Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MGwZ4oaeSEYefZDkD2es-L2MkQs.roa
File: MGwZ4oaeSEYefZDkD2es-L2MkQs.roa (raw, json)
Hash identifier: 2bO87vaQQ6aXtjBxok9+UUxQpdPvvCwu2ZoJ3yexWZo=
Subject key identifier: 30:6C:19:E2:86:9E:48:46:1E:7D:90:E4:0F:67:AC:F8:BD:8C:91:0B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0352AC12D34432C6988AF54352F8E110E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MGwZ4oaeSEYefZDkD2es-L2MkQs.roa
Signing time: Mon 24 Aug 2026 19:06:29 +0000
ROA not before: Mon 24 Aug 2026 19:06:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200169
IP address blocks: 31.57.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:35:2a:c1:2d:34:43:2c:69:88:af:54:35:2f:8e:11:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 24 19:06:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=306c19e2869e48461e7d90e40f67acf8bd8c910b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:e5:27:57:34:94:35:75:af:a5:c9:45:a0:
07:49:60:01:5c:59:35:d4:18:c7:3e:1f:5a:fe:68:
19:d6:bb:1c:7f:79:7e:fb:59:00:23:79:b6:45:87:
de:13:b1:18:a9:7b:dc:89:79:62:e9:21:60:25:7a:
00:32:04:54:dc:ba:81:ad:26:57:34:74:2a:53:02:
2a:18:f3:8f:d2:f2:70:d6:4b:09:72:f8:8d:a7:21:
61:d4:7c:4b:41:78:da:92:44:df:a4:b3:d8:ff:b4:
8b:cd:8c:e0:96:08:46:74:f7:f4:0d:3a:a8:5f:5b:
77:c4:b1:df:b0:68:a3:04:0a:26:92:f6:a8:e0:6b:
ec:6b:b0:fb:75:d8:1d:26:ee:49:ee:24:49:b0:c2:
07:fc:28:aa:6b:5e:fe:55:1a:b5:7e:31:8d:a6:8b:
87:0e:43:d3:12:48:8f:90:5a:b3:f2:e7:14:b5:cd:
bf:ea:3e:2e:03:64:4b:02:12:0c:da:6d:d4:b4:81:
6c:f2:f8:c4:b7:42:eb:7e:a5:ca:71:75:fe:cd:47:
dd:21:7f:46:40:63:80:23:b0:40:46:8a:64:36:54:
96:f1:57:5c:89:50:a5:25:ec:47:9e:89:c2:ff:61:
1a:67:8a:54:84:6e:c4:86:89:e3:14:06:e7:b2:51:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6C:19:E2:86:9E:48:46:1E:7D:90:E4:0F:67:AC:F8:BD:8C:91:0B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MGwZ4oaeSEYefZDkD2es-L2MkQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.0.0/24
Signature Algorithm: sha256WithRSAEncryption
13:48:33:e2:55:06:44:4f:90:28:42:f2:94:23:15:34:e8:11:
80:70:29:0d:07:ef:f8:27:0c:bb:b5:0b:c5:c3:37:f2:1e:69:
70:ca:ce:e5:46:6f:85:35:32:4f:ea:53:29:6a:41:20:09:aa:
4f:6b:3e:cb:7a:73:04:64:a8:fe:0b:f9:66:fd:16:32:b5:1a:
87:c2:3f:4b:23:29:45:53:43:9b:ff:ac:20:09:57:c3:fe:df:
5a:ee:b0:3f:cc:a0:1b:51:ed:d1:ab:2e:95:20:ca:77:5e:8c:
ef:bf:bd:49:fa:a7:bf:e5:a7:fb:85:38:2f:82:f4:b7:8b:ce:
f5:a5:06:bf:fa:d7:28:d6:38:23:b5:a9:b1:11:2d:01:5c:0d:
ca:99:b7:9e:a6:c0:6a:39:9d:5d:1a:7b:63:a9:42:94:d5:1e:
3e:22:3e:a6:bf:b9:32:97:3b:68:0b:eb:d1:9b:95:a3:91:19:
e9:e7:1f:c6:ef:13:3f:21:c0:e5:36:f6:6a:59:da:bf:7f:4e:
f0:db:81:4b:11:45:41:a0:f0:bd:97:60:7c:0c:31:c7:77:96:
94:e8:2f:25:72:fb:3d:54:f1:40:3d:92:2a:27:76:e0:8d:f1:
6d:01:d3:db:08:1a:d3:60:4f:08:5b:47:b3:c4:ea:50:16:0a:
4b:2b:79:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:51 2026 by rpki-client