Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/mjg-OeYcv88C_ciEIAtviIEYwk8.roa
File: mjg-OeYcv88C_ciEIAtviIEYwk8.roa (raw, json)
Hash identifier: D6vX8cES3Ut8gdkaYzpDQNiVLQHZya9bRyXcDdWOLH4=
Subject key identifier: 9A:38:3E:39:E6:1C:BF:CF:02:FD:C8:84:20:0B:6F:88:81:18:C2:4F
Certificate issuer: /CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Certificate serial: 019FDBD9C9DBECA34E0B3D1624DEFFC7B5E1
Authority key identifier: E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/mjg-OeYcv88C_ciEIAtviIEYwk8.roa
Signing time: Fri 07 Aug 2026 10:51:50 +0000
ROA not before: Fri 07 Aug 2026 10:51:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42948
IP address blocks: 193.142.149.0/24 maxlen: 24
2001:67c:2254::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:d9:c9:db:ec:a3:4e:0b:3d:16:24:de:ff:c7:b5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Validity
Not Before: Aug 7 10:51:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a383e39e61cbfcf02fdc884200b6f888118c24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:00:a0:cd:a7:3c:a4:ba:6a:1d:26:80:8b:
d7:1c:74:ce:ad:4a:02:d3:26:bd:e6:6e:a3:76:1f:
11:b4:bb:5c:e4:1f:de:04:6f:6d:54:87:95:60:2c:
93:eb:ed:95:b1:02:46:c7:81:31:a2:b9:6b:75:0e:
bb:5a:14:25:1d:26:f7:63:b6:dc:6c:aa:c2:20:26:
66:87:87:44:3c:62:d3:4b:0c:cc:2b:0a:00:20:6a:
09:fe:81:77:86:a6:c0:05:c8:c2:98:77:93:02:1d:
cb:9f:f3:35:2e:0c:51:7f:29:79:cc:f1:bf:fa:3c:
63:6e:eb:99:93:35:5c:42:e2:d4:c7:25:7a:a9:69:
3f:f1:21:8f:6e:83:0e:73:1f:03:2b:a6:a0:64:fa:
66:bb:c9:7b:67:e4:3e:4c:dc:e0:d6:3d:4c:3f:ec:
f6:94:e1:90:26:4f:fe:43:3c:4e:ce:32:20:6a:cf:
43:f3:cb:e9:38:96:5b:de:75:4e:21:4a:c1:8c:0d:
57:0c:a3:55:06:ce:36:73:d8:b5:31:56:ef:27:b2:
63:01:9f:d6:1a:c9:7b:a0:d8:2d:b2:82:cb:aa:6f:
67:8b:c1:93:fe:06:ed:3d:10:6f:f2:db:7e:3d:65:
9a:df:66:6f:ea:3e:81:44:19:24:df:8c:9a:e0:1d:
e3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:38:3E:39:E6:1C:BF:CF:02:FD:C8:84:20:0B:6F:88:81:18:C2:4F
X509v3 Authority Key Identifier:
keyid:E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/mjg-OeYcv88C_ciEIAtviIEYwk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.149.0/24
IPv6:
2001:67c:2254::/48
Signature Algorithm: sha256WithRSAEncryption
a6:3b:d7:3f:56:e3:c8:a2:a6:c1:e7:61:1b:ce:c4:63:2a:e8:
34:13:49:a7:0e:88:a0:d5:1f:f0:e1:5c:d3:d4:aa:13:d2:32:
60:75:08:17:1f:53:c8:ee:fa:4c:1f:b5:c6:1f:7a:4d:6b:b9:
b1:35:eb:14:d1:8e:39:7b:5f:db:5c:68:34:9e:d4:ef:43:3c:
7f:96:a7:80:e5:27:64:82:0b:9b:b2:7e:81:89:77:2b:5d:a8:
bd:4f:44:94:cf:cc:37:99:16:78:88:01:73:8f:61:07:d4:0c:
54:80:b6:95:e1:3d:9b:c2:8c:51:35:33:43:4c:60:2d:97:ca:
7f:4d:6a:61:95:a8:7e:69:6a:15:da:4b:79:3f:81:5f:0d:57:
d9:34:97:76:ed:d8:bb:fa:06:14:fd:76:1a:33:50:7f:ce:cb:
f7:9b:9e:ef:40:db:d9:42:06:91:1e:a1:21:88:02:e3:21:28:
43:5e:99:e9:1d:11:fe:2c:3c:71:43:dd:14:15:d4:0a:f1:c0:
39:01:15:2a:f7:71:6c:52:f3:d0:88:37:74:50:09:61:28:e5:
ae:7f:7f:2f:a5:b7:c6:1a:9f:9b:31:8c:3c:ab:84:88:1d:ff:
3f:0c:6c:0b:14:22:f7:3a:5e:95:0a:f9:58:4d:ec:40:fa:2e:
78:8e:eb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:30:06 2026 by rpki-client