Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MGF8jUkDxAiuljiEOFJV2MHOxgU.roa
File: MGF8jUkDxAiuljiEOFJV2MHOxgU.roa (raw, json)
Hash identifier: +H3u8va6rghrOIrcAAF55a+qrKiiNJC0n8uBqyexw/o=
Subject key identifier: 30:61:7C:8D:49:03:C4:08:AE:96:38:84:38:52:55:D8:C1:CE:C6:05
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F047C8615C2EE35D8B47E49976931FB4B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MGF8jUkDxAiuljiEOFJV2MHOxgU.roa
Signing time: Fri 26 Jun 2026 15:11:37 +0000
ROA not before: Fri 26 Jun 2026 15:11:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 87.83.80.0/22 maxlen: 24
212.74.16.0/22 maxlen: 24
212.135.24.0/22 maxlen: 22
212.135.64.0/22 maxlen: 24
212.135.104.0/22 maxlen: 22
212.212.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:7c:86:15:c2:ee:35:d8:b4:7e:49:97:69:31:fb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 26 15:11:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30617c8d4903c408ae963884385255d8c1cec605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:2f:e8:5c:a1:43:60:12:40:e2:b8:a7:8f:
90:76:a5:73:2c:21:c2:af:4a:8f:35:af:63:4e:3e:
37:8a:f5:56:d6:42:b4:21:e7:c1:7b:3f:b6:13:0a:
e7:a8:3d:01:0a:66:4b:cd:15:ca:a6:ee:66:aa:3b:
d9:91:d1:82:5e:4b:4a:86:cf:a5:79:d4:bf:d2:1c:
8b:0c:b2:01:0a:7d:58:50:fd:05:52:c6:94:4f:e2:
0f:6f:d9:6c:b3:43:ec:24:2a:52:ae:56:5c:e0:9d:
ac:3d:50:76:16:98:9b:af:4b:13:44:06:3d:74:2a:
d5:7d:35:5c:45:f9:eb:56:2b:5d:cd:09:a6:7f:ea:
db:d4:8b:e8:31:17:43:56:b7:f8:b6:2f:72:9a:9c:
a3:38:a2:02:7c:6c:93:63:27:2a:d9:6d:37:94:25:
8d:98:fe:6a:6b:ee:4c:67:55:7f:c3:e6:05:ec:51:
56:9b:f1:b4:f9:9a:e5:35:ad:16:b6:d7:d9:4d:3f:
21:83:32:f6:15:ce:f1:fa:df:bc:2e:e1:b9:3e:b2:
b9:1a:ba:c3:f0:1c:0f:d1:44:d5:4a:d0:76:60:45:
52:0e:63:09:e5:3d:f6:b8:11:96:fb:ea:3a:5b:65:
66:ef:93:c8:54:64:a7:08:0c:b9:69:da:89:7f:04:
85:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:61:7C:8D:49:03:C4:08:AE:96:38:84:38:52:55:D8:C1:CE:C6:05
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MGF8jUkDxAiuljiEOFJV2MHOxgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.80.0/22
212.74.16.0/22
212.135.24.0/22
212.135.64.0/22
212.135.104.0/22
212.212.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:f8:5b:68:60:00:53:3d:61:44:7f:31:73:4b:40:6a:3c:72:
88:5f:07:10:68:31:16:12:09:9c:d1:ff:6f:10:55:2c:27:16:
0f:bf:6d:df:e2:d1:5c:32:68:1a:7c:d9:7d:7f:b2:58:28:c7:
20:ac:7a:38:a9:4c:02:34:64:79:4d:70:76:9c:8d:9e:87:12:
a9:c2:0d:aa:cb:1d:57:5a:3e:f9:28:26:71:17:3e:6b:f6:af:
7a:a5:f5:9e:6a:0e:cc:1d:25:c5:3f:a4:96:2f:4f:21:85:ae:
b4:3f:9c:8f:05:d4:47:32:b1:12:23:3e:22:4a:90:57:fa:11:
4f:d5:a7:a9:f6:e5:8a:de:1a:87:4d:a3:28:b5:26:81:98:f3:
78:8b:ec:0a:df:1e:0d:a2:e6:f3:ae:5d:9c:5a:d3:8e:3b:94:
dc:32:8d:71:2c:01:c9:f8:0b:3d:7c:27:5d:48:a0:c3:55:4b:
ec:5a:29:ac:28:5e:7a:5e:35:56:2c:10:c5:60:3c:d5:51:cb:
23:c8:59:5a:02:b0:ec:0f:0f:0c:3e:94:16:91:68:37:08:8d:
af:03:9d:ed:32:9b:db:3a:ac:d4:ce:86:f6:cf:78:25:33:d5:
41:75:45:fb:08:70:a6:1f:66:54:e3:2c:bb:4a:06:0c:63:aa:
f6:ec:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:21 2026 by rpki-client