Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/MgKqc1aKvwt_F0DsLE--UTJHQcA.roa
File: MgKqc1aKvwt_F0DsLE--UTJHQcA.roa (raw, json)
Hash identifier: +BChKL+YmtQ67SHBWUTbFvOW0BIZ913gq5gwRTYNuUo=
Subject key identifier: 32:02:AA:73:56:8A:BF:0B:7F:17:40:EC:2C:4F:BE:51:32:47:41:C0
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 01A0F66D15122B9B188C4DDBE392919DA962
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/MgKqc1aKvwt_F0DsLE--UTJHQcA.roa
Signing time: Thu 01 Oct 2026 07:45:38 +0000
ROA not before: Thu 01 Oct 2026 07:45:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 14.102.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:6d:15:12:2b:9b:18:8c:4d:db:e3:92:91:9d:a9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Oct 1 07:45:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3202aa73568abf0b7f1740ec2c4fbe51324741c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:31:ce:c6:0e:7b:20:94:c5:87:5d:e9:30:1e:
b2:07:b4:ff:dd:8d:21:2f:71:40:43:88:72:a8:81:
ad:af:ca:61:d6:c1:60:d1:29:e9:35:15:ce:21:19:
84:51:5f:f0:de:56:5e:58:ca:06:da:ec:8a:92:bf:
fc:55:f6:0f:f5:b4:39:02:36:e2:36:c7:61:30:ac:
2c:e1:51:16:48:33:59:a4:3b:62:c1:14:4c:fa:81:
c4:9f:19:4d:b6:21:a1:d9:8c:27:9e:2a:b4:5b:ad:
7e:1b:c8:ff:b7:22:6c:44:d9:5a:c7:fb:67:b1:30:
41:61:e9:6d:ea:a9:ba:cf:a0:7e:7a:2b:6d:06:d8:
57:c6:6c:58:d6:4f:02:0d:1d:63:3e:b4:57:59:1e:
2f:b6:e2:03:cc:8d:c4:26:b3:a7:4e:fa:ad:4a:3e:
e4:67:01:20:2c:95:8a:95:c4:0f:8a:85:37:ff:0b:
09:5a:83:fe:ac:e9:2e:60:5c:52:65:ae:e4:bd:b3:
7a:6d:3a:97:ab:08:1e:d3:c0:d4:d5:df:f5:42:07:
74:d9:d4:c3:3d:d8:87:a9:49:3b:11:6c:a5:7a:ca:
0a:24:a9:11:d6:9c:c4:8f:e3:70:b4:b1:9c:05:6b:
8e:21:78:3f:e2:5e:22:d5:e5:34:b3:b6:51:5e:4a:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:02:AA:73:56:8A:BF:0B:7F:17:40:EC:2C:4F:BE:51:32:47:41:C0
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/MgKqc1aKvwt_F0DsLE--UTJHQcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:86:d4:ef:99:8d:c8:36:4d:90:09:1f:f3:f1:ea:82:9e:ca:
40:d5:6f:2c:2e:a8:5e:23:46:c3:76:4c:68:e3:60:11:ae:59:
64:72:74:39:4b:ef:c0:b5:97:ef:81:52:e3:c5:7b:de:1d:ca:
d3:92:f5:a6:9e:8c:a9:42:a5:41:34:0b:b0:50:17:82:8c:e0:
c8:16:3e:14:f2:77:c3:bd:e5:58:0c:5b:43:fc:46:92:2b:7f:
9f:bd:21:59:b4:58:eb:88:ce:3f:9a:e1:6a:79:66:12:5d:ec:
62:42:9a:e2:bb:81:92:b8:ce:74:a2:ef:72:70:67:c9:42:3c:
12:7a:e0:63:5a:9b:fe:08:ee:b7:71:e5:86:0f:72:96:38:9a:
91:d6:d0:1e:8f:af:84:6f:e8:2e:03:37:d8:8a:76:2b:dd:30:
fa:0a:18:b3:84:45:97:19:04:f7:a6:14:de:92:7a:64:1e:87:
3a:0b:95:3d:7d:aa:ad:c5:43:fe:7f:5b:1a:93:d3:d4:c5:49:
9c:4c:de:5b:56:16:3f:e6:83:95:9a:35:a0:c5:91:0d:c9:a8:
1c:02:10:22:fb:c3:a5:97:58:b2:2b:c7:5f:ea:d5:20:f2:ff:
f3:21:1b:c9:ea:8c:97:9f:86:b5:99:a7:ed:8d:9c:98:3e:7f:
7d:19:c9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:27 2026 by rpki-client