Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/mgz999836P_dFSI6qSezWUaAkyY.roa
File: mgz999836P_dFSI6qSezWUaAkyY.roa (raw, json)
Hash identifier: zI6mWUBDAi8QqaY3DJvGDg/o4D+XEGIiFJk9IKHzEFg=
Subject key identifier: 9A:0C:FD:F7:DF:37:E8:FF:DD:15:22:3A:A9:27:B3:59:46:80:93:26
Certificate issuer: /CN=da9239e09ace0c6f1ff667783c15797be2412769
Certificate serial: 01992536F3A5E6E32C5500E99931088B8C01
Authority key identifier: DA:92:39:E0:9A:CE:0C:6F:1F:F6:67:78:3C:15:79:7B:E2:41:27:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pI54JrODG8f9md4PBV5e-JBJ2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/mgz999836P_dFSI6qSezWUaAkyY.roa
Signing time: Sun 07 Sep 2025 17:26:22 +0000
ROA not before: Sun 07 Sep 2025 17:26:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213644
IP address blocks: 194.145.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/2pI54JrODG8f9md4PBV5e-JBJ2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/2pI54JrODG8f9md4PBV5e-JBJ2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pI54JrODG8f9md4PBV5e-JBJ2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:25:36:f3:a5:e6:e3:2c:55:00:e9:99:31:08:8b:8c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9239e09ace0c6f1ff667783c15797be2412769
Validity
Not Before: Sep 7 17:26:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a0cfdf7df37e8ffdd15223aa927b35946809326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cf:c7:3b:79:75:30:c3:9d:ea:d5:3e:d1:fe:
63:23:f0:a1:08:c7:56:a2:42:99:bc:ce:20:58:ec:
8f:80:76:b6:88:4e:d1:f3:4c:cd:cc:b4:25:3e:6d:
0e:0a:b3:78:82:c4:ab:63:83:f3:f9:32:b0:c9:36:
06:92:ea:63:bd:cf:6d:19:48:84:7c:c5:9d:51:0d:
1d:1e:53:96:85:c5:9b:01:e9:5b:50:fb:6f:9a:59:
a3:da:5b:56:b9:b3:21:4b:8c:a4:ee:13:64:de:cf:
cf:2c:90:72:e5:58:aa:da:7b:4b:c9:4e:e3:97:be:
b8:4d:f4:b6:5e:94:08:de:cd:c1:71:32:42:d6:0d:
b4:a8:57:5d:d8:b1:61:34:be:04:4a:99:4a:2e:f2:
26:b0:c3:7c:f7:c8:41:5c:84:43:36:33:c6:87:a7:
9b:df:bb:a1:59:00:9b:b3:4f:b7:b5:2a:15:1a:ac:
dd:64:6a:ba:cb:0e:61:4f:eb:22:cf:fa:05:7b:3d:
24:3b:eb:45:90:8e:81:12:20:17:70:ed:32:cc:08:
e9:4b:58:7b:d7:9b:cf:ce:ea:27:67:f6:07:d3:01:
6d:d1:ad:fc:28:68:71:3c:c7:4f:eb:80:ab:8d:20:
77:49:04:86:d2:66:7e:1f:6b:b9:49:72:e8:f8:90:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0C:FD:F7:DF:37:E8:FF:DD:15:22:3A:A9:27:B3:59:46:80:93:26
X509v3 Authority Key Identifier:
keyid:DA:92:39:E0:9A:CE:0C:6F:1F:F6:67:78:3C:15:79:7B:E2:41:27:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pI54JrODG8f9md4PBV5e-JBJ2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/mgz999836P_dFSI6qSezWUaAkyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/322803-eeec-4ef1-8984-bdeac911ff34/1/2pI54JrODG8f9md4PBV5e-JBJ2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:81:68:36:7e:55:23:1c:87:ff:fe:f4:95:44:80:58:fe:36:
fc:89:ae:fb:6e:b8:a8:35:6d:1a:27:b1:2e:77:9e:07:d6:c0:
be:ac:8b:17:ea:92:94:10:27:35:8a:89:8c:fc:cb:6e:11:e1:
25:e1:a0:85:b1:c8:81:44:17:df:79:b8:3a:c1:c2:bf:60:92:
a0:36:8b:2a:87:68:73:34:bc:d4:a9:ec:e4:43:65:e0:eb:d4:
0f:29:20:e8:1b:ec:a9:6f:f3:b9:78:a8:27:c7:6c:91:10:80:
68:b6:ef:d6:87:5c:fd:64:31:d8:89:ed:ab:10:a7:81:ad:ad:
e4:a4:1d:89:45:44:c4:cc:b8:04:31:b1:21:b2:99:29:62:cc:
74:d5:93:01:1f:26:dc:b9:6b:af:9e:d4:fc:c8:23:18:09:99:
0a:64:93:14:b9:5c:5c:e6:0e:90:df:ac:6d:f0:69:8f:dc:d0:
2a:b6:b3:05:06:95:fd:9b:b8:b6:54:9f:e3:48:68:35:14:f6:
97:9e:21:80:03:ca:3a:09:79:58:ca:7c:8f:e7:da:4a:64:1b:
de:c8:de:aa:05:f0:f4:89:24:79:4d:71:3e:32:b2:57:d4:0c:
83:66:46:ba:c1:49:cd:0b:0a:87:57:75:65:2e:ba:e8:d4:6b:
c4:04:58:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZklNvOl5uMsVQDpmTEIi4wBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOTIzOWUwOWFjZTBjNmYxZmY2Njc3ODNjMTU3OTdiZTI0
MTI3NjkwHhcNMjUwOTA3MTcyNjIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTBjZmRmN2RmMzdlOGZmZGQxNTIyM2FhOTI3YjM1OTQ2ODA5MzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6c/HO3l1MMOd6tU+0f5jI/ChCMdW
okKZvM4gWOyPgHa2iE7R80zNzLQlPm0OCrN4gsSrY4Pz+TKwyTYGkupjvc9tGUiE
fMWdUQ0dHlOWhcWbAelbUPtvmlmj2ltWubMhS4yk7hNk3s/PLJBy5Viq2ntLyU7j
l764TfS2XpQI3s3BcTJC1g20qFdd2LFhNL4ESplKLvImsMN898hBXIRDNjPGh6eb
37uhWQCbs0+3tSoVGqzdZGq6yw5hT+siz/oFez0kO+tFkI6BEiAXcO0yzAjpS1h7
15vPzuonZ/YH0wFt0a38KGhxPMdP64CrjSB3SQSG0mZ+H2u5SXLo+JCtuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJoM/fffN+j/3RUiOqkns1lGgJMmMB8GA1UdIwQY
MBaAFNqSOeCazgxvH/ZneDwVeXviQSdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnBJNTRKck9ERzhmOW1kNFBCVjVlLUpCSjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zMjI4MDMtZWVlYy00ZWYxLTg5ODQt
YmRlYWM5MTFmZjM0LzEvbWd6OTk5ODM2UF9kRlNJNnFTZXpXVWFBa3lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zMjI4MDMtZWVlYy00ZWYxLTg5ODQtYmRlYWM5MTFmZjM0
LzEvMnBJNTRKck9ERzhmOW1kNFBCVjVlLUpCSjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpF3MA0G
CSqGSIb3DQEBCwUAA4IBAQBrgWg2flUjHIf//vSVRIBY/jb8ia77brioNW0aJ7Eu
d54H1sC+rIsX6pKUECc1iomM/MtuEeEl4aCFsciBRBffebg6wcK/YJKgNosqh2hz
NLzUqezkQ2Xg69QPKSDoG+ypb/O5eKgnx2yREIBotu/Wh1z9ZDHYie2rEKeBra3k
pB2JRUTEzLgEMbEhspkpYsx01ZMBHybcuWuvntT8yCMYCZkKZJMUuVxc5g6Q36xt
8GmP3NAqtrMFBpX9m7i2VJ/jSGg1FPaXniGAA8o6CXlYynyP59pKZBveyN6qBfD0
iSR5TXE+MrJX1AyDZka6wUnNCwqHV3VlLrro1GvEBFh+
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:38:40 2025 by rpki-client