Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/MGVQ1Pe4Bbjksh7RxAPXKFi-gns.roa
File: MGVQ1Pe4Bbjksh7RxAPXKFi-gns.roa (raw, json)
Hash identifier: oq6oMuIa+sh8k3n0YT4iJn2bOtl8Pkfdnf7oFH+xs4w=
Subject key identifier: 30:65:50:D4:F7:B8:05:B8:E4:B2:1E:D1:C4:03:D7:28:58:BE:82:7B
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 019C944579C0FD91F95CDCB292A3B19FBF52
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/MGVQ1Pe4Bbjksh7RxAPXKFi-gns.roa
Signing time: Wed 25 Feb 2026 10:08:26 +0000
ROA not before: Wed 25 Feb 2026 10:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 86.110.34.0/24 maxlen: 24
86.110.46.0/24 maxlen: 24
86.110.58.0/24 maxlen: 24
86.110.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:45:79:c0:fd:91:f9:5c:dc:b2:92:a3:b1:9f:bf:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Feb 25 10:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=306550d4f7b805b8e4b21ed1c403d72858be827b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1d:f3:56:e9:dc:e5:dd:c5:2c:3e:63:cc:5d:
1e:12:d2:29:2b:f3:98:2c:b9:e6:16:4e:c4:4b:e6:
2c:e6:d3:45:ab:5d:88:0c:ff:e0:9a:78:f1:f6:03:
c4:a3:44:97:bc:19:0d:8b:bd:a6:a4:68:d8:31:86:
fe:0b:3f:66:3c:70:b1:f1:95:fe:42:b8:a8:4f:09:
09:d8:77:bc:ba:b7:76:1d:02:f2:75:ff:7d:6a:92:
a8:a3:f0:47:ec:15:3b:9e:6d:c1:d0:34:6f:fe:da:
79:d2:ad:23:1d:02:6f:31:f2:9e:41:7d:a9:9c:94:
d8:73:4c:13:dd:b4:fa:d7:ae:5c:63:60:1a:35:a9:
f1:23:2f:9c:8b:3c:f8:ea:ca:78:db:aa:76:d2:99:
b2:e2:73:94:e3:51:96:0d:ea:0b:23:e5:2a:61:b5:
8b:8f:ec:f8:b3:84:aa:51:c5:98:75:0b:95:1f:92:
39:a1:e5:77:74:07:a0:98:8e:85:4d:da:02:87:ef:
91:25:49:40:54:fa:02:1b:ee:d2:eb:ea:8a:a3:5d:
c4:1b:a1:e4:a4:da:1c:91:01:7d:d6:e7:5d:cc:83:
72:88:50:8a:cc:91:81:48:22:3c:63:ed:a9:e0:b4:
8e:3d:3a:4f:0d:c3:a2:51:ab:9f:e8:e0:bd:65:7b:
f7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:65:50:D4:F7:B8:05:B8:E4:B2:1E:D1:C4:03:D7:28:58:BE:82:7B
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/MGVQ1Pe4Bbjksh7RxAPXKFi-gns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.34.0/24
86.110.46.0/24
86.110.58.0/24
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
81:07:78:2c:18:dd:5b:76:92:16:2b:d1:f0:b1:fc:ab:19:36:
91:fd:eb:67:83:b3:e5:4f:fe:e9:ef:c9:8b:00:4a:b7:f4:bc:
ac:2d:fc:df:61:19:5b:00:47:0a:3c:d0:e8:c7:c6:ec:d5:64:
30:00:74:0a:26:4b:a5:77:bc:e8:1c:ea:8a:8e:5a:73:bb:6e:
73:75:c1:8c:28:63:89:3a:61:b3:7a:d3:26:fd:0a:13:90:d7:
39:ff:17:02:7a:84:cd:cf:d8:50:f0:c1:e1:fc:0e:99:4c:d9:
56:41:f6:48:e3:4d:b4:3f:bb:63:63:53:1b:da:e2:73:e9:4b:
ad:63:61:e5:dd:5a:1c:61:ed:59:eb:08:21:14:da:4d:bf:32:
0d:63:4e:5d:f6:f5:01:5f:f3:30:dd:2a:87:a6:5f:4b:39:c5:
2d:85:eb:cb:2c:fd:7d:5c:bd:63:10:ce:5d:f0:e8:10:c1:b0:
17:86:1f:3e:4a:69:ec:8e:a8:99:fb:ae:22:bd:95:82:ec:3d:
d5:0c:92:a4:8d:5c:43:7c:95:66:85:f8:32:8b:aa:48:84:97:
56:88:5d:ad:ae:06:dc:dd:6d:08:cd:c4:c7:b9:18:87:9d:e7:
ae:ed:16:80:04:64:96:aa:91:ce:ed:ab:08:58:ff:80:73:de:
fa:e8:0b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:52 2026 by rpki-client