Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/MxcZV9q1XM_oLFPhwS7xTgduXcs.roa
File: MxcZV9q1XM_oLFPhwS7xTgduXcs.roa (raw, json)
Hash identifier: lUq9YnS1Sc7e3dppUauYyDheGtMUtzY+2WuoDWvRh1k=
Subject key identifier: 33:17:19:57:DA:B5:5C:CF:E8:2C:53:E1:C1:2E:F1:4E:07:6E:5D:CB
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 019C470C471C0477A2EA3058CD200F5446D2
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/MxcZV9q1XM_oLFPhwS7xTgduXcs.roa
Signing time: Tue 10 Feb 2026 10:15:12 +0000
ROA not before: Tue 10 Feb 2026 10:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153914
IP address blocks: 91.132.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:0c:47:1c:04:77:a2:ea:30:58:cd:20:0f:54:46:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Feb 10 10:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33171957dab55ccfe82c53e1c12ef14e076e5dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:2c:f3:8c:87:8d:9f:9b:9c:83:89:f4:db:
e2:24:ea:57:02:4d:82:c5:8b:d5:05:31:3a:02:43:
c0:75:08:0e:77:b1:8e:4e:78:fb:c8:25:8d:7c:b2:
16:43:9f:65:d7:02:5c:39:a4:66:5f:3e:c8:9c:f8:
a0:c5:31:28:15:9e:9d:b2:62:02:57:ee:2c:d2:f7:
d4:9b:52:98:26:c4:df:8d:c3:4d:ab:43:4b:bb:52:
3e:a3:04:4b:da:f1:2c:1a:a4:cf:51:66:84:26:43:
7d:4a:f9:59:de:53:e9:ee:c9:fe:4f:99:1a:f6:08:
21:1a:02:a6:6a:19:6d:44:46:78:45:b1:8b:29:7f:
f6:c2:ed:69:8c:16:60:01:31:f2:f7:c9:73:9d:2d:
28:59:eb:d7:49:dc:cc:f4:55:ab:0f:16:c1:46:ac:
16:fa:5c:82:ea:e4:27:0a:37:1a:41:c6:e3:64:a4:
57:f1:a3:60:9d:15:77:6a:87:a8:99:3c:07:15:db:
9d:3a:a9:41:16:cf:38:be:b2:7f:de:d5:e4:42:2f:
69:35:f5:15:cb:64:0d:b2:da:c5:0e:a8:f4:fe:9d:
7e:ad:de:6b:49:ca:04:2d:03:e0:28:7c:09:79:94:
f4:2c:66:dc:36:4a:09:67:b0:b8:c5:6c:d6:db:7d:
9f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:17:19:57:DA:B5:5C:CF:E8:2C:53:E1:C1:2E:F1:4E:07:6E:5D:CB
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/MxcZV9q1XM_oLFPhwS7xTgduXcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.141.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:dd:68:b5:93:b6:dd:34:92:cd:43:48:cd:19:a3:66:0f:72:
0f:5f:7c:fb:5e:00:ec:09:f0:db:c2:3a:73:76:18:f6:54:44:
27:ee:fc:7c:d0:63:99:5c:bf:59:9a:11:d8:fa:69:28:4b:5f:
68:d9:34:60:c1:52:a0:95:25:9d:6d:39:7b:b3:b5:21:ed:26:
2b:76:94:0c:f1:70:20:60:1a:80:df:ec:c6:66:20:22:e6:7e:
08:c5:f0:bc:5e:df:e6:39:fb:b5:2d:59:60:ab:6b:8f:b7:79:
02:7a:7f:31:9f:ac:c4:71:8c:1a:05:ea:ed:73:a6:ce:3a:23:
55:de:e2:ec:73:a9:c6:3f:62:a3:37:28:a2:01:88:8a:25:79:
10:bb:af:0b:70:cf:d8:b6:3d:5a:03:7c:e6:0d:7d:29:d2:f5:
71:83:b2:aa:90:af:a3:dc:56:3f:dc:e6:6e:de:75:43:f9:dd:
02:d1:6b:b8:86:0b:d7:e8:92:ca:90:de:97:eb:0d:6c:02:29:
60:80:f9:45:04:7c:b7:bf:7e:53:56:e8:1b:59:4c:bd:40:53:
ad:32:08:e2:95:86:2c:2a:e9:78:8c:61:ba:a9:08:4f:1c:cf:
47:29:83:a2:ef:b5:30:dd:1c:27:6c:c8:3a:2f:03:35:03:67:
f5:59:ef:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:29:44 2026 by rpki-client