:10:d7:37:7a:07:9f:11:93:53:9e:9b:3a:b7:72:b3:9f:9c:
8c:28:2c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:40:22 2026 by rpki-client