Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1MGAoO65S-8o1DfsFht6H47ZdnI.roa
File: 1MGAoO65S-8o1DfsFht6H47ZdnI.roa (raw, json)
Hash identifier: VckaLns+OjIaqn2MZqzg4f4bDnzGGCMojCAZo7pyVxg=
Subject key identifier: D4:C1:80:A0:EE:B9:4B:EF:28:D4:37:EC:16:1B:7A:1F:8E:D9:76:72
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C3F993EBE10B3F21EE77C8C84AC24EFB9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1MGAoO65S-8o1DfsFht6H47ZdnI.roa
Signing time: Sun 08 Feb 2026 23:32:13 +0000
ROA not before: Sun 08 Feb 2026 23:32:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206264
IP address blocks: 5.231.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:3f:99:3e:be:10:b3:f2:1e:e7:7c:8c:84:ac:24:ef:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 8 23:32:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4c180a0eeb94bef28d437ec161b7a1f8ed97672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:b7:79:1a:57:1b:b1:27:61:0f:75:bb:ad:
bb:e7:b6:34:a7:b7:55:c0:41:ce:d2:b0:3f:3c:db:
a0:fa:09:e0:f6:76:fe:b2:cf:ca:58:d9:6c:9b:67:
af:85:0f:29:79:d0:eb:ae:1b:fe:6a:f2:d1:a2:d2:
a3:e6:51:a4:51:ec:18:39:e5:f5:4a:ae:4c:82:41:
ba:31:84:4d:ed:22:80:78:b3:d5:47:18:7f:0e:a0:
87:67:e1:f8:af:c2:d2:5f:34:40:9d:3b:93:f6:78:
fe:d9:24:0b:ed:e5:8a:0c:70:b4:e4:53:94:21:25:
d1:20:1d:16:8c:67:68:d4:42:2c:9f:a2:7e:7c:94:
9b:b9:92:8f:2e:f5:4a:a5:df:5d:87:51:fa:ff:61:
b4:28:1a:dc:6d:b6:cc:d1:57:ee:d5:8c:f2:8e:d9:
30:b5:92:ae:19:1b:2c:5b:36:be:8a:b8:e7:e6:5d:
c2:af:a1:56:69:80:00:89:5d:8a:e1:af:da:5b:46:
43:19:e0:f1:21:3f:48:fc:f6:dd:2f:96:f1:89:b7:
9d:3f:5d:14:e0:5e:f3:a0:1b:1c:7e:5f:ca:53:ac:
7b:38:cf:52:19:c9:c7:08:c5:63:b7:25:15:ab:5d:
b5:7b:0c:27:5e:5e:dd:61:f2:c9:29:fc:34:2c:3c:
48:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C1:80:A0:EE:B9:4B:EF:28:D4:37:EC:16:1B:7A:1F:8E:D9:76:72
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1MGAoO65S-8o1DfsFht6H47ZdnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.254.0/24
Signature Algorithm: sha256WithRSAEncryption
54:0d:c3:04:de:e4:a7:a5:a6:dd:42:e1:4e:c0:24:6d:55:54:
2b:bd:0a:7a:1a:54:1d:f0:e7:0b:3c:0a:1b:66:62:8d:e4:a2:
66:02:a2:cc:d8:68:d3:a2:b5:a0:17:b1:05:cd:34:cd:cb:23:
1c:02:20:97:ec:f2:95:cf:f7:36:a0:ad:8e:28:51:ea:01:c1:
22:36:fa:6f:a2:58:3d:2a:02:65:39:98:34:e2:7f:ef:7d:fb:
44:47:ea:2f:b5:70:d3:82:6b:51:ac:88:29:94:1e:13:ea:46:
87:e5:d9:11:e0:c9:e4:8c:43:b8:c0:56:7a:a2:cd:20:24:91:
ea:cf:1b:5f:fd:72:ca:1d:af:45:62:47:89:b6:21:eb:0e:16:
bf:39:f5:6c:ac:69:c6:a5:21:de:7f:8f:16:68:d7:6b:8a:ee:
86:c6:23:53:b3:c3:be:bb:1b:83:9c:74:7e:c1:2d:ff:ef:96:
89:6d:0f:83:e4:2d:59:18:0c:07:40:d4:f5:45:57:4c:6d:81:
0e:42:f9:53:bb:e4:85:48:ec:db:ec:ed:58:46:d6:5f:99:16:
fe:a2:d8:24:2b:59:be:9e:8b:6a:18:f3:04:ba:c2:b6:7d:ff:
7a:c5:38:f6:c0:ef:55:ee:19:4c:b3:06:8b:1e:ed:6b:5d:5a:
3a:13:16:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:07:24 2026 by rpki-client