Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/MXiJymlWnPv8K0_SYeg14AvCims.roa
File: MXiJymlWnPv8K0_SYeg14AvCims.roa (raw, json)
Hash identifier: VJrJz4Yf0xl1z5pYVZXPPsSfyBh8RWLcRUu/3SlQW5M=
Subject key identifier: 31:78:89:CA:69:56:9C:FB:FC:2B:4F:D2:61:E8:35:E0:0B:C2:8A:6B
Certificate issuer: /CN=1aed0204ff51f289421854fa62b3c231c35eaf6c
Certificate serial: 019F236887429994494824C6B40063F14938
Authority key identifier: 1A:ED:02:04:FF:51:F2:89:42:18:54:FA:62:B3:C2:31:C3:5E:AF:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/MXiJymlWnPv8K0_SYeg14AvCims.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6848
IP address blocks: 193.149.246.0/24 maxlen: 24
193.149.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:87:42:99:94:49:48:24:c6:b4:00:63:f1:49:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aed0204ff51f289421854fa62b3c231c35eaf6c
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=317889ca69569cfbfc2b4fd261e835e00bc28a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:b0:66:7c:0a:aa:5a:c7:b6:19:95:08:c0:
6b:a3:40:27:55:80:c3:40:3b:e9:7e:d1:aa:c8:00:
cb:77:fa:c7:f4:e3:07:f5:aa:64:be:c8:f1:93:09:
de:11:e4:7b:92:bb:21:90:e2:5a:47:25:c7:f6:8c:
13:30:f7:4d:e7:df:53:5c:2c:8d:d9:11:0f:32:74:
1d:89:8e:8d:bc:f8:7d:11:98:11:34:f8:14:07:b7:
17:02:97:f2:1c:0b:0a:26:a8:66:4e:50:7a:42:4f:
55:80:34:1f:75:38:b7:ef:bb:fc:ce:b2:bf:9e:aa:
3e:17:c9:1b:75:11:28:82:39:5f:53:3c:9b:0e:7a:
61:6a:72:ce:d3:c7:6b:40:27:e5:51:eb:44:a0:bb:
27:5f:0e:97:8c:43:82:7e:c9:01:ba:72:43:30:c2:
89:c4:90:c3:f2:83:53:6c:0e:44:dd:3e:de:58:e5:
88:48:c3:20:f1:dd:68:72:7b:60:02:d0:2a:a5:92:
32:22:4b:fe:8f:17:04:9e:76:6d:cc:3f:13:15:e6:
e0:87:87:0c:70:55:23:f2:7c:d3:fe:01:52:5f:a5:
d5:f8:d7:07:f7:27:21:c4:23:7f:d6:f3:aa:0d:eb:
8c:38:82:9e:32:f2:53:d1:21:9c:62:91:a9:2e:96:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:78:89:CA:69:56:9C:FB:FC:2B:4F:D2:61:E8:35:E0:0B:C2:8A:6B
X509v3 Authority Key Identifier:
keyid:1A:ED:02:04:FF:51:F2:89:42:18:54:FA:62:B3:C2:31:C3:5E:AF:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/MXiJymlWnPv8K0_SYeg14AvCims.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.246.0/23
Signature Algorithm: sha256WithRSAEncryption
93:a1:0f:3a:b5:ca:2e:51:5d:4d:f6:f4:51:90:bf:58:e4:6d:
51:6b:c7:04:07:47:9f:f9:6e:52:1f:e7:94:6b:e5:40:d2:bc:
47:93:9d:05:70:1f:0a:f3:f6:69:41:01:ee:9e:56:d7:78:00:
20:8b:57:dd:f5:9a:ff:8e:42:86:a4:40:fe:e0:2a:d4:5f:ca:
fd:3d:93:bb:d9:85:cf:b4:10:e9:14:18:ec:02:59:1a:eb:57:
1a:12:e8:b2:ce:d3:53:ec:d8:0f:ce:33:e5:c2:98:57:19:7f:
67:ad:e1:10:2e:45:34:a5:b6:4a:f1:78:62:cf:43:b0:21:ab:
35:f0:10:73:27:10:c9:0d:ff:82:0c:01:08:10:e8:c0:32:d9:
4e:eb:ab:22:21:0c:a2:f2:61:65:77:12:88:4d:1a:a8:37:c7:
af:a8:24:e3:7a:b5:75:77:aa:cc:1a:be:29:d9:9a:ba:ea:ee:
bd:86:15:e9:76:e1:a8:d7:6e:94:20:30:fc:fc:b6:82:c4:96:
2b:f0:55:22:7b:da:7e:1f:e7:51:2b:88:64:99:cb:31:03:5b:
d4:12:54:53:a4:ce:17:6d:a6:f0:60:56:25:72:49:5b:1a:fd:
4e:79:a8:a2:7e:d3:a8:5d:03:60:fa:95:fb:e0:bc:47:76:2a:
37:85:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:29:31 2026 by rpki-client