Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MCWCBD1i7_5THy1YAuDWfoN2Zlg.roa
File: MCWCBD1i7_5THy1YAuDWfoN2Zlg.roa (raw, json)
Hash identifier: C72yYZUvVTu6eKjAT3EHRCKIv9OnYDgDb/GoZgJQmn0=
Subject key identifier: 30:25:82:04:3D:62:EF:FE:53:1F:2D:58:02:E0:D6:7E:83:76:66:58
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019C57041F67CC0D9558872E7F97AE224DB0
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MCWCBD1i7_5THy1YAuDWfoN2Zlg.roa
Signing time: Fri 13 Feb 2026 12:40:13 +0000
ROA not before: Fri 13 Feb 2026 12:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57829
IP address blocks: 193.234.1.0/24 maxlen: 24
193.235.192.0/24 maxlen: 24
194.14.195.0/24 maxlen: 24
194.103.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:57:04:1f:67:cc:0d:95:58:87:2e:7f:97:ae:22:4d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 13 12:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=302582043d62effe531f2d5802e0d67e83766658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:1b:67:9f:a4:40:a4:4d:cd:91:21:fe:7f:
64:e8:95:de:55:a2:7c:36:d6:16:7e:1f:79:90:b5:
e7:8b:ad:cd:81:82:87:d2:d9:10:b2:c4:8e:c6:2b:
70:28:ac:16:dc:b6:0d:cc:d8:46:b1:9d:29:94:9b:
23:87:35:e1:03:e0:bd:53:b0:33:09:be:37:b6:f7:
5a:e6:14:90:fe:01:5f:34:55:67:41:2a:e4:9f:55:
06:22:66:f2:6a:d7:7b:c3:36:a8:a1:db:1a:a3:f4:
fa:f5:16:d6:ef:d5:fc:a3:84:ca:f0:fe:bf:c5:19:
e0:fb:2b:ed:dc:21:24:9f:02:2f:fc:a4:cf:36:19:
b5:76:55:7a:a3:d9:70:69:32:ae:a4:d6:ec:35:73:
5c:c8:93:38:ed:0f:0a:f7:3c:b6:7b:17:0f:f9:14:
13:45:2d:31:20:39:27:e9:2f:5c:30:fb:07:da:d0:
29:0c:22:83:81:29:76:d0:96:ef:c1:06:8b:d3:7b:
c3:dc:0c:e0:e0:60:c3:a0:62:1b:1c:2d:9f:d7:95:
57:23:0d:b1:ed:dc:93:8a:bf:ef:91:0c:8c:80:67:
0f:ba:57:dd:98:9a:53:0c:e7:a7:34:07:37:f2:b4:
e5:97:c9:96:ff:96:28:71:82:80:79:a2:06:85:f5:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:25:82:04:3D:62:EF:FE:53:1F:2D:58:02:E0:D6:7E:83:76:66:58
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MCWCBD1i7_5THy1YAuDWfoN2Zlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.234.1.0/24
193.235.192.0/24
194.14.195.0/24
194.103.47.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f0:cc:9b:c5:fd:6e:c0:70:b9:b4:19:81:44:23:f5:c9:3f:
9d:70:9c:76:c1:9a:20:d8:a0:58:21:6a:07:e0:8c:99:ea:1c:
f5:57:f5:75:1a:02:c5:10:82:cf:e8:0c:ad:42:7b:3a:0b:e4:
f0:93:bc:15:79:e6:90:0b:9a:0d:08:84:a8:3b:2e:00:83:d2:
38:c1:a7:97:58:e0:17:1f:4a:62:a3:fa:8d:5a:b5:6e:b6:68:
d6:3f:fa:63:3a:d1:e4:13:a6:e6:1b:11:f3:48:ec:f1:84:83:
e0:f3:9a:8a:f1:dd:75:37:d9:44:ca:25:1f:a3:58:0a:6a:94:
b4:70:5f:54:66:66:9f:3f:75:06:83:c6:a8:05:e1:15:2f:bc:
71:a0:64:72:ef:1b:47:63:84:b8:55:e9:37:4d:96:aa:4e:85:
31:84:82:15:f9:a5:d7:e6:b5:86:39:b5:1a:2f:b6:1b:7b:72:
fe:95:4e:88:7e:8e:84:f2:ab:c9:ac:f5:33:9d:11:19:81:d2:
46:e3:f8:94:35:a5:85:fa:21:63:37:03:16:37:cf:43:8d:ab:
6a:64:12:16:e1:11:ea:f8:76:14:38:e8:0d:14:4a:87:39:d7:
3e:24:7c:0c:33:02:78:8e:a0:a1:5c:ce:a4:8c:8c:30:da:2e:
8c:a0:f8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:45 2026 by rpki-client