Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/MgNwPtCHVoXq26ziXi4XCeOpn1w.roa
File: MgNwPtCHVoXq26ziXi4XCeOpn1w.roa (raw, json)
Hash identifier: mKi4kjp7jBecYdk8/OOE54dWV63q46znt2VONEmFGfI=
Subject key identifier: 32:03:70:3E:D0:87:56:85:EA:DB:AC:E2:5E:2E:17:09:E3:A9:9F:5C
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0AE8BBAAF8F9379E0F0C7F11F4E607151
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/MgNwPtCHVoXq26ziXi4XCeOpn1w.roa
Signing time: Thu 17 Sep 2026 08:46:27 +0000
ROA not before: Thu 17 Sep 2026 08:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402840
IP address blocks: 109.66.179.0/24 maxlen: 24
109.66.214.0/24 maxlen: 24
109.66.218.0/24 maxlen: 24
109.66.223.0/24 maxlen: 24
109.66.225.0/24 maxlen: 24
109.66.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:8b:ba:af:8f:93:79:e0:f0:c7:f1:1f:4e:60:71:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 17 08:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3203703ed0875685eadbace25e2e1709e3a99f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:b2:45:6a:b6:3d:49:e2:8c:2f:77:f4:a0:
81:58:19:aa:99:72:8f:79:ff:9d:07:8d:a8:03:45:
28:de:d9:4d:76:c0:7b:d2:20:f7:85:89:d5:67:5a:
dc:7c:4e:6c:6a:8e:06:5c:ce:be:62:2d:43:cb:5d:
5a:eb:45:42:2a:fb:79:7b:87:39:92:92:6f:49:93:
b8:ed:4c:e0:4e:d8:dc:d9:35:87:28:fb:ff:2a:c0:
32:a0:86:4a:b8:bd:f5:c3:79:56:8e:53:9f:4e:b8:
fb:d5:71:8c:83:bf:14:8e:25:16:4c:ac:1a:2f:31:
bf:fb:e7:96:0b:1c:23:c3:ce:03:8d:2e:35:62:24:
4d:04:a7:83:4f:8d:51:09:3d:62:71:4b:5d:26:10:
7a:69:4e:2c:c4:96:2f:9c:3f:74:29:3f:ba:69:f7:
66:1f:d7:be:27:c9:88:71:c0:18:9a:d0:03:44:83:
4d:75:26:da:a8:fb:40:18:9a:04:f9:9f:55:08:85:
17:f1:4b:03:64:5b:1b:85:a6:54:5e:6b:57:c0:30:
30:15:a4:84:33:b0:fb:4f:23:c3:f6:75:52:f8:d3:
05:a1:43:60:53:30:c2:d0:4b:4f:a9:94:43:8a:93:
e1:a9:6f:96:f6:d7:f4:16:a3:04:ea:b2:d6:83:4d:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:03:70:3E:D0:87:56:85:EA:DB:AC:E2:5E:2E:17:09:E3:A9:9F:5C
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/MgNwPtCHVoXq26ziXi4XCeOpn1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.179.0/24
109.66.214.0/24
109.66.218.0/24
109.66.223.0/24
109.66.225.0/24
109.66.231.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4d:fd:8c:fb:ca:da:13:bf:e0:77:f6:bf:13:18:74:c5:dd:
25:ef:8f:d9:0a:37:fb:e4:a7:e2:68:21:3b:d1:f2:52:4a:ef:
ab:70:62:fe:e5:c8:e0:7f:59:4d:a2:ac:b2:89:81:44:b5:f1:
85:01:a6:f2:0f:84:82:4b:4b:65:74:25:58:3d:0e:81:c0:39:
24:98:53:1a:7b:f5:68:3d:87:ad:dd:9e:0d:c9:96:7d:cb:a4:
2c:86:a2:cf:dd:e1:93:16:32:20:0e:66:a9:68:67:59:12:15:
b0:04:16:6a:12:5f:35:35:9d:7b:8e:2e:a8:20:9a:4b:b4:d9:
ea:eb:8f:c3:2b:69:31:ee:f0:4f:64:cc:ed:24:ca:23:90:b1:
a9:42:78:d4:5f:fb:65:e3:06:a4:7a:4e:97:60:29:3e:bc:1c:
8c:ab:19:ae:c0:b7:1a:1a:1b:1d:6a:db:eb:69:a1:b3:74:22:
25:8e:b1:2e:55:ca:62:4c:ff:8b:57:1f:94:ec:83:20:89:da:
de:58:ca:53:fd:91:f7:18:18:41:58:87:bb:6f:9c:bf:66:86:
07:1a:da:1c:a3:ff:28:5a:eb:28:c8:a6:72:d7:75:f4:5c:22:
15:6e:32:91:15:c4:b0:53:a9:aa:65:60:aa:32:08:65:0b:35:
35:75:3a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:56:28 2026 by rpki-client