Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MmgnvavB1skLfhilq-YekRoV8sw.roa
File: MmgnvavB1skLfhilq-YekRoV8sw.roa (raw, json)
Hash identifier: /emkAkshtFB/QAZGcIZmXeonhnUGhvNAed73f+1D5p8=
Subject key identifier: 32:68:27:BD:AB:C1:D6:C9:0B:7E:18:A5:AB:E6:1E:91:1A:15:F2:CC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019CAF746887544AFA7347CEAC2EBAE3B16B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MmgnvavB1skLfhilq-YekRoV8sw.roa
Signing time: Mon 02 Mar 2026 16:49:27 +0000
ROA not before: Mon 02 Mar 2026 16:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215323
IP address blocks: 89.213.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:74:68:87:54:4a:fa:73:47:ce:ac:2e:ba:e3:b1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 2 16:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=326827bdabc1d6c90b7e18a5abe61e911a15f2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fb:53:00:c6:3c:ac:4c:d0:da:b1:11:b7:df:
f0:55:66:21:64:6b:08:4e:26:62:6a:66:72:9a:cc:
98:a5:a9:67:e3:62:23:e7:91:89:75:d6:5f:db:55:
c8:dc:6a:99:f3:5b:28:ba:74:cc:ed:9c:b2:ba:07:
7f:7c:8f:53:d8:66:6d:28:21:e2:ff:af:fd:07:99:
34:20:18:27:8a:ef:9c:95:fc:8c:0e:b5:ad:29:21:
fd:cf:4b:4c:02:58:62:54:d8:3a:05:1c:fb:85:e3:
16:c5:0c:36:17:4b:64:a0:af:ac:d7:e4:40:e3:c7:
11:69:29:10:1a:f7:4e:3e:54:35:9b:2e:48:e0:cb:
73:fe:d4:80:10:23:5e:be:0e:d1:6e:7e:89:e5:78:
40:2a:d9:3d:ae:98:22:f4:11:eb:ec:88:87:54:6d:
a8:56:eb:5c:e4:13:e2:91:be:23:8e:ea:92:a4:c9:
41:9e:d8:0c:32:68:b7:82:5c:70:18:ff:4a:a0:24:
ad:0f:e1:e2:98:ba:2f:99:4b:cc:87:c7:12:44:f0:
a0:4d:04:14:a3:bb:8f:45:50:3f:1d:f8:69:32:15:
7f:15:03:2a:d3:92:d3:81:05:d8:52:82:0a:fe:28:
c2:d7:ab:f9:01:b5:7f:51:db:5c:41:5b:44:f3:aa:
c4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:68:27:BD:AB:C1:D6:C9:0B:7E:18:A5:AB:E6:1E:91:1A:15:F2:CC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MmgnvavB1skLfhilq-YekRoV8sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:4d:ea:4e:70:a3:76:1f:75:fc:fc:8a:94:1d:9b:ea:9d:9c:
e7:a1:1e:59:0d:af:cc:d9:b9:80:c6:97:f7:e3:b2:35:85:13:
c5:b4:0b:48:0d:93:44:39:e8:cc:45:a1:52:27:41:07:d9:37:
b5:fb:1c:03:cb:fc:20:b2:ba:e5:46:00:b8:d7:b2:18:b3:a9:
f4:7d:93:1a:7d:94:5c:2d:7b:14:52:05:68:8b:ca:3f:8c:fb:
c9:47:07:7f:54:fd:3e:82:a3:fb:38:25:1e:ad:ce:20:04:52:
1a:70:e5:31:87:84:35:26:33:c5:f4:9d:5a:6d:13:a7:e0:9b:
86:5e:9a:06:2b:2f:9c:03:e6:fb:20:cf:7c:92:2a:fd:a5:55:
2c:57:f6:e6:69:59:c7:57:72:a5:ef:25:1e:28:6a:94:a8:4a:
3b:40:91:ec:1e:1b:59:8e:62:89:fc:bf:22:dc:75:6d:45:c0:
bc:bf:6f:2f:36:c9:0d:22:bf:65:6a:02:0a:42:63:7c:38:91:
e0:24:85:b1:74:f3:10:40:3f:11:33:9b:4b:70:54:21:e1:6c:
43:0c:dd:e1:ae:cb:39:e8:71:96:a7:2e:94:f5:c1:fa:3a:d7:
df:ff:ef:29:f8:2e:5a:29:b4:e6:f3:6b:b3:6b:ab:94:e4:78:
ca:44:6d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 15:33:52 2026 by rpki-client