Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/p-MPHuSWGSGKU-iV508LoDaNCco.roa
File: p-MPHuSWGSGKU-iV508LoDaNCco.roa (raw, json)
Hash identifier: 37cZvENTegpVmdQDSXghqou7ADx6Hi6odF6Ut6YKWlo=
Subject key identifier: A7:E3:0F:1E:E4:96:19:21:8A:53:E8:95:E7:4F:0B:A0:36:8D:09:CA
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019D976216E160E7D41B4011E04FA9B7D7EC
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/p-MPHuSWGSGKU-iV508LoDaNCco.roa
Signing time: Thu 16 Apr 2026 17:41:20 +0000
ROA not before: Thu 16 Apr 2026 17:41:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 93.114.187.0/24 maxlen: 24
188.215.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:62:16:e1:60:e7:d4:1b:40:11:e0:4f:a9:b7:d7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Apr 16 17:41:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7e30f1ee49619218a53e895e74f0ba0368d09ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:1a:b4:d4:d8:19:b2:d3:99:f5:39:a8:3e:
da:11:a2:c1:68:aa:c0:2c:9f:3b:b1:86:c0:dc:fc:
3b:3e:be:0a:7f:b8:05:e0:d2:d1:26:02:3d:ca:82:
47:42:89:ae:3e:1a:b6:6d:58:ed:dd:10:2b:a9:e7:
ba:2e:5a:a9:09:bf:e2:90:46:04:e3:b3:1a:f6:38:
72:7f:cb:b0:30:9f:96:1b:33:59:98:c5:0a:c7:46:
96:e7:54:e8:11:54:ac:3d:dd:9d:35:2b:3a:e3:5e:
39:84:38:a1:76:bb:32:00:bd:63:6f:e3:63:49:17:
00:91:5e:12:bd:e1:59:3b:cb:2b:b6:b2:9a:5d:21:
fc:56:c9:01:d4:6c:94:bc:4f:13:a9:e8:e3:55:2c:
45:1b:29:3e:ba:fb:9a:c5:9c:91:a1:ce:07:54:21:
63:93:5a:df:0c:91:fc:33:06:51:05:2a:9a:91:5c:
4c:30:9d:36:1b:6a:8a:15:e4:f7:ea:77:fb:09:ba:
a7:ad:64:64:0c:2e:65:52:71:7c:4c:21:45:8e:ce:
41:62:b7:b3:e9:f6:3f:a2:fd:61:57:5b:1c:b6:77:
a4:8d:6d:69:74:a0:96:83:fd:e0:75:86:8f:08:b6:
d8:ec:93:83:49:7d:b8:b3:a7:14:a7:7d:d7:be:eb:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E3:0F:1E:E4:96:19:21:8A:53:E8:95:E7:4F:0B:A0:36:8D:09:CA
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/p-MPHuSWGSGKU-iV508LoDaNCco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.187.0/24
188.215.72.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3f:97:4b:6c:38:99:71:ae:45:24:34:ba:7f:27:62:05:a2:
59:44:a5:1d:18:f9:e4:35:83:21:62:6c:35:c3:29:e6:8f:c4:
23:48:1c:6a:d5:2d:00:d2:86:9d:19:65:8a:a7:46:5f:79:f7:
12:4b:56:55:1a:fa:1b:56:db:45:ad:db:f9:9c:86:4d:1c:6e:
03:91:b0:fb:7e:9e:06:de:f8:d5:63:e4:13:91:be:cc:37:95:
d5:ea:eb:75:b8:50:77:45:13:f2:73:cd:db:a7:f9:07:76:29:
cb:a8:5c:60:6b:dd:1c:81:40:24:a6:a5:b4:96:87:00:b4:4d:
a4:e4:17:52:97:62:07:1c:11:6f:59:96:5d:38:fb:97:d0:ea:
9b:e7:08:97:f5:70:bd:c3:72:01:8e:6b:05:ee:6d:1a:a0:69:
80:24:99:e1:9e:4b:b8:1a:58:50:a3:3a:d4:34:bb:a8:5b:f6:
f4:6e:21:bf:eb:4e:77:fb:bf:12:4c:05:19:6e:17:f8:fa:56:
4b:9c:fc:41:e7:30:b5:b1:fd:e3:57:26:f7:90:38:f5:0a:11:
58:1d:d8:34:df:06:95:59:b8:02:30:95:54:85:86:1c:8e:d1:
35:14:90:10:07:39:a3:d4:3a:1f:e3:2a:1c:32:62:c8:e5:44:
af:2b:fc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:52 2026 by rpki-client