Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/MtHNZXAaTas0ySawjrN_DmEIiUM.roa
File: MtHNZXAaTas0ySawjrN_DmEIiUM.roa (raw, json)
Hash identifier: 1CQd2T6qXy336zyHG9AKsVj3eTOz8dJAdGkCgl9DQ9A=
Subject key identifier: 32:D1:CD:65:70:1A:4D:AB:34:C9:26:B0:8E:B3:7F:0E:61:08:89:43
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EDB68F2E208EB2C1298FF27EC30AFC642
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/MtHNZXAaTas0ySawjrN_DmEIiUM.roa
Signing time: Thu 18 Jun 2026 15:45:48 +0000
ROA not before: Thu 18 Jun 2026 15:45:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17404
IP address blocks: 194.77.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:68:f2:e2:08:eb:2c:12:98:ff:27:ec:30:af:c6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 18 15:45:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32d1cd65701a4dab34c926b08eb37f0e61088943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:a2:fd:d4:ce:05:4e:f9:7a:6c:9f:c5:be:
e1:fa:c1:bd:1c:56:64:ce:5c:dc:93:4a:7a:79:a9:
18:6f:d4:2a:cc:66:40:cd:31:6e:91:3d:e1:fd:10:
17:15:7b:aa:75:e4:81:9d:54:82:be:cd:7c:05:10:
0f:e7:bb:0d:8b:bf:60:c6:c7:5e:c8:e2:a8:4a:3f:
78:9d:d8:79:c0:58:5a:67:6f:3e:ae:49:e3:9c:f0:
11:84:a8:d8:2d:cd:21:d6:44:22:7c:06:a0:97:a6:
35:50:c1:ed:9c:25:82:c5:b0:9a:ab:67:1d:c8:47:
f5:c9:ef:df:59:26:a1:b7:9f:2f:81:f9:d0:1e:8e:
6d:a7:bd:d6:44:c0:29:63:3a:99:8f:aa:49:20:9c:
a4:fe:7f:8c:54:98:b7:19:ab:ce:0c:47:e0:bf:ee:
c0:bd:92:8e:23:53:87:56:76:89:77:0d:a1:b1:b7:
83:60:4b:03:36:35:8a:3f:d4:0a:73:00:96:00:35:
10:b3:99:ed:f3:34:47:5b:9a:12:ed:3a:77:3e:ab:
ba:fa:e6:fb:df:aa:57:7e:76:d3:12:c4:d3:e4:29:
cc:f8:67:d7:34:f7:b1:3d:d8:a9:45:b1:4c:98:74:
a8:5c:4d:1a:1b:f5:56:74:b9:13:71:36:78:55:eb:
2d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D1:CD:65:70:1A:4D:AB:34:C9:26:B0:8E:B3:7F:0E:61:08:89:43
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/MtHNZXAaTas0ySawjrN_DmEIiUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.56.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:9f:24:fe:e3:c6:d2:b9:d9:34:d4:80:c8:6e:cc:f2:8a:f6:
c1:94:ab:f0:09:47:36:b5:44:ce:4c:55:27:2e:15:85:de:50:
17:8c:8d:07:cf:0c:37:c4:bb:88:27:85:9e:30:76:95:fd:ff:
c2:ca:cd:b4:81:fb:86:32:86:d5:62:52:37:11:fa:dc:cf:82:
27:07:3f:f5:90:3e:43:08:2b:f2:8a:7c:b3:a2:c0:b5:67:22:
e7:f8:e3:4b:b2:c2:30:a1:43:55:cf:da:dc:bc:2b:d5:3c:30:
77:68:07:30:b4:1c:32:a6:ed:70:f8:ad:a6:de:2d:c4:e0:62:
5c:87:ec:ff:d2:fc:c2:2d:e5:4e:92:5d:8b:0c:09:38:2f:f5:
77:19:db:dc:d4:f4:dd:29:88:15:c8:5d:85:e6:15:18:85:f8:
78:c4:72:16:39:29:46:66:5d:12:11:8e:34:f6:45:6d:1d:fe:
01:8c:ba:1f:dd:bb:e6:83:fa:11:17:66:af:7f:71:54:5e:03:
83:53:a1:09:4e:7a:15:f5:ac:8e:e6:f5:e7:91:87:12:fb:0f:
6e:01:f9:39:02:cc:74:51:b1:5e:36:b7:32:9f:78:ff:53:d8:
41:4a:aa:8c:c6:65:ed:20:fd:8d:a1:05:6d:9d:ee:05:46:dd:
54:f2:28:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 06:12:32 2026 by rpki-client