Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/MnpGjUZQnIO4Uw9VLLcUl729zsM.roa
File: MnpGjUZQnIO4Uw9VLLcUl729zsM.roa (raw, json)
Hash identifier: jwaIjNKJinT8ke5jD2UCrz9vXcry4VmiaXXpt0dsMmU=
Subject key identifier: 32:7A:46:8D:46:50:9C:83:B8:53:0F:55:2C:B7:14:97:BD:BD:CE:C3
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 019C98D86FAFA793B14EC296EEE5DB118E47
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/MnpGjUZQnIO4Uw9VLLcUl729zsM.roa
Signing time: Thu 26 Feb 2026 07:27:27 +0000
ROA not before: Thu 26 Feb 2026 07:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210162
IP address blocks: 109.109.164.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:98:d8:6f:af:a7:93:b1:4e:c2:96:ee:e5:db:11:8e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Feb 26 07:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=327a468d46509c83b8530f552cb71497bdbdcec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:c6:83:a3:f8:17:ac:6f:a6:f5:64:ca:c0:
90:a4:9c:c2:46:ec:aa:8a:24:20:13:30:54:d4:fe:
9a:cd:6d:67:f8:1f:b0:4c:98:83:65:30:c9:1b:93:
0c:fe:8c:fd:7b:e0:31:25:93:40:89:6f:4e:ac:d7:
81:99:23:b2:47:f4:33:bd:8f:d4:61:3b:3e:9f:0a:
dc:6b:12:06:7a:bd:54:14:d6:c7:03:d0:07:e5:f6:
e0:74:49:0d:cb:5e:55:ac:6c:d7:e6:b9:5b:79:bd:
3d:80:f9:75:7d:cc:56:84:bb:ec:06:9c:df:02:0e:
13:f0:1c:cd:0c:35:2a:5e:66:35:0f:62:f4:80:d9:
11:4a:62:17:2d:79:b2:96:4f:21:cc:a7:5f:28:40:
d2:43:8b:33:ff:5f:4d:e8:44:68:f4:23:84:a1:c1:
be:b5:84:32:05:02:0b:ef:35:ec:cd:6f:d0:f3:fc:
31:e4:86:75:e9:5e:73:69:d6:3f:78:b6:3d:88:c2:
b2:ae:bf:a5:a5:01:93:cd:93:98:38:eb:8c:a3:d2:
e3:ee:83:a5:80:3f:3d:61:fa:e5:b0:5f:ea:cf:4d:
59:97:95:ea:86:e7:d2:f7:fe:35:97:0e:b1:ee:c3:
27:ed:82:96:77:08:70:94:ef:0d:05:12:57:73:6f:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7A:46:8D:46:50:9C:83:B8:53:0F:55:2C:B7:14:97:BD:BD:CE:C3
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/MnpGjUZQnIO4Uw9VLLcUl729zsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.109.164.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:49:23:ae:c4:de:fe:47:be:13:32:12:4f:ce:c6:89:72:cf:
05:6b:70:ef:73:fb:31:e4:aa:52:68:30:8e:7d:da:02:b8:24:
ba:e7:cc:42:7f:6b:46:d7:9e:1b:6d:d5:99:96:5a:22:91:a7:
83:02:76:54:66:ee:83:bc:95:da:a0:e1:b3:b0:af:1d:c5:61:
f0:69:66:1a:81:6e:d1:4d:ee:d5:c7:de:be:03:50:72:3c:05:
77:b2:b2:bb:51:13:2b:25:41:8a:99:5b:68:79:51:02:e3:92:
10:a3:ae:27:79:3a:8b:4a:3f:7f:05:26:c1:a7:fd:05:1f:a7:
ea:3a:37:df:27:78:09:ea:31:19:2a:96:4a:61:c3:9f:89:ca:
26:2e:cb:4e:ec:5c:24:a3:70:6f:f0:e3:67:64:17:33:aa:a4:
9b:53:93:29:ea:0a:1e:17:00:75:b5:60:e3:54:02:d9:b1:96:
66:cf:1f:d1:bc:15:63:bb:02:e3:23:9d:07:2f:e0:42:45:e0:
40:70:ca:32:e3:91:80:33:f5:f2:a8:66:7c:e2:cf:e3:29:6e:
1e:76:8a:e2:b5:4e:f2:03:f9:c7:2d:c4:5d:84:44:6a:8d:10:
f6:6e:fd:2a:f4:56:e2:90:57:57:86:bf:b3:6b:2b:47:6f:f4:
80:12:a0:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyY2G+vp5OxTsKW7uXbEY5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzNhZTFjNjA2NzJjNzU5MWE4Zjk3ZDY4Zjc5ZmIyYTVl
ZThkYTcwHhcNMjYwMjI2MDcyNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjdhNDY4ZDQ2NTA5YzgzYjg1MzBmNTUyY2I3MTQ5N2JkYmRjZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyXGg6P4F6xvpvVkysCQpJzCRuyq
iiQgEzBU1P6azW1n+B+wTJiDZTDJG5MM/oz9e+AxJZNAiW9OrNeBmSOyR/QzvY/U
YTs+nwrcaxIGer1UFNbHA9AH5fbgdEkNy15VrGzX5rlbeb09gPl1fcxWhLvsBpzf
Ag4T8BzNDDUqXmY1D2L0gNkRSmIXLXmylk8hzKdfKEDSQ4sz/19N6ERo9COEocG+
tYQyBQIL7zXszW/Q8/wx5IZ16V5zadY/eLY9iMKyrr+lpQGTzZOYOOuMo9Lj7oOl
gD89YfrlsF/qz01Zl5XqhufS9/41lw6x7sMn7YKWdwhwlO8NBRJXc2++5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDJ6Ro1GUJyDuFMPVSy3FJe9vc7DMB8GA1UdIwQY
MBaAFDQzrhxgZyx1kaj5fWj3n7Kl7o2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYt
MzBjZTgzNzAxYjM5LzEvTW5wR2pVWlFuSU80VXc5VkxMY1VsNzI5enNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYtMzBjZTgzNzAxYjM5
LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbW2kMA0G
CSqGSIb3DQEBCwUAA4IBAQDRSSOuxN7+R74TMhJPzsaJcs8Fa3Dvc/sx5KpSaDCO
fdoCuCS658xCf2tG154bbdWZlloikaeDAnZUZu6DvJXaoOGzsK8dxWHwaWYagW7R
Te7Vx96+A1ByPAV3srK7URMrJUGKmVtoeVEC45IQo64neTqLSj9/BSbBp/0FH6fq
OjffJ3gJ6jEZKpZKYcOficomLstO7Fwko3Bv8ONnZBczqqSbU5Mp6goeFwB1tWDj
VALZsZZmzx/RvBVjuwLjI50HL+BCReBAcMoy45GAM/XyqGZ84s/jKW4edoritU7y
A/nHLcRdhERqjRD2bv0q9FbikFdXhr+zaytHb/SAEqAt
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:20:10 2026 by rpki-client