Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/MG8nLQn6FF2YIVEJshTINKyMAkA.roa
File: MG8nLQn6FF2YIVEJshTINKyMAkA.roa (raw, json)
Hash identifier: ZMHaCqVIyIzXCZhJgr+ievneK9umE5mdfmEe8ABbVuE=
Subject key identifier: 30:6F:27:2D:09:FA:14:5D:98:21:51:09:B2:14:C8:34:AC:8C:02:40
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 019E21F184627E639F25203041CA43F4882E
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/MG8nLQn6FF2YIVEJshTINKyMAkA.roa
Signing time: Wed 13 May 2026 15:25:36 +0000
ROA not before: Wed 13 May 2026 15:25:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209483
IP address blocks: 171.22.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:f1:84:62:7e:63:9f:25:20:30:41:ca:43:f4:88:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: May 13 15:25:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=306f272d09fa145d98215109b214c834ac8c0240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:f1:e3:bc:73:3e:cc:89:b6:ab:c7:12:e8:
00:23:56:d2:eb:fa:12:04:4d:63:45:c9:45:90:49:
6e:91:53:e4:80:86:cd:af:28:b1:46:96:fc:2e:6c:
b7:53:1e:85:22:04:2a:bc:ad:bd:8d:fb:59:e6:be:
0c:b8:5d:90:ab:cc:5c:78:61:86:95:5b:8a:3b:31:
5f:40:89:4f:92:59:bd:39:cc:7a:eb:85:7c:5a:73:
fa:89:68:cf:4a:0a:40:6f:ea:b4:f1:55:10:32:fe:
2a:12:61:e4:5e:9e:61:c4:32:f7:f8:49:78:de:60:
34:d4:f7:73:6d:d8:f5:88:66:bd:fd:8d:03:12:9f:
4d:fa:7f:9c:22:04:d5:cc:1c:52:50:48:f2:40:08:
4e:82:12:28:04:f1:41:65:d9:ab:01:0e:26:f2:a9:
3a:68:a5:d7:dc:1b:0e:a2:d8:b5:b3:bf:c0:99:f9:
93:53:7e:b2:a5:3e:84:92:25:4c:8b:e2:0b:80:78:
6c:45:81:4c:f3:a7:d8:24:ee:6f:a1:47:a6:66:76:
e3:c2:1d:9d:65:8f:ad:3f:76:dd:48:42:08:de:a0:
7e:fd:e2:36:16:39:82:42:03:e4:b8:88:df:b1:11:
eb:cc:37:a7:4e:0a:6d:a4:2c:09:cb:da:53:13:13:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6F:27:2D:09:FA:14:5D:98:21:51:09:B2:14:C8:34:AC:8C:02:40
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/MG8nLQn6FF2YIVEJshTINKyMAkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.156.0/22
Signature Algorithm: sha256WithRSAEncryption
08:fe:df:a6:c8:0c:97:a4:0a:40:37:95:ee:dc:d1:c8:6c:7b:
99:f7:1c:f4:1f:c4:39:d0:ae:67:40:d3:14:ea:7c:99:67:b4:
28:7c:5e:77:09:0c:5f:10:3b:96:1c:9b:57:b7:13:f1:f0:1d:
e1:6f:3e:07:c7:64:10:6c:8a:8d:e9:48:21:db:76:ba:07:c4:
46:11:55:6c:ef:7c:2a:d7:2e:3c:81:7c:ba:4c:eb:d4:c2:37:
05:ae:ed:c6:59:1a:e0:2b:a5:55:df:fd:00:78:1f:79:5d:12:
44:d4:ad:2d:bb:dc:fe:79:ef:6b:09:f3:49:45:e4:72:85:a0:
75:14:d0:2d:43:d5:48:ea:0c:50:b8:a2:90:4e:18:84:d5:20:
3d:8c:93:2b:1b:bf:77:eb:5e:96:29:0a:c4:a0:cd:65:67:4d:
4d:8d:2d:72:a0:02:c2:1c:0d:0f:1e:65:a5:2d:08:8c:de:56:
b8:e3:bf:be:50:c3:b0:a2:30:9a:2e:b7:6e:2c:f8:5c:57:6f:
82:d3:42:4e:59:c7:9e:42:48:6f:1b:83:3f:87:9e:ec:dc:df:
c8:64:38:74:eb:90:60:35:9a:7f:72:7b:6b:08:c9:65:94:c8:
3d:f3:8f:cd:57:5a:4f:43:70:51:0a:4c:ba:38:22:8f:b7:10:
a8:e6:75:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:52:55 2026 by rpki-client