Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MZHJahRcm-uMwVQmjzusUrUB9AE.roa
File: MZHJahRcm-uMwVQmjzusUrUB9AE.roa (raw, json)
Hash identifier: kWGKF0OR47gy7ilKu64m4MbJIOWC0O54UgAf8fbVM9A=
Subject key identifier: 31:91:C9:6A:14:5C:9B:EB:8C:C1:54:26:8F:3B:AC:52:B5:01:F4:01
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019ED669F4F3F462CB926E23456FBA70FF23
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MZHJahRcm-uMwVQmjzusUrUB9AE.roa
Signing time: Wed 17 Jun 2026 16:28:48 +0000
ROA not before: Wed 17 Jun 2026 16:28:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199592
IP address blocks: 194.242.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:69:f4:f3:f4:62:cb:92:6e:23:45:6f:ba:70:ff:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 17 16:28:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3191c96a145c9beb8cc154268f3bac52b501f401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e7:05:5d:11:1c:90:55:2a:8b:1a:b8:68:bb:
73:a3:d9:0a:f4:01:53:d6:45:7e:4b:22:37:f2:b5:
a6:fc:ad:7a:db:4a:98:00:e7:f5:7a:88:cd:04:b9:
44:c7:76:7b:04:94:75:2c:21:8e:56:44:1d:59:72:
16:01:92:70:e2:92:d2:1a:6e:ec:78:3d:1c:38:d5:
6d:a5:f1:6f:41:c3:6a:34:37:25:9d:67:48:bd:d5:
03:96:60:1c:e1:4c:8a:cd:47:37:0c:80:80:f1:ae:
f4:64:d2:31:72:cd:cd:6e:69:86:8d:33:a8:f2:59:
59:fc:4e:02:ae:3b:19:ed:d9:5d:ed:0a:18:1e:14:
68:22:d1:10:04:56:e3:b1:27:56:57:24:c2:b6:8f:
e0:75:6d:5b:d1:18:f9:af:cd:5f:c2:02:1c:4e:85:
8e:e0:c2:55:e1:2f:89:b9:bf:19:5a:f5:15:4b:ee:
e0:ca:94:41:c1:ac:f6:d1:09:4f:b5:86:c8:cd:d9:
57:e2:90:47:37:66:35:e9:2c:d9:90:01:d5:0c:ec:
0b:32:23:5b:c5:b0:84:11:87:17:20:a3:bb:4a:1f:
aa:a4:56:1c:3a:1f:b4:25:69:48:79:60:4e:b2:8a:
0a:4d:50:ed:cc:d7:c7:a2:1c:0d:f1:e5:e8:59:eb:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:C9:6A:14:5C:9B:EB:8C:C1:54:26:8F:3B:AC:52:B5:01:F4:01
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MZHJahRcm-uMwVQmjzusUrUB9AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.130.0/23
Signature Algorithm: sha256WithRSAEncryption
78:c2:d6:1f:94:c0:f6:1c:b5:14:57:be:26:8e:59:93:60:7a:
42:06:19:06:38:a9:60:0c:fc:fb:69:d6:65:ed:be:f8:84:e6:
51:d8:3f:18:8c:bb:69:40:9c:38:15:ae:2b:a4:f9:04:25:95:
35:f2:cd:24:03:9b:72:fc:e7:06:e5:c9:0b:2a:58:c8:d4:e8:
d9:39:37:b8:2a:e5:be:7c:54:6e:09:d7:47:cc:42:97:70:58:
6a:37:6b:d4:58:a6:0d:4b:18:03:8f:11:47:9b:70:2a:c4:34:
0d:60:84:06:fe:73:31:d6:01:4b:1b:4f:35:01:de:00:58:f9:
d0:d4:96:f6:24:d2:09:99:59:92:a7:46:ce:a3:63:78:66:43:
35:cd:e8:7c:19:84:b2:03:ad:8f:37:c6:91:9f:ef:58:e9:ae:
28:a1:d1:36:a6:c4:9d:b3:1a:7e:f5:a6:07:3f:53:6d:14:2e:
df:30:39:58:3a:b8:b6:18:26:10:e9:f2:d7:d2:5a:f3:bc:8b:
c6:79:f4:0b:3f:f7:fb:53:c0:10:8e:a7:0d:61:0b:02:65:25:
f5:17:9b:dc:11:60:02:05:f6:30:d6:24:28:bc:85:30:8b:c1:
aa:72:68:32:56:27:aa:ee:28:a8:75:83:c5:f8:98:b2:0e:e3:
4f:0e:4a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:21 2026 by rpki-client