Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mgBStAFiuscqYRcH258j7xNYfQs.roa
File: mgBStAFiuscqYRcH258j7xNYfQs.roa (raw, json)
Hash identifier: tnlCASLBJKMwUoXUUoLImCz6g2mH+z/uqHz/V1t7xyU=
Subject key identifier: 9A:00:52:B4:01:62:BA:C7:2A:61:17:07:DB:9F:23:EF:13:58:7D:0B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A03952945B64094186A93BA1CF349C55E9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mgBStAFiuscqYRcH258j7xNYfQs.roa
Signing time: Tue 25 Aug 2026 14:28:28 +0000
ROA not before: Tue 25 Aug 2026 14:28:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 812
IP address blocks: 83.148.128.0/23 maxlen: 23
194.6.104.0/22 maxlen: 22
195.40.110.0/23 maxlen: 24
195.172.114.0/23 maxlen: 24
195.172.116.0/23 maxlen: 24
195.172.196.0/23 maxlen: 24
217.204.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:52:94:5b:64:09:41:86:a9:3b:a1:cf:34:9c:55:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 25 14:28:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a0052b40162bac72a611707db9f23ef13587d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:74:7b:d4:d3:a8:8b:4a:d0:90:1a:0e:ae:
a9:07:a1:36:fd:16:0f:2c:85:af:52:87:7d:f7:62:
f8:f8:b4:dc:a3:02:b4:f3:60:0c:1b:17:9b:16:7c:
cc:cb:de:d4:2d:da:5a:39:f9:53:43:c9:ac:6f:1c:
e6:bb:e1:7e:3c:0e:ab:f4:38:fa:8d:28:73:95:e0:
97:6b:81:8f:6d:09:fe:21:c7:4e:f5:09:e3:93:b4:
23:4c:d8:b0:a9:c2:2b:f7:77:a3:3d:44:37:29:c4:
1c:bb:3f:f0:0d:e1:21:c5:c0:c7:75:b8:9e:2f:fe:
d6:75:28:d6:35:11:e2:d3:d4:e6:49:13:1c:f3:38:
cd:f0:46:71:d0:1e:a6:6f:d0:25:ab:b7:8e:6e:c7:
ae:b1:22:32:3c:bc:94:49:41:05:ee:70:fb:b1:35:
7b:71:2c:cd:e3:d5:1e:aa:65:f0:4f:13:1b:1c:41:
97:ef:65:d1:9d:de:e2:9c:b4:fd:67:f8:30:3f:71:
b6:6e:fd:12:40:aa:96:a2:3e:62:71:5f:33:a7:ce:
ef:bd:fa:c4:a6:39:bb:72:8f:de:18:ac:a3:1b:8d:
67:9b:8b:6f:fc:89:dd:46:ed:06:c6:00:fd:5e:9e:
32:9b:b7:f9:39:7d:05:40:6f:f6:84:75:47:f8:a1:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:00:52:B4:01:62:BA:C7:2A:61:17:07:DB:9F:23:EF:13:58:7D:0B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mgBStAFiuscqYRcH258j7xNYfQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.148.128.0/23
194.6.104.0/22
195.40.110.0/23
195.172.114.0-195.172.117.255
195.172.196.0/23
217.204.132.0/22
Signature Algorithm: sha256WithRSAEncryption
38:df:74:51:27:31:62:5f:3f:81:4d:79:ff:35:4d:05:ba:b3:
ed:c2:a8:2e:22:29:58:bb:3b:b9:6f:f3:9d:dd:66:58:b5:7c:
75:f8:c8:d9:77:e7:c3:fe:4f:fa:7a:ba:6d:b4:e3:3b:24:80:
8d:ee:6e:f7:f9:52:5c:46:92:0d:b0:e9:e4:e5:77:07:ec:54:
3f:18:b9:3e:10:96:aa:85:5b:9b:35:5d:94:ba:46:c6:d9:cd:
60:ad:97:72:b6:00:9d:71:30:7f:d9:db:24:e5:01:8d:31:21:
36:37:1a:d7:dd:bc:b0:77:62:26:ba:35:ed:70:ef:0c:af:e2:
b3:9a:07:c8:0d:20:b8:1c:f4:2a:e3:46:bd:3b:74:58:f8:3e:
73:53:75:13:68:9e:d8:f5:56:c6:a1:f1:c8:2f:8b:59:13:78:
18:45:52:94:c8:fd:03:14:2f:26:fa:1c:42:43:3e:ab:d7:dc:
42:38:8e:07:c1:c2:d6:60:91:88:ab:ed:c6:d4:d2:38:f4:60:
42:f4:1c:6a:10:7b:c9:5b:a0:ee:9f:fc:07:89:de:80:ae:fd:
b5:b5:d0:1c:7f:c6:81:7f:61:bb:60:b5:40:22:78:86:19:aa:
32:b4:3c:16:4a:ad:64:d1:b6:31:fa:84:51:87:c9:9d:e6:b0:
a5:81:29:a5
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAaA5UpRbZAlBhqk7oc80nFXpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwODI1MTQyODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTAwNTJiNDAxNjJiYWM3MmE2MTE3MDdkYjlmMjNlZjEzNTg3ZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/d0e9TTqItK0JAaDq6pB6E2/RYP
LIWvUod992L4+LTcowK082AMGxebFnzMy97ULdpaOflTQ8msbxzmu+F+PA6r9Dj6
jShzleCXa4GPbQn+IcdO9Qnjk7QjTNiwqcIr93ejPUQ3KcQcuz/wDeEhxcDHdbie
L/7WdSjWNRHi09TmSRMc8zjN8EZx0B6mb9Alq7eObseusSIyPLyUSUEF7nD7sTV7
cSzN49UeqmXwTxMbHEGX72XRnd7inLT9Z/gwP3G2bv0SQKqWoj5icV8zp87vvfrE
pjm7co/eGKyjG41nm4tv/IndRu0GxgD9Xp4ym7f5OX0FQG/2hHVH+KGluQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFJoAUrQBYrrHKmEXB9ufI+8TWH0LMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvbWdCU3RBRml1c2NxWVJjSDI1OGo3eE5ZZlFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBU5SAAwQC
wgZoAwQBwyhuMAwDBAHDrHIDBAHDrHQDBAHDrMQDBALZzIQwDQYJKoZIhvcNAQEL
BQADggEBADjfdFEnMWJfP4FNef81TQW6s+3CqC4iKVi7O7lv853dZli1fHX4yNl3
58P+T/p6um204zskgI3ubvf5UlxGkg2w6eTldwfsVD8YuT4QlqqFW5s1XZS6RsbZ
zWCtl3K2AJ1xMH/Z2yTlAY0xITY3GtfdvLB3Yia6Ne1w7wyv4rOaB8gNILgc9Crj
Rr07dFj4PnNTdRNontj1Vsah8cgvi1kTeBhFUpTI/QMULyb6HEJDPqvX3EI4jgfB
wtZgkYir7cbU0jj0YEL0HGoQe8lboO6f/AeJ3oCu/bW10Bx/xoF/YbtgtUAieIYZ
qjK0PBZKrWTRtjH6hFGHyZ3msKWBKaU=
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:29 2026 by rpki-client