Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/MHu_ynKw54i57PkfP91j_XPdEeg.roa
File: MHu_ynKw54i57PkfP91j_XPdEeg.roa (raw, json)
Hash identifier: WRB6bwylw9UysvUsImnWlpj5yXSlmRF+MdsWxiFJRMs=
Subject key identifier: 30:7B:BF:CA:72:B0:E7:88:B9:EC:F9:1F:3F:DD:63:FD:73:DD:11:E8
Certificate issuer: /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial: 01A0CB155249D14BCF77FFD3F2738E685918
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/MHu_ynKw54i57PkfP91j_XPdEeg.roa
Signing time: Tue 22 Sep 2026 21:46:07 +0000
ROA not before: Tue 22 Sep 2026 21:46:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47376
IP address blocks: 91.222.196.0/24 maxlen: 24
91.222.197.0/24 maxlen: 24
103.215.220.0/24 maxlen: 24
103.215.223.0/24 maxlen: 24
195.28.11.0/24 maxlen: 24
195.234.191.0/24 maxlen: 24
195.238.231.0/24 maxlen: 24
195.238.240.0/24 maxlen: 24
2a05:63c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:15:52:49:d1:4b:cf:77:ff:d3:f2:73:8e:68:59:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
Validity
Not Before: Sep 22 21:46:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=307bbfca72b0e788b9ecf91f3fdd63fd73dd11e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:37:e9:57:87:74:d4:9a:e4:b3:1a:24:d6:3f:
1e:cc:df:68:5f:67:b7:31:94:78:6f:10:fc:58:93:
e9:b9:53:82:96:cd:ae:84:7f:5c:4d:ec:06:87:aa:
18:01:18:0b:5e:9e:6a:06:1a:54:b0:4d:aa:01:1b:
04:57:31:bc:f4:00:5c:9d:6b:b9:24:4a:fd:29:e9:
f9:cc:8b:9a:55:07:85:b4:a4:1d:55:1c:83:fd:57:
60:a4:77:7c:aa:2e:15:31:f2:77:e8:1c:39:4e:70:
72:a5:49:ad:17:ff:d5:9f:dd:20:ea:4a:47:4d:64:
c6:ee:c3:78:ad:bd:40:97:1f:ce:95:58:94:f6:d4:
fd:5f:de:5d:d0:ce:c5:1c:3e:54:ea:e8:3f:f1:2b:
85:5b:e7:91:25:3c:ce:4d:b7:8b:e2:f2:85:94:d3:
30:1b:65:15:50:08:48:4a:e0:6e:eb:29:60:78:22:
0b:3e:de:b1:03:25:d8:e5:5e:ec:8b:09:19:af:fc:
39:79:c0:2b:56:25:54:de:cc:a6:e6:76:1d:1f:1f:
54:16:2c:42:ee:d7:6b:dc:cf:25:2f:a9:2f:66:d1:
94:73:a6:2f:48:e2:2d:3c:5a:28:c1:93:2e:56:80:
20:19:5b:af:8a:4a:1e:a7:e6:6e:49:50:eb:0d:bb:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7B:BF:CA:72:B0:E7:88:B9:EC:F9:1F:3F:DD:63:FD:73:DD:11:E8
X509v3 Authority Key Identifier:
keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/MHu_ynKw54i57PkfP91j_XPdEeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.196.0/23
103.215.220.0/24
103.215.223.0/24
195.28.11.0/24
195.234.191.0/24
195.238.231.0/24
195.238.240.0/24
IPv6:
2a05:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
71:c0:c0:2c:77:fa:93:57:a4:72:d3:73:09:b8:06:cd:fb:0c:
20:4c:39:76:8f:11:fc:4a:9e:2d:76:df:5b:bc:74:c9:c7:a2:
ed:58:e9:18:60:5a:0c:a1:4f:a3:91:13:a1:c6:4d:d3:8e:f0:
16:f8:f6:2f:86:e9:0f:6c:c2:6e:cc:d4:c7:bb:53:d5:49:7b:
0c:9f:23:93:ec:23:b9:e5:ab:45:86:b6:5e:0c:50:e7:e4:c3:
9b:c0:54:90:ab:21:b5:c3:82:9e:c0:66:f9:96:8b:84:cf:af:
9f:92:8c:b1:af:0f:91:48:a1:bf:c7:e9:02:45:7b:92:c0:10:
df:fa:16:11:e0:3f:e5:0a:35:17:54:51:f6:9c:f5:a2:47:ae:
64:b6:6a:a7:4c:9b:27:21:00:ae:85:37:14:7c:21:ea:0b:3f:
f1:77:b8:3f:80:65:26:55:0a:55:a7:52:a4:6e:f0:66:cf:d6:
07:0d:04:f3:09:7f:b2:0e:c1:f0:35:dd:9c:51:41:17:11:62:
f3:ce:c9:ac:d5:ed:07:97:79:1f:32:6d:c4:85:72:5e:84:df:
56:90:c9:a1:42:03:52:67:01:22:5f:fc:ee:f9:b5:44:4f:06:
74:09:72:71:cc:a9:36:5a:83:7f:49:f0:6b:81:4e:96:56:30:
40:73:da:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:15:10 2026 by rpki-client