Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MPz6Nr818G0cet6mLExH6yJMNLc.roa
File: MPz6Nr818G0cet6mLExH6yJMNLc.roa (raw, json)
Hash identifier: ofrJXbce/2zKIAVKGGAbO+h3RkzIkYrcXq91Rj7n7kE=
Subject key identifier: 30:FC:FA:36:BF:35:F0:6D:1C:7A:DE:A6:2C:4C:47:EB:22:4C:34:B7
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FF23D00BF63362C9434059342DE2AC5E8
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MPz6Nr818G0cet6mLExH6yJMNLc.roa
Signing time: Tue 11 Aug 2026 19:11:51 +0000
ROA not before: Tue 11 Aug 2026 19:11:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26969
IP address blocks: 2.26.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:3d:00:bf:63:36:2c:94:34:05:93:42:de:2a:c5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 11 19:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30fcfa36bf35f06d1c7adea62c4c47eb224c34b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ed:30:52:84:83:34:92:ce:b1:e4:e9:ff:62:
49:94:62:5f:70:bf:ba:6b:9b:9e:9b:51:6d:20:dc:
11:b2:bd:8f:38:5e:83:97:dd:f6:a3:a0:d1:03:55:
74:4c:ba:f8:24:74:4a:d0:e2:71:a3:e4:97:4e:04:
38:91:c7:93:25:fb:df:f0:0f:80:5c:b8:5a:bd:48:
a8:5e:6c:a7:d6:ff:ae:89:86:ab:76:40:ea:f1:18:
97:9d:fa:5f:25:a8:c3:63:bb:b4:c4:b7:57:d1:d3:
4a:54:2f:90:6f:d4:f0:fe:61:c9:2c:69:d8:dd:7b:
41:fc:a2:cc:c5:00:4a:8d:e0:57:b2:86:8d:c8:a5:
4e:f5:9f:4c:24:3f:d8:2b:35:dc:25:52:cb:8b:c4:
9c:ad:37:73:25:83:c9:f3:79:8a:e5:06:e1:5b:37:
49:ec:bc:16:27:0e:e6:dc:80:2c:a0:6f:76:60:4e:
11:7b:d7:75:3b:30:a1:6c:0a:0c:57:e4:a5:cf:71:
ef:93:9b:d6:00:85:b6:c1:42:3a:91:b2:ca:4a:80:
fd:59:17:7c:57:35:cc:c4:91:b2:bb:69:88:64:86:
d7:7c:70:13:95:fe:7c:7c:cf:11:a6:2d:f8:55:3a:
d7:bb:c5:4a:d8:cc:77:7d:32:db:de:03:97:b4:0b:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FC:FA:36:BF:35:F0:6D:1C:7A:DE:A6:2C:4C:47:EB:22:4C:34:B7
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MPz6Nr818G0cet6mLExH6yJMNLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.208.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:40:11:1d:c9:2a:1d:b8:5b:86:b2:7f:60:90:a5:a2:04:3f:
5e:83:7c:89:3a:58:20:67:8c:73:5d:79:8e:e6:f3:b0:aa:10:
f2:26:23:ce:d1:e6:47:d2:fc:43:ff:03:a1:89:2b:51:0c:e0:
3d:cf:3f:2e:98:5d:85:4f:df:d7:0f:2a:01:3d:27:c6:35:12:
d6:44:80:86:fb:5f:f6:a6:8b:3b:06:03:76:c1:51:dc:c8:37:
56:cd:29:ea:fb:07:d3:7b:42:9e:92:0d:9d:f2:93:88:73:16:
44:d0:ba:11:70:d2:58:da:2a:a0:31:6e:6a:d1:46:38:7d:44:
ea:0d:df:6e:b2:cc:e4:8c:ad:11:bd:a8:77:ed:e7:0e:a8:09:
96:c9:fc:57:39:e3:1c:c0:7b:69:9a:27:eb:d6:cf:10:57:fa:
d0:6c:d5:d8:66:74:50:50:fd:8a:7a:b2:90:7a:46:49:69:99:
05:87:41:77:7f:d2:72:84:c9:3b:82:8b:b2:2b:24:fb:32:bb:
cc:03:0c:f2:a7:33:e4:ef:67:aa:bf:40:6a:f2:92:a4:61:70:
f5:bb:0b:49:50:da:9b:dd:a2:2f:59:84:10:73:fe:f8:8a:a0:
7b:05:85:92:dd:42:08:9f:d8:7e:4b:7b:fd:ca:34:c7:b7:d1:
21:c3:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:22 2026 by rpki-client