Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/MLGX6PKFAJov95ayM4H4o1fBOPk.roa
File: MLGX6PKFAJov95ayM4H4o1fBOPk.roa (raw, json)
Hash identifier: kCCpV0FKUYJ/3ABOM3R4WOgkbb1C7vf01dqO2daoTOU=
Subject key identifier: 30:B1:97:E8:F2:85:00:9A:2F:F7:96:B2:33:81:F8:A3:57:C1:38:F9
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 01A0673DA35D5203A8B5562A64836C3007BF
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/MLGX6PKFAJov95ayM4H4o1fBOPk.roa
Signing time: Thu 03 Sep 2026 12:28:07 +0000
ROA not before: Thu 03 Sep 2026 12:28:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.71.0.0/16 maxlen: 16
31.72.0.0/14 maxlen: 14
31.78.0.0/15 maxlen: 15
31.99.64.0/18 maxlen: 18
31.99.156.0/22 maxlen: 22
31.99.160.0/19 maxlen: 19
31.99.216.0/21 maxlen: 21
31.99.224.0/19 maxlen: 19
178.107.48.0/20 maxlen: 20
178.107.64.0/18 maxlen: 18
185.102.192.0/22 maxlen: 22
185.102.196.0/22 maxlen: 22
185.102.200.0/22 maxlen: 22
194.36.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:3d:a3:5d:52:03:a8:b5:56:2a:64:83:6c:30:07:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Sep 3 12:28:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30b197e8f285009a2ff796b23381f8a357c138f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:e5:0c:55:31:1e:95:8e:35:48:2c:21:26:
ae:88:6b:9f:76:cf:b4:24:dd:40:24:1a:98:3a:e7:
11:ff:1a:60:85:ff:d6:6c:81:83:ac:a0:78:96:92:
8f:40:32:50:98:b2:90:d1:e5:b2:eb:40:98:df:5d:
91:23:d3:b2:7b:fe:44:8e:0e:53:3a:7f:01:41:04:
0a:a0:6c:03:ce:b6:ff:ac:52:b5:d7:74:01:41:e0:
2f:f6:74:89:f6:6f:18:48:5c:bb:de:eb:52:86:23:
09:bd:19:70:d9:e8:be:48:98:f3:42:7e:eb:55:59:
0e:6f:5f:38:b1:cc:3c:44:2c:55:83:36:4f:b2:8a:
c8:83:b8:3c:f0:d8:d0:8a:69:72:ec:38:5a:83:14:
90:a2:9a:23:9d:d1:24:df:a4:ff:29:71:bd:05:b9:
3f:52:f5:62:a6:08:3e:34:d8:72:91:72:a2:86:51:
8e:98:7e:a2:43:2d:e6:7e:42:03:d2:a3:5a:30:f1:
a4:4b:83:8e:32:a4:b7:d8:b7:65:fc:db:ac:23:ac:
bf:4b:6f:af:62:32:de:28:74:32:5b:a9:80:52:ee:
88:bd:4e:72:c6:24:1b:d7:52:d6:02:bc:8a:3f:a3:
a3:36:59:a8:97:a1:c5:bc:52:ae:8a:29:91:db:94:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B1:97:E8:F2:85:00:9A:2F:F7:96:B2:33:81:F8:A3:57:C1:38:F9
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/MLGX6PKFAJov95ayM4H4o1fBOPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.71.0.0-31.75.255.255
31.78.0.0/15
31.99.64.0/18
31.99.156.0-31.99.191.255
31.99.216.0-31.99.255.255
178.107.48.0-178.107.127.255
185.102.192.0-185.102.203.255
194.36.212.0/22
Signature Algorithm: sha256WithRSAEncryption
39:fd:9e:44:53:bf:fa:33:16:bd:bf:e7:ff:1f:0d:1f:f1:11:
0d:d5:9d:45:de:a3:99:19:86:03:40:0d:75:21:77:f5:b0:a1:
97:53:40:96:b4:3f:e5:75:ef:92:ca:a5:90:22:c1:f4:2f:93:
0a:83:6b:88:8b:a3:35:c7:80:59:ff:a5:29:8b:72:34:ce:13:
c8:a8:2f:1e:12:11:5e:53:d0:77:46:46:de:4a:4a:e7:bb:82:
5e:0b:3c:ea:4f:9d:50:1f:02:ab:e2:a8:9a:e4:07:fb:4a:a5:
3f:8c:5f:79:e1:ec:93:cd:3d:be:29:eb:45:5f:ac:c2:cb:95:
c0:40:12:83:95:42:81:f7:97:ad:0c:98:61:5e:ea:ff:c1:b2:
f4:05:07:ac:70:62:84:35:85:db:50:2c:32:51:3b:55:2f:19:
a7:55:0a:68:f7:c7:c3:e3:81:82:28:c4:83:99:d8:2a:d2:e3:
76:d5:b8:19:ee:e5:be:a9:8b:69:57:25:2c:8a:c8:0f:be:b4:
bb:d8:64:b1:2c:b3:a5:86:6f:8f:56:ce:a3:b6:f8:31:2f:22:
84:88:26:40:71:0c:45:54:db:ea:b1:b6:f2:35:09:cb:e7:4a:
fe:f2:7c:5d:63:63:59:24:7b:94:5b:40:1b:3f:c0:e4:c4:b6:
42:7d:4a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:57:14 2026 by rpki-client