Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/MG5g8nzmisyVPCNDqTfcYH6fCRE.roa
File: MG5g8nzmisyVPCNDqTfcYH6fCRE.roa (raw, json)
Hash identifier: 69SazM8uY4cvMK+0d1ZD1gsyTrSVd6dUWQRYtHys9zU=
Subject key identifier: 30:6E:60:F2:7C:E6:8A:CC:95:3C:23:43:A9:37:DC:60:7E:9F:09:11
Certificate issuer: /CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Certificate serial: 01A157E26B5F2BA4B69F5CC5CE4F468C6E98
Authority key identifier: C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/MG5g8nzmisyVPCNDqTfcYH6fCRE.roa
Signing time: Tue 20 Oct 2026 05:56:58 +0000
ROA not before: Tue 20 Oct 2026 05:56:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199524
IP address blocks: 45.158.108.0/22 maxlen: 24
80.68.146.0/24 maxlen: 24
81.162.208.0/21 maxlen: 24
185.159.188.0/24 maxlen: 24
194.93.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:e2:6b:5f:2b:a4:b6:9f:5c:c5:ce:4f:46:8c:6e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Validity
Not Before: Oct 20 05:56:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=306e60f27ce68acc953c2343a937dc607e9f0911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:26:0c:33:30:72:c7:ee:ab:e9:54:27:3c:
8a:16:77:26:b5:5b:cb:c7:fb:5a:c7:b6:cb:26:7f:
2e:34:7a:0f:47:eb:f3:5a:48:8d:ec:20:c0:49:de:
5b:2b:d3:70:ab:74:b2:ac:28:a2:14:ed:cf:3e:6e:
bf:07:21:38:51:f3:e8:cf:3c:00:9f:bc:c3:bc:ef:
02:1c:1f:5d:b1:d0:07:2a:12:1a:ec:b2:99:70:7a:
92:e9:63:f4:cf:4b:92:a4:3d:63:36:68:45:8e:eb:
67:0e:c7:b9:4b:d7:3e:07:29:6a:94:a9:3f:12:f0:
5d:61:9f:28:b4:2c:6b:bb:07:1e:0a:61:d5:f0:de:
fb:37:4c:bf:77:bc:dd:de:cd:64:8a:37:a1:f9:96:
f1:46:2f:9d:bb:5f:cf:6a:f3:f1:76:47:59:69:62:
f7:c1:de:78:26:f5:65:89:d1:c0:39:86:f3:50:11:
3a:50:0c:f4:1f:dd:a7:76:94:1b:58:ad:77:6f:07:
13:d7:c8:51:a8:ff:78:ff:36:58:d1:1b:b5:ab:52:
bd:88:cd:a4:81:9c:4f:0d:ff:eb:c1:fe:c0:d6:51:
13:d7:fd:01:b7:51:62:86:ed:20:7c:91:24:29:3f:
56:9b:9e:c2:c3:21:af:ac:4b:05:62:e3:3c:99:09:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6E:60:F2:7C:E6:8A:CC:95:3C:23:43:A9:37:DC:60:7E:9F:09:11
X509v3 Authority Key Identifier:
keyid:C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/MG5g8nzmisyVPCNDqTfcYH6fCRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.108.0/22
80.68.146.0/24
81.162.208.0/21
185.159.188.0/24
194.93.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6f:33:51:dc:89:bc:63:e3:1a:70:f2:11:f7:28:fe:ab:b0:
cb:93:5d:ba:8b:ff:73:7c:a7:f4:b9:a5:5a:64:28:ce:98:fa:
72:54:63:25:29:1a:e5:06:60:2a:78:0e:7a:fb:33:6c:bc:34:
a5:c3:65:00:b2:fb:65:d1:ae:96:19:6e:43:0c:67:48:05:ed:
46:a4:df:15:69:28:29:93:a6:cb:e2:1d:8f:7f:df:23:08:02:
c5:ca:15:86:63:98:1c:c4:a0:5a:00:dd:54:5d:58:2f:fa:32:
77:6d:89:c9:07:90:30:0a:5d:8c:a2:2a:5b:8a:53:72:9b:b5:
78:d8:be:aa:7a:b3:92:6c:d7:63:e3:8a:68:84:96:f0:f0:12:
e5:84:61:38:18:bf:9d:10:40:9c:55:3e:a7:3b:e8:0a:5c:18:
38:39:3b:eb:37:81:fe:63:92:75:06:e4:91:0e:cc:75:f8:29:
b3:ac:38:ac:b8:27:d5:57:e6:bf:97:cf:de:a6:d2:67:aa:67:
27:3f:fa:03:be:8f:94:d4:4a:39:73:94:f7:06:b5:31:96:ac:
65:b9:73:ba:ec:4c:ef:da:b0:8f:c6:f4:5c:a0:65:94:ae:b6:
96:2b:a1:4d:7b:8a:c4:1a:e1:4a:04:4b:6c:92:d7:85:4f:cc:
7d:99:81:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:04:51 2026 by rpki-client