Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/MJGFQhwjD7SZGpwHj1J0ylMUdt4.roa
File: MJGFQhwjD7SZGpwHj1J0ylMUdt4.roa (raw, json)
Hash identifier: 69TBSVWjdAmII84vUfvpkFjJjCfIOngJEvJnmmX3Fcg=
Subject key identifier: 30:91:85:42:1C:23:0F:B4:99:1A:9C:07:8F:52:74:CA:53:14:76:DE
Certificate issuer: /CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Certificate serial: 019B7F15A9C35E572B6060DDFB278EDAFC16
Authority key identifier: 2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/MJGFQhwjD7SZGpwHj1J0ylMUdt4.roa
Signing time: Fri 02 Jan 2026 14:21:24 +0000
ROA not before: Fri 02 Jan 2026 14:21:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57760
IP address blocks: 176.107.16.0/24 maxlen: 24
176.107.17.0/24 maxlen: 24
176.107.18.0/24 maxlen: 24
176.107.19.0/24 maxlen: 24
176.107.20.0/24 maxlen: 24
176.107.21.0/24 maxlen: 24
176.107.22.0/24 maxlen: 24
176.107.23.0/24 maxlen: 24
176.107.24.0/24 maxlen: 24
176.107.26.0/24 maxlen: 24
176.107.27.0/24 maxlen: 24
176.107.30.0/24 maxlen: 24
176.107.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:a9:c3:5e:57:2b:60:60:dd:fb:27:8e:da:fc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Validity
Not Before: Jan 2 14:21:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=309185421c230fb4991a9c078f5274ca531476de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:e7:75:47:e0:98:4b:7b:80:86:e3:57:b3:
f1:bc:93:9f:96:af:ed:42:46:a5:c2:cf:70:6f:0a:
30:ce:7e:f3:45:53:23:76:ce:54:b9:d7:ce:d9:2c:
d6:67:64:d7:99:85:96:7d:07:e0:d0:2c:70:67:22:
e8:12:13:ce:f2:7c:7e:56:a4:73:0d:46:12:0f:ba:
29:70:52:6e:d1:c2:43:d5:9e:88:fa:cb:f8:23:c3:
cb:0a:29:e0:aa:33:a0:3b:40:fc:21:f3:ec:a7:f4:
19:15:9e:5c:81:5e:02:af:1b:fc:40:b1:9e:89:47:
2d:13:c4:1d:2a:b0:a2:b0:bb:90:6c:71:05:8e:14:
62:2d:18:44:09:e4:82:fe:a2:9c:f6:c9:d4:64:1f:
3a:8a:e1:a3:93:bf:72:fb:1a:50:ad:f6:70:cc:44:
fd:ae:b5:8e:3e:de:f6:df:03:3f:77:6d:9c:ec:d5:
41:d4:41:49:f6:97:5c:a2:63:b9:d5:c6:d6:9b:9a:
65:40:f2:b8:68:f2:32:2b:e3:9c:b8:12:24:c7:d7:
00:df:d0:d0:a3:4a:b5:c7:5b:80:67:91:57:8e:f2:
58:12:cf:6b:53:e4:b1:c5:46:33:43:1e:6a:87:d5:
42:fb:cd:04:75:be:5a:54:95:22:33:c2:f3:f6:5c:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:91:85:42:1C:23:0F:B4:99:1A:9C:07:8F:52:74:CA:53:14:76:DE
X509v3 Authority Key Identifier:
keyid:2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/MJGFQhwjD7SZGpwHj1J0ylMUdt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.107.16.0-176.107.24.255
176.107.26.0/23
176.107.30.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:b8:53:dd:eb:9f:41:be:62:2b:c6:18:69:88:d9:df:ca:0b:
09:bb:42:77:39:5a:b6:6e:e2:c7:8e:f2:ce:0f:7b:4c:ba:30:
51:1e:34:d8:fa:fb:3b:c8:b0:42:03:65:84:0c:2e:fd:61:77:
cd:0f:3a:54:05:61:5f:75:17:c7:89:58:a5:0c:84:32:b9:8c:
7a:f9:20:f1:3f:88:e3:73:0a:c2:f0:e4:8f:c1:a5:1c:e4:df:
f5:58:70:d6:9e:37:1d:e0:1a:4e:4c:63:3d:2f:55:bd:e0:fa:
44:6d:9f:ee:43:f3:59:d3:f9:28:e1:e4:01:9d:9a:56:42:a3:
4f:21:71:54:c5:b5:ec:6c:2f:58:87:b1:cc:49:15:cb:98:7d:
e3:91:08:17:21:ee:81:a6:ac:b8:ed:b4:e8:5b:55:90:b5:7e:
ba:ea:cd:e4:12:07:26:9d:57:94:af:42:45:70:d0:05:4d:45:
9c:fc:1d:f9:d7:8c:b2:81:84:94:a9:6f:ef:81:ce:c7:72:4f:
e4:57:99:da:8f:f6:7d:f0:01:d6:bc:40:a6:47:e6:20:1b:77:
7a:1e:75:a3:73:7c:0c:82:d7:d9:7b:88:03:c0:6b:75:a1:40:
8c:e5:0f:15:d6:3d:8f:28:50:b8:ac:4b:81:14:8e:d4:3d:11:
fe:06:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:50:18 2026 by rpki-client