Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MZWGhPE1c9KKuuPZXXXjKy50hhU.roa
File: MZWGhPE1c9KKuuPZXXXjKy50hhU.roa (raw, json)
Hash identifier: 6WOpgOM31j523aomu3AWgmwK8ztRRUl9m6i1Xk19bIk=
Subject key identifier: 31:95:86:84:F1:35:73:D2:8A:BA:E3:D9:5D:75:E3:2B:2E:74:86:15
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DFE1DDD78DB2BA225572DBBCBCBC11AE4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MZWGhPE1c9KKuuPZXXXjKy50hhU.roa
Signing time: Wed 06 May 2026 16:27:43 +0000
ROA not before: Wed 06 May 2026 16:27:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208504
IP address blocks: 80.240.91.0/24 maxlen: 24
81.168.7.0/24 maxlen: 24
81.168.110.0/24 maxlen: 24
82.152.9.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
89.213.6.0/24 maxlen: 24
109.176.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 16:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fe:1d:dd:78:db:2b:a2:25:57:2d:bb:cb:cb:c1:1a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 6 16:27:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31958684f13573d28abae3d95d75e32b2e748615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:39:9f:3c:67:15:bf:0a:ba:59:d8:f6:1c:
06:c9:f1:b6:13:98:fd:aa:a6:a3:f0:de:c8:50:92:
a4:45:8a:87:4d:de:bc:e6:ed:5c:9b:53:85:76:54:
44:c0:c7:72:6e:09:06:21:41:66:7f:6c:44:c5:41:
a9:fd:d5:01:ba:97:41:ab:7c:cb:72:c5:63:e1:35:
fb:7d:8d:65:66:62:5d:9c:92:19:1c:3b:51:f1:69:
77:31:24:85:a3:da:e0:e9:c7:66:ae:6f:69:f2:ff:
23:87:62:3e:1e:bb:6b:02:fc:06:86:d7:ef:20:a6:
37:db:11:0a:f7:27:e6:9c:09:38:fb:39:7a:2f:2b:
3b:d0:5b:89:6b:d5:5a:8c:97:a3:ad:e0:e3:cb:5f:
90:8e:92:e0:d6:f4:f8:3d:74:96:1c:7d:d2:ef:d6:
23:e3:59:7d:4d:25:40:ca:cc:c9:68:d4:b7:3b:1a:
f3:f2:f2:b1:6c:b0:32:28:f8:3e:bc:c7:e1:a0:ec:
bf:9f:1f:5c:51:4d:6a:ee:00:30:6c:ac:00:65:f1:
2f:45:de:c5:cf:5e:b1:7b:c4:b0:bc:78:fe:54:f3:
02:6d:b2:f3:eb:57:34:56:ae:d8:8c:d3:43:21:8a:
3a:9c:de:52:f8:5c:73:72:e7:ec:c0:1c:31:4d:85:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:95:86:84:F1:35:73:D2:8A:BA:E3:D9:5D:75:E3:2B:2E:74:86:15
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MZWGhPE1c9KKuuPZXXXjKy50hhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.91.0/24
81.168.7.0/24
81.168.110.0/24
82.152.9.0/24
82.153.243.0/24
89.213.6.0/24
109.176.83.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ba:3c:a4:df:a5:47:01:4e:5d:d3:b0:a2:e6:36:2b:a8:a1:
36:8a:c5:92:0a:e5:1e:3d:ed:1f:4b:47:62:90:01:a7:d1:29:
be:c8:55:9c:6e:39:e9:c0:d1:23:25:77:1a:ec:7f:96:d1:3e:
96:cf:1d:3f:96:1a:13:4d:cc:77:52:f9:54:f6:ef:44:b7:a3:
06:95:a0:c4:f5:0a:18:9d:d2:33:12:04:04:21:4f:0f:f7:a1:
42:6c:c3:60:91:68:fc:47:79:62:b3:dc:f3:1a:58:83:ae:c6:
a1:e3:7d:9e:3e:32:42:46:89:9a:12:5e:f7:7a:e2:42:89:93:
9b:4f:7b:80:e3:de:89:b9:1b:84:56:b7:0c:9f:2c:86:fd:55:
be:e6:fe:8b:49:67:98:fd:07:36:9c:d5:04:90:ec:a2:52:5d:
f2:17:a9:4e:7d:78:a6:51:d5:a2:15:41:81:f6:1f:91:bb:1c:
f0:66:2a:3c:4c:dc:bb:50:45:ca:70:59:1c:0f:1d:91:dc:7c:
d9:53:8c:8b:d7:21:e5:d4:dd:ef:44:9c:5d:66:63:6f:51:b9:
44:69:36:f7:45:0a:04:6f:3c:d7:53:66:4b:1e:d5:9b:f6:2c:
15:8f:4a:b8:e6:eb:bc:6d:88:db:26:33:39:f1:c6:51:91:d5:
e6:90:36:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 02:51:33 2026 by rpki-client