Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MYZyMdgzSr7a-KV21yUbq7aJVsE.roa
File: MYZyMdgzSr7a-KV21yUbq7aJVsE.roa (raw, json)
Hash identifier: DPecZ820uMVkSR+/EkO570y1NlpdtcLm3zJ55JB4R3s=
Subject key identifier: 31:86:72:31:D8:33:4A:BE:DA:F8:A5:76:D7:25:1B:AB:B6:89:56:C1
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019EA79F88B86D07145910C7958B753C4CB7
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MYZyMdgzSr7a-KV21yUbq7aJVsE.roa
Signing time: Mon 08 Jun 2026 14:25:10 +0000
ROA not before: Mon 08 Jun 2026 14:25:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 194.68.123.0/24 maxlen: 24
194.68.128.0/24 maxlen: 24
194.68.130.0/23 maxlen: 23
194.68.133.0/24 maxlen: 24
194.68.135.0/24 maxlen: 24
194.132.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:9f:88:b8:6d:07:14:59:10:c7:95:8b:75:3c:4c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 8 14:25:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31867231d8334abedaf8a576d7251babb68956c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:31:74:2e:6b:0a:6e:1d:17:19:16:92:83:
ed:9d:fe:c7:7b:89:ce:07:04:14:12:2a:58:c4:04:
8c:5e:d7:cb:b0:16:1b:b9:7e:9b:2a:af:38:fc:45:
13:9c:d2:91:ab:78:e6:61:2c:b8:dd:1f:77:82:85:
94:9c:66:cc:f3:f1:d1:c5:4d:b8:14:cd:96:4e:17:
52:f5:09:46:f2:ff:32:14:99:80:d2:50:b4:7d:14:
52:82:5f:ae:6c:78:f1:5d:2e:a7:ba:fa:fa:1a:44:
f8:d7:02:ee:44:60:2b:4b:ed:f2:9e:d1:4f:3c:af:
b8:e6:74:92:fb:df:6c:94:e3:25:42:be:e3:d2:a1:
68:34:6b:32:bd:f1:81:cf:0b:c0:97:9a:93:ce:07:
8a:e1:77:5e:e3:82:e0:99:9a:64:26:dd:96:4f:eb:
44:e4:00:65:70:52:89:aa:be:99:7c:8e:03:f0:57:
c4:13:6d:39:20:f3:09:c2:4a:f2:e7:21:a4:ec:57:
fe:70:17:ef:dd:eb:ed:b8:16:18:7e:30:32:74:37:
ec:38:95:13:11:11:ef:5b:97:3d:7a:28:f4:0b:f9:
20:6a:91:31:cc:40:05:ca:cd:ab:63:c0:fe:d7:fb:
a4:d0:b1:45:3f:35:a8:66:0f:90:35:eb:aa:25:aa:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:86:72:31:D8:33:4A:BE:DA:F8:A5:76:D7:25:1B:AB:B6:89:56:C1
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MYZyMdgzSr7a-KV21yUbq7aJVsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.123.0/24
194.68.128.0/24
194.68.130.0/23
194.68.133.0/24
194.68.135.0/24
194.132.59.0/24
Signature Algorithm: sha256WithRSAEncryption
71:2a:ab:e9:36:c5:62:64:23:15:8f:4b:27:f4:70:db:c1:54:
67:ec:f4:53:28:33:09:7b:3a:8f:e8:7d:33:94:f0:7a:18:b5:
8f:f2:d7:81:da:01:10:06:23:8d:ba:e0:0f:b2:35:19:9c:c9:
ad:1f:4c:62:f1:53:58:1f:ef:8d:2c:72:26:a8:00:7e:87:41:
8c:ea:39:72:11:b9:3a:1b:19:24:99:fc:ac:57:7c:62:41:8d:
3e:b6:31:28:02:d2:70:50:fa:ae:28:8e:dc:3d:df:9a:66:ac:
0e:2d:92:64:69:71:1f:7a:1b:3a:29:2f:00:93:84:6b:5a:6a:
88:a7:37:5d:0a:bf:e9:10:a8:1e:ea:a0:90:61:d1:b0:fa:07:
d3:4b:27:9e:5b:62:65:5d:6b:91:58:ce:f0:5d:71:2a:26:b0:
c3:98:b1:c4:8d:4f:d8:17:30:79:35:d4:89:59:d5:63:98:39:
2b:16:ee:cc:ae:c0:22:20:cd:87:a7:77:21:07:91:88:70:75:
d4:9c:93:c9:47:37:13:bb:64:1e:b5:33:44:73:ee:af:4e:15:
af:03:ee:04:8a:87:69:ff:ad:f3:56:aa:58:79:50:59:3e:2b:
57:6e:51:c5:4a:3d:2c:ba:50:e3:2c:e1:72:2e:f6:87:ce:69:
aa:13:b2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:17:48 2026 by rpki-client