Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/MGITdBT_mxm4WlyWxD79Z-VCNpk.roa
File: MGITdBT_mxm4WlyWxD79Z-VCNpk.roa (raw, json)
Hash identifier: KyFvnzDtqISFjz8MPgkpStOkwTXWrsQ6+mNemr98Y5A=
Subject key identifier: 30:62:13:74:14:FF:9B:19:B8:5A:5C:96:C4:3E:FD:67:E5:42:36:99
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 01A187713BFA422748C0959C9109246DF97F
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/MGITdBT_mxm4WlyWxD79Z-VCNpk.roa
Signing time: Thu 29 Oct 2026 11:35:07 +0000
ROA not before: Thu 29 Oct 2026 11:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 185.30.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:71:3b:fa:42:27:48:c0:95:9c:91:09:24:6d:f9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Oct 29 11:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3062137414ff9b19b85a5c96c43efd67e5423699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:bc:66:07:de:f5:5f:b9:7f:df:a1:b2:ef:
7a:ea:e6:56:81:ec:28:5b:2b:4d:9d:01:8f:ce:d6:
2d:3c:d3:ab:77:e9:d3:b6:fb:f5:9b:54:49:cd:b7:
0d:93:c3:00:35:0b:da:af:b5:37:3e:2f:61:07:b5:
91:f8:b5:01:d4:83:4c:17:3b:e2:bd:ba:4d:95:ac:
39:4c:cc:aa:4c:67:60:88:1c:43:53:cb:a1:89:23:
e0:36:b2:37:5e:63:7d:6b:66:b4:1e:e4:36:44:55:
8f:70:04:a3:d1:51:9a:cd:65:36:2a:af:39:22:9e:
a3:bf:74:f4:f5:85:16:b4:11:d3:43:81:f2:b9:4f:
e4:5f:e1:59:de:9e:26:cd:63:e3:11:db:13:c3:1d:
0b:4b:5a:cd:dc:46:db:a5:6a:18:9f:4b:14:82:22:
ea:eb:59:57:9a:66:bf:e8:20:90:c0:98:00:97:20:
56:59:02:66:f5:6e:b8:69:95:d6:e3:92:a2:72:b4:
eb:ff:52:37:c5:3e:c9:43:c5:d3:4b:70:1c:60:92:
94:8c:e2:f2:25:1c:51:69:15:e4:fb:c1:eb:eb:37:
32:58:ee:9f:5d:23:61:a8:d8:49:a0:f1:82:92:72:
24:0c:79:5c:d8:fb:3b:de:b9:95:05:0d:47:bc:93:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:62:13:74:14:FF:9B:19:B8:5A:5C:96:C4:3E:FD:67:E5:42:36:99
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/MGITdBT_mxm4WlyWxD79Z-VCNpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.214.0/24
Signature Algorithm: sha256WithRSAEncryption
19:eb:f9:3c:f6:ae:c7:3d:7f:a7:34:fe:9d:5a:f9:b3:83:fc:
1c:cb:fa:03:2e:7d:cf:67:b1:39:c5:43:80:da:82:cd:e3:8a:
9c:e5:97:c0:af:7a:21:b9:74:0b:1d:84:b5:43:80:11:bd:02:
d5:9c:9a:86:b2:fe:2b:ee:9a:45:da:66:c9:84:3f:f9:7c:c6:
d1:bc:e6:ef:24:20:b9:6f:d2:63:1e:8d:6b:78:82:a2:f5:6b:
ef:a9:f5:b1:64:84:04:9b:91:4f:05:b0:c1:cd:eb:b4:ee:7d:
e9:dd:ec:43:5e:3e:c8:ac:da:57:58:fa:b7:05:82:c3:3f:5b:
3e:8d:f0:18:5d:da:65:d3:61:56:61:8c:ab:09:78:0a:f1:37:
aa:e3:33:c6:ba:da:76:ed:f6:d7:af:ba:1e:0c:0b:3e:1f:c3:
35:3e:da:8f:4b:6e:7c:18:a8:bb:a9:d3:f2:6a:4a:36:1f:8a:
ea:a1:b0:74:84:94:3a:e4:95:f5:2d:e4:54:bb:8d:4f:63:e4:
b3:fc:b2:95:8c:ff:19:19:5f:94:f2:22:4a:e6:5f:e1:20:bd:
9d:c8:31:bf:3c:a6:ac:06:68:02:3a:7f:44:3e:9a:98:aa:da:
82:17:00:f3:db:1c:bf:ef:c1:e6:f9:55:8b:a3:1f:0a:b7:e9:
8d:d8:83:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:52:27 2026 by rpki-client