Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MgyieOZnA2T1vINuBe2zTXIZGS0.roa
File: MgyieOZnA2T1vINuBe2zTXIZGS0.roa (raw, json)
Hash identifier: SZ1NtcmL7XvyNU17FBQ7vlRzGo8z8rapYo1o2J3G/FA=
Subject key identifier: 32:0C:A2:78:E6:67:03:64:F5:BC:83:6E:05:ED:B3:4D:72:19:19:2D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0208823C03E3D6F99396570CA2B04B531
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MgyieOZnA2T1vINuBe2zTXIZGS0.roa
Signing time: Thu 20 Aug 2026 18:56:28 +0000
ROA not before: Thu 20 Aug 2026 18:56:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 104.143.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:88:23:c0:3e:3d:6f:99:39:65:70:ca:2b:04:b5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 20 18:56:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=320ca278e6670364f5bc836e05edb34d7219192d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:95:50:ba:98:3f:dc:25:a3:64:73:d2:da:
a4:14:c0:70:bd:dc:54:b2:2d:ac:c1:80:47:28:b0:
93:c9:57:14:d5:93:57:b7:38:19:4a:b9:f6:eb:8c:
0a:9e:90:2f:6f:db:b3:91:b2:bc:83:27:b4:d5:ed:
2a:45:b6:79:12:44:6e:21:2d:c3:2b:66:55:71:64:
2b:ca:4d:3d:40:81:51:98:cd:de:be:e2:2a:34:d6:
bf:5b:8c:fb:06:20:87:87:f7:00:e1:6d:d3:db:9d:
42:8b:49:ed:51:8d:64:b9:51:0a:9e:ef:d5:90:bd:
14:38:1e:64:d4:01:14:17:73:fb:1c:68:c2:e3:83:
21:36:45:d0:a7:e4:57:d7:12:9b:ae:7e:89:e3:78:
3e:a8:77:92:49:c0:44:34:15:60:ac:0b:d8:2c:33:
26:95:3c:16:33:e9:97:a2:25:20:e6:fe:df:39:63:
35:4b:e6:b8:51:74:0d:a8:b0:18:d0:df:47:eb:4c:
0c:8f:3e:ef:14:be:f4:2a:22:0e:f7:a8:5c:c6:cb:
dc:33:e5:7f:bb:a2:56:dd:49:1c:f1:8b:ee:d9:8d:
db:60:b1:3f:ba:84:ca:dd:da:2d:1a:50:ad:55:ab:
34:40:e4:17:cd:b7:24:54:54:cb:f4:7b:25:ca:71:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0C:A2:78:E6:67:03:64:F5:BC:83:6E:05:ED:B3:4D:72:19:19:2D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MgyieOZnA2T1vINuBe2zTXIZGS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.143.212.0/22
Signature Algorithm: sha256WithRSAEncryption
05:fa:02:0c:c5:70:ee:93:cd:1c:e8:af:5b:4f:37:fa:d7:9c:
64:26:ef:14:58:cc:25:dc:16:e7:e8:cf:44:e4:b1:3a:39:e5:
4e:9a:77:12:96:53:84:f4:e4:fa:c5:dd:70:0f:45:25:b8:ba:
80:5a:9f:21:86:27:de:6d:4f:98:64:66:5b:f1:19:87:80:69:
c1:07:7c:2c:84:ac:b1:67:bd:09:69:05:6f:50:0c:cf:11:3d:
46:16:d9:d5:cc:e8:95:f5:24:f2:4d:b4:98:a4:6b:cc:b7:15:
f5:0f:3e:34:18:a8:cc:ed:4c:41:a3:ef:8b:e2:0a:4c:23:ed:
75:1c:79:ae:22:80:19:a5:14:eb:20:f4:2c:bc:cd:3d:73:be:
57:23:50:f7:a2:6f:7d:af:a4:f0:c1:53:d0:2f:b0:20:b5:45:
77:50:b7:51:8e:29:4a:0f:a3:c7:c8:0e:77:de:f2:e4:a6:79:
74:70:53:5f:b5:c4:ad:9d:e2:a1:48:96:85:c5:73:98:ff:90:
1b:ec:ba:e5:cb:b0:e7:74:db:fe:94:9a:a5:5c:d8:93:20:7f:
dd:b4:6d:b8:32:82:6a:c7:76:67:13:60:5d:71:16:a8:5d:af:
9e:4d:5c:d1:5b:44:b1:5b:b8:5b:bd:01:8e:80:8e:28:21:de:
6e:1b:95:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:43 2026 by rpki-client