Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/MgAEj6xrw5hOxCj1KYXygcvBnQg.roa
File: MgAEj6xrw5hOxCj1KYXygcvBnQg.roa (raw, json)
Hash identifier: HSOWW+lCunMWJjlQV4x9/JNzJBELGiix6vcblHUqG34=
Subject key identifier: 32:00:04:8F:AC:6B:C3:98:4E:C4:28:F5:29:85:F2:81:CB:C1:9D:08
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A07F8DE5D1A40B5278B98BBC7925C2D1BE
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/MgAEj6xrw5hOxCj1KYXygcvBnQg.roa
Signing time: Tue 08 Sep 2026 05:46:40 +0000
ROA not before: Tue 08 Sep 2026 05:46:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21840
IP address blocks: 147.90.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:8d:e5:d1:a4:0b:52:78:b9:8b:bc:79:25:c2:d1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 8 05:46:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3200048fac6bc3984ec428f52985f281cbc19d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:bf:b2:a8:6d:cb:ae:62:fe:cd:cd:ac:be:
c5:1d:a6:ec:4c:12:a8:8f:56:1b:9f:c3:ec:b3:29:
76:84:42:29:34:d3:e6:9d:77:22:70:36:22:ef:3f:
32:23:5f:0f:c5:0d:5a:64:a7:d8:16:a9:cf:35:ad:
1c:f0:db:37:06:c2:67:fb:21:cf:c9:85:82:c3:30:
a7:b0:36:ee:9a:12:53:b3:b8:c8:a7:51:c1:ae:31:
33:f9:7b:55:87:23:6e:ce:c8:e0:d6:a8:8e:dd:84:
15:78:aa:b4:5a:26:7e:74:58:fd:2e:89:c8:0a:d1:
d8:88:5d:09:4c:67:ee:d7:73:9f:12:41:d5:45:e6:
cd:a1:91:4a:fc:63:f9:ba:6d:4c:46:c5:2b:e3:b7:
6d:be:cc:08:ad:47:9c:4a:3a:ba:87:40:92:2b:ae:
6a:a4:a6:75:01:60:9b:b5:a2:ee:89:b2:26:47:67:
70:9d:c3:11:fb:b2:f5:1d:67:e4:6c:fc:d4:f7:ef:
1c:4f:42:79:c5:ea:94:1c:34:39:59:68:5d:d8:43:
1b:7d:76:3c:e3:f8:52:25:c5:38:15:2d:55:e4:0c:
8c:d1:a7:80:93:00:25:c9:b9:e3:0f:47:e0:99:a8:
63:d1:5d:31:fd:61:3d:d3:55:ed:1a:81:98:21:43:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:00:04:8F:AC:6B:C3:98:4E:C4:28:F5:29:85:F2:81:CB:C1:9D:08
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/MgAEj6xrw5hOxCj1KYXygcvBnQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.50.0/24
Signature Algorithm: sha256WithRSAEncryption
e8:05:1d:b4:67:02:c1:18:5f:92:79:3e:27:bf:70:9b:29:c6:
05:36:1b:8b:79:9c:36:bb:e5:44:13:f1:b9:45:57:d0:13:db:
9e:92:04:40:5e:29:f6:86:11:61:48:19:84:ed:d4:d9:ba:12:
67:4e:26:99:e5:d1:ba:89:ab:e7:28:7f:c7:af:62:11:b0:c7:
7a:67:63:1e:2c:6b:c3:be:6e:84:34:82:a8:b1:b7:de:39:d6:
84:6e:a4:ef:e3:07:32:44:9d:96:0e:77:af:4e:78:d0:36:62:
40:0d:f2:ec:03:f9:bf:f0:c5:cc:59:05:a9:38:40:55:83:1a:
a2:3b:18:e2:cd:52:4f:dd:54:bb:1d:ff:6e:42:7e:e0:c1:9d:
70:dc:35:79:7c:c1:ee:de:2d:31:eb:e2:91:c4:94:d3:de:98:
ae:54:2f:1a:cc:d3:73:87:c8:e5:1b:70:c5:aa:f3:b0:09:2f:
b9:a0:ff:dc:2a:2d:86:29:48:c6:30:c7:6e:88:09:fc:4e:a3:
11:a1:eb:21:26:c3:22:1d:67:ed:6c:d2:6a:f9:80:fb:a1:09:
c9:ae:c2:74:ce:52:66:23:37:2a:0b:6f:61:74:fc:82:de:7c:
6e:41:f4:cc:5c:61:fc:41:fa:5b:7f:38:d8:9b:9f:52:8e:b0:
81:10:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:14:57 2026 by rpki-client