Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/MHMvD25G98q_oVHMD53RxUdicb4.roa
File: MHMvD25G98q_oVHMD53RxUdicb4.roa (raw, json)
Hash identifier: CO102pNtY2jOCZp4RkxFW2Le3E7HSzkT6HgrXcYHB9s=
Subject key identifier: 30:73:2F:0F:6E:46:F7:CA:BF:A1:51:CC:0F:9D:D1:C5:47:62:71:BE
Certificate issuer: /CN=197fc930e4aa59b0303459f755698e8f998f471e
Certificate serial: 01A144454BE13AE6489826C153038B97F3F0
Authority key identifier: 19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/MHMvD25G98q_oVHMD53RxUdicb4.roa
Signing time: Fri 16 Oct 2026 10:32:34 +0000
ROA not before: Fri 16 Oct 2026 10:32:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39508
IP address blocks: 138.200.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:45:4b:e1:3a:e6:48:98:26:c1:53:03:8b:97:f3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197fc930e4aa59b0303459f755698e8f998f471e
Validity
Not Before: Oct 16 10:32:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30732f0f6e46f7cabfa151cc0f9dd1c5476271be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:80:f2:b0:3d:42:65:9d:ed:6d:d0:f3:ca:b5:
50:29:21:28:b0:db:ed:98:17:a0:d7:21:c7:3f:89:
22:ab:05:7b:c3:7c:49:f9:c7:8f:1d:ab:a4:58:8a:
83:a0:46:e5:8c:62:ef:e4:46:66:60:51:b2:aa:8c:
ba:f4:b0:5e:1c:63:56:cf:95:06:7e:b5:63:71:6b:
ff:a6:57:49:40:71:0a:55:61:d2:38:c9:aa:e3:69:
22:0d:64:79:31:80:ed:d8:b1:d1:3f:72:ad:5a:c6:
19:80:64:8c:fd:4a:8c:28:cc:cf:37:c5:08:8a:e8:
ed:85:41:80:63:cf:0c:5e:04:82:e1:35:fa:1d:35:
74:c0:9b:21:97:d0:a1:a1:07:34:23:a1:4a:ed:30:
e3:13:27:59:26:de:a9:8a:b9:f6:06:d3:ce:70:b8:
05:db:c5:b0:72:60:94:70:c3:47:78:a4:d8:e5:ef:
67:f0:87:5b:f4:7a:48:54:04:77:9e:c1:16:99:b2:
6f:d2:13:e4:cb:d2:06:27:7a:a4:f5:72:1d:91:32:
0b:82:8c:10:00:39:fd:10:ce:c0:ff:4e:4e:c5:b7:
ff:4c:4b:00:7a:40:1d:48:3d:91:dc:38:c1:0c:a9:
14:fc:ca:85:02:da:82:dc:8f:72:45:4e:f9:6d:ad:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:73:2F:0F:6E:46:F7:CA:BF:A1:51:CC:0F:9D:D1:C5:47:62:71:BE
X509v3 Authority Key Identifier:
keyid:19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/MHMvD25G98q_oVHMD53RxUdicb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.200.12.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:ab:0c:db:e0:1a:be:e2:54:7d:09:a4:0a:3e:80:ec:30:30:
40:b8:a1:56:2d:8a:b5:03:c0:43:54:ba:27:a9:2c:66:2c:7d:
c1:8b:7c:89:6c:1a:b9:18:df:a1:59:32:89:01:87:b2:7d:d3:
df:37:c1:d9:2a:6a:78:ba:26:62:56:1b:1f:6d:02:20:33:41:
37:dd:ff:3a:87:10:a1:30:79:43:dd:fa:2a:4f:99:e0:92:4d:
24:ca:fb:47:bb:e6:3d:3c:58:b7:e5:95:04:bb:d5:e3:a7:5c:
88:66:97:fe:4d:47:c7:fd:66:51:03:31:d5:19:7e:76:be:15:
13:de:e1:c8:d1:94:f0:c6:78:0a:a1:67:76:4b:7d:16:bb:fe:
d2:d9:f3:f5:f7:12:87:72:09:96:72:54:00:bd:d9:0e:45:fc:
9c:90:ee:72:98:80:4b:1c:90:62:46:0b:f7:37:59:a7:bf:0d:
3b:d7:6c:ba:68:33:0b:f8:3f:49:d8:86:53:33:7c:e0:2c:84:
ab:b3:b1:0c:75:44:ec:e6:bd:c7:33:cb:b4:a0:57:f6:25:c1:
d0:97:82:9c:61:be:7d:de:ba:10:06:af:88:5d:32:c6:10:03:
4b:7a:45:3c:9c:5a:df:23:54:47:f9:64:0a:40:03:26:a6:93:
a9:99:04:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:35:02 2026 by rpki-client