Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/mjsGoAp4e_kLXrUHiayaH4M0-CA.roa
File: mjsGoAp4e_kLXrUHiayaH4M0-CA.roa (raw, json)
Hash identifier: 6IO5CYtAunsKToiFXX8O2RjnhdZWB3faGoUCU5YD+Ow=
Subject key identifier: 9A:3B:06:A0:0A:78:7B:F9:0B:5E:B5:07:89:AC:9A:1F:83:34:F8:20
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 019CAAD58A5D36956B34DEC825C1602FAFE1
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/mjsGoAp4e_kLXrUHiayaH4M0-CA.roa
Signing time: Sun 01 Mar 2026 19:17:27 +0000
ROA not before: Sun 01 Mar 2026 19:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205775
IP address blocks: 94.141.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:d5:8a:5d:36:95:6b:34:de:c8:25:c1:60:2f:af:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Mar 1 19:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a3b06a00a787bf90b5eb50789ac9a1f8334f820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3c:c2:17:cf:4d:04:8c:8d:49:3f:e8:a0:01:
56:fc:64:4f:c0:ef:9d:16:ea:fc:09:0c:f8:5e:02:
32:de:23:85:f4:82:f6:21:75:14:99:8f:62:9f:4c:
d8:d9:05:c4:90:1d:98:c2:b3:4b:31:b2:0b:89:60:
5f:0b:22:f7:2e:16:07:f6:c5:be:45:25:d0:c8:12:
78:a8:0a:a6:4c:03:af:e3:59:28:8c:8e:88:2d:5e:
2e:35:38:03:92:fc:ba:26:8b:0d:ae:85:1a:40:f8:
de:91:3b:d3:67:50:b2:01:a7:11:91:8d:08:90:86:
58:6c:b8:8d:73:9f:79:6e:12:06:fb:a2:38:be:ee:
50:b9:f7:a6:4c:c3:20:60:36:d0:67:20:e3:55:0d:
dc:3e:18:59:7e:86:ed:cc:7c:5a:4e:75:1f:57:a6:
87:cd:90:ba:58:dc:61:dc:20:74:d1:23:60:61:34:
84:1c:a9:c8:a0:82:ec:70:9b:61:51:b2:3d:4d:41:
c8:87:9f:0d:9b:f5:19:dd:bd:2c:5c:ee:d0:f3:f2:
34:a0:00:0e:f3:54:b8:0a:a4:09:2e:ea:4a:03:2a:
e5:73:59:cb:ac:43:28:08:4b:f7:03:4a:ac:a1:44:
93:4a:41:f2:6b:27:38:7d:9e:d2:b3:66:c8:64:d5:
02:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3B:06:A0:0A:78:7B:F9:0B:5E:B5:07:89:AC:9A:1F:83:34:F8:20
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/mjsGoAp4e_kLXrUHiayaH4M0-CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.122.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ac:9f:ac:47:2b:3b:ac:ae:ee:41:10:f6:9b:40:5d:a1:dd:
b2:83:f6:d7:7b:95:d8:9d:aa:02:7c:13:5a:eb:1a:8e:ef:0f:
fa:8a:30:65:d6:ae:78:50:8d:63:f8:a6:58:f4:6c:8d:b3:4e:
ad:aa:0a:8c:0d:5a:f9:9a:7a:6b:20:5c:86:b9:cb:c4:89:5a:
9f:b1:3a:3e:c2:7f:06:fa:c0:ab:b4:eb:93:55:92:60:02:fa:
ac:50:08:75:00:3f:8a:a7:3c:3a:8b:1b:06:42:fd:bd:9c:8e:
1e:10:e4:09:97:63:64:bf:b2:93:9d:ba:29:37:a9:5a:ea:ad:
92:6f:d3:33:a8:17:aa:33:92:88:78:92:27:0d:dd:f2:f5:08:
69:16:c1:97:1e:cf:69:bd:57:8b:19:f8:41:13:08:bd:ee:2d:
e3:10:85:ca:f5:36:6c:f2:5f:af:41:35:9c:87:79:42:f1:ae:
ba:3c:13:05:5b:93:ed:b2:27:64:f0:9e:a0:b1:a2:9a:27:be:
4e:86:bc:df:e2:e4:6e:9c:4b:e6:73:30:40:74:f0:bb:8f:3a:
8a:58:43:58:f8:6e:3d:b2:9e:a7:d0:d5:a3:99:fa:8a:5b:ed:
5f:d8:3a:bf:42:6a:2d:4a:27:76:71:d7:5f:93:8b:26:07:98:
b9:c6:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:08:18 2026 by rpki-client