Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_MGXOIaGpuUB79xBeIcSOIJtf7k.roa
File: _MGXOIaGpuUB79xBeIcSOIJtf7k.roa (raw, json)
Hash identifier: A6KG5xgBkhQhI2rqejsIQYvyrPVRpZd+9km0cXfD4lI=
Subject key identifier: FC:C1:97:38:86:86:A6:E5:01:EF:DC:41:78:87:12:38:82:6D:7F:B9
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A128134BB09C0957A65182141B2929188D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_MGXOIaGpuUB79xBeIcSOIJtf7k.roa
Signing time: Sat 10 Oct 2026 23:08:35 +0000
ROA not before: Sat 10 Oct 2026 23:08:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209604
IP address blocks: 2.27.72.0/23 maxlen: 24
31.77.167.0/24 maxlen: 24
179.253.188.0/24 maxlen: 24
179.254.94.0/24 maxlen: 24
179.254.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:13:4b:b0:9c:09:57:a6:51:82:14:1b:29:29:18:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 10 23:08:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcc197388686a6e501efdc4178871238826d7fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:b5:99:44:f0:71:e2:b0:6e:73:5d:ad:d7:
67:61:a5:ed:57:bd:24:1d:82:98:6a:74:e0:d1:75:
51:cd:64:e7:54:52:b7:7f:45:81:b9:a7:0a:3a:bc:
69:58:a4:67:12:03:dd:8b:44:03:dd:6e:17:b3:b5:
d5:f5:81:f8:d3:d5:59:f2:c8:25:51:c9:69:5c:f7:
be:33:94:f0:7c:37:55:f9:29:39:6f:d5:f8:9b:da:
ad:34:73:d7:14:d0:3d:8a:90:31:1c:30:28:1e:1f:
ff:38:e0:7c:c2:d9:ce:f6:b8:00:20:99:67:3e:06:
c8:ec:bf:2d:c4:87:04:6f:05:81:0e:13:ae:0b:f6:
d5:03:43:fe:98:ab:25:c3:da:79:34:a8:67:66:28:
d6:8b:50:1d:07:06:cf:9a:6f:0f:c6:3d:c9:e0:b1:
1d:14:69:53:b0:58:5d:b4:6c:81:43:99:fa:18:59:
1e:ac:79:c4:75:53:fe:86:5a:b3:ef:de:ae:6b:1e:
f6:fe:4d:6e:3e:18:85:98:e5:a3:d8:9d:00:57:36:
17:c8:34:69:68:ac:40:27:46:44:f1:33:15:c6:4f:
32:b7:e6:ff:d4:0a:bf:db:35:22:08:68:a8:0a:d1:
54:61:7f:4b:fb:30:c1:c9:6a:bf:82:ae:b6:6b:b1:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C1:97:38:86:86:A6:E5:01:EF:DC:41:78:87:12:38:82:6D:7F:B9
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_MGXOIaGpuUB79xBeIcSOIJtf7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.72.0/23
31.77.167.0/24
179.253.188.0/24
179.254.94.0/24
179.254.112.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e7:e3:19:b5:05:ee:8e:47:42:22:29:44:27:29:99:34:3b:
0e:09:9b:5a:01:6b:8a:aa:5e:97:8e:0f:f7:68:14:79:cf:30:
3d:53:2e:79:9c:29:30:ee:61:dd:63:3e:a0:fe:ca:55:be:e7:
84:6c:24:35:63:36:d3:f6:de:1f:e4:24:4b:40:96:f1:40:64:
d3:98:ad:47:fc:d4:b4:30:dc:d4:a4:b0:69:fa:f8:5c:37:29:
0e:5f:2b:7a:a6:9d:73:70:ee:bb:c5:d5:a5:d4:3a:6b:0f:af:
aa:17:72:cd:5d:5b:40:70:58:28:b8:91:72:d4:c3:01:02:10:
a0:f2:00:07:d2:37:75:68:29:ab:37:5c:55:80:f2:ec:0f:78:
af:9b:4e:87:a4:b7:ec:08:62:49:c1:bc:1d:50:7d:a4:f9:c8:
75:64:ee:16:42:f2:b3:a8:5a:78:ca:a9:fd:13:67:47:69:3c:
53:5e:c5:8d:23:eb:b7:c1:32:1d:cb:3a:c3:e7:24:4f:c3:1f:
ad:6c:09:61:57:a5:20:18:06:12:a3:a9:c1:0a:f7:a6:71:f2:
23:27:38:f4:99:bb:12:45:7b:2c:d1:c0:05:02:c3:1f:e0:cf:
59:33:dd:e6:2e:36:a3:83:24:41:22:d1:0d:ee:42:29:9b:d5:
d2:53:86:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:49:03 2026 by rpki-client