Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3_MGA4FW92cjnT1PsRkveNNhJpc.roa
File: 3_MGA4FW92cjnT1PsRkveNNhJpc.roa (raw, json)
Hash identifier: dqpOomvSvqPp4Oa0DGIPeUMHrsKrttw+piru2sbu4H4=
Subject key identifier: DF:F3:06:03:81:56:F7:67:23:9D:3D:4F:B1:19:2F:78:D3:61:26:97
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E556ABB3BDC9E59D21BFAF06E0ADC7D26
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3_MGA4FW92cjnT1PsRkveNNhJpc.roa
Signing time: Sat 23 May 2026 15:18:38 +0000
ROA not before: Sat 23 May 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64096
IP address blocks: 151.242.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:55:6a:bb:3b:dc:9e:59:d2:1b:fa:f0:6e:0a:dc:7d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 23 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dff306038156f767239d3d4fb1192f78d3612697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:63:37:50:f5:54:c2:84:5e:c6:be:0e:5b:
43:90:bd:90:1c:5d:9e:ac:07:bf:d9:b2:28:c1:5d:
30:01:d0:3a:e9:26:ee:4e:a9:0f:f2:e3:7c:4f:62:
c7:a9:39:13:4b:94:14:87:21:3a:db:59:69:66:d0:
c0:6b:2b:d8:5c:44:81:cc:81:78:2d:a0:27:a4:41:
e3:05:8f:5f:7d:cb:45:7b:de:36:06:43:41:40:21:
82:7a:e7:e1:79:56:6f:1d:ec:6a:fb:85:03:11:24:
bb:92:04:c0:12:af:61:5a:f6:43:09:22:9c:39:7d:
1a:a3:71:d1:a3:15:62:88:b6:20:d0:3e:cc:14:98:
e2:29:b6:bc:cd:ae:63:f9:5d:84:93:fe:64:5f:e3:
37:84:78:5a:46:42:e0:d8:0d:c8:10:4d:59:39:8d:
12:98:90:42:67:38:59:a4:14:f6:d6:0e:c0:c9:89:
ba:ab:a4:ad:87:ac:54:24:94:90:94:38:db:e7:c4:
82:12:6b:92:33:e7:aa:75:6e:8c:19:59:44:e7:4d:
0f:b2:ad:e3:6d:c9:13:f3:af:56:96:e3:87:25:d3:
4f:db:ef:39:0d:75:14:4b:a8:13:dd:e5:e6:2f:59:
c7:e4:b5:a7:bc:1b:48:c8:c7:09:61:e4:4c:be:ed:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F3:06:03:81:56:F7:67:23:9D:3D:4F:B1:19:2F:78:D3:61:26:97
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3_MGA4FW92cjnT1PsRkveNNhJpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.122.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:4a:3d:b6:ee:d7:be:40:f5:43:26:dc:9b:b7:dd:f4:20:31:
cb:60:e5:74:64:51:50:00:82:62:f6:0c:d0:5c:a8:6a:d4:dd:
6b:8d:0a:0e:a1:c7:5a:54:7c:43:b0:10:ea:ff:33:1f:87:b2:
78:0f:dc:b1:92:28:09:dd:99:d3:e7:6d:eb:04:d8:ee:d6:29:
5d:67:53:d0:1e:af:c0:87:d5:d1:30:ae:ef:3b:6b:4c:21:e0:
dc:61:25:d2:cf:20:d5:05:71:ba:98:2b:85:25:73:63:08:07:
0e:61:ff:eb:25:e1:63:e3:54:d1:c6:bd:d6:ec:70:43:70:37:
04:e9:0b:36:21:61:40:84:39:a8:bd:14:e0:90:eb:59:89:da:
35:e4:47:0f:1f:45:f3:22:82:98:1e:7f:c7:f4:e0:31:da:86:
36:0c:e2:ad:15:ba:09:a1:dc:96:a1:a4:e7:98:8e:a4:a8:67:
e0:b6:02:1b:a3:97:22:20:fc:e4:6d:f3:2f:99:48:66:3d:0a:
bd:b1:a8:d0:6f:91:ab:a4:f1:ab:5c:60:69:ff:70:82:c1:6b:
60:b2:79:6a:52:fb:21:85:27:7a:30:02:76:7b:4e:aa:d4:b1:
bf:71:19:3b:cd:bc:f2:62:7e:ca:71:84:6a:28:7a:56:c1:f3:
24:07:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:31:14 2026 by rpki-client