Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/MhWPUGLFe8hnpHsolb1ABzOXpV0.roa
File: MhWPUGLFe8hnpHsolb1ABzOXpV0.roa (raw, json)
Hash identifier: 03PT6LT6DwZIXD4TdMa2IptdTYfJZUdy+2EAT1i5Ts8=
Subject key identifier: 32:15:8F:50:62:C5:7B:C8:67:A4:7B:28:95:BD:40:07:33:97:A5:5D
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01A0F906124D09E7D56FD4F9CD6ABC488FFF
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/MhWPUGLFe8hnpHsolb1ABzOXpV0.roa
Signing time: Thu 01 Oct 2026 19:51:59 +0000
ROA not before: Thu 01 Oct 2026 19:51:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200396
IP address blocks: 95.164.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:06:12:4d:09:e7:d5:6f:d4:f9:cd:6a:bc:48:8f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Oct 1 19:51:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32158f5062c57bc867a47b2895bd40073397a55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:10:74:c5:ab:f5:4a:40:23:a0:aa:d4:80:97:
cd:99:a2:15:ae:09:03:b7:29:24:d1:7e:4c:c4:a8:
3b:e4:0f:88:df:98:30:39:e2:da:b3:ea:b9:04:5c:
06:25:73:5c:b6:e1:ea:0c:63:71:4a:49:67:23:7e:
b3:c5:1c:6b:bf:c8:e2:f7:b7:f1:48:06:93:d4:f5:
83:88:a2:5f:4d:b3:74:ba:2f:fd:21:93:9f:7a:75:
f9:98:ca:f0:82:80:e2:5f:61:71:e0:c1:95:1b:e0:
6c:a2:eb:15:94:90:af:93:82:08:55:37:09:28:03:
54:30:f3:6f:93:04:c5:38:43:4f:52:ba:06:4b:4d:
8f:e8:62:4b:5e:52:2f:2e:d3:b5:a8:18:c3:e8:eb:
4e:b2:12:f7:d5:3a:b0:31:83:46:a4:52:13:34:31:
37:55:c5:52:0e:95:6b:57:81:f5:5e:42:ab:35:aa:
3b:27:56:34:50:49:b7:d6:82:19:85:8c:1d:0b:00:
e4:db:c2:9d:d6:2d:a6:ac:fa:99:c9:5a:c0:b1:43:
6e:77:86:99:f3:91:a5:98:64:d6:19:34:e4:e6:1d:
c9:bb:ac:1e:5d:a6:0f:6c:06:98:00:cf:30:89:7f:
06:7c:19:c4:f5:6a:69:67:40:25:97:7c:7c:90:54:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:15:8F:50:62:C5:7B:C8:67:A4:7B:28:95:BD:40:07:33:97:A5:5D
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/MhWPUGLFe8hnpHsolb1ABzOXpV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.122.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:1b:60:66:36:68:b0:ea:be:84:0d:ae:99:f0:4f:aa:50:c3:
7e:f7:fb:7b:f7:c0:24:5f:e4:a1:ba:59:5f:d6:bf:7d:71:c7:
d9:3d:df:88:26:96:0f:3f:46:d5:65:13:85:0b:c6:4c:f8:24:
8d:b4:23:0a:27:6b:0f:a5:4c:55:d1:85:a6:18:68:36:05:e5:
a2:fc:5e:b6:e1:0f:34:32:1b:fa:c6:d9:a3:7d:03:f4:ea:3d:
3f:89:cd:b6:19:9b:76:ae:57:59:bc:76:95:db:16:15:fc:e7:
b1:36:f2:5b:f5:4c:c5:de:45:88:bc:d7:3d:f9:04:a6:01:5d:
13:60:7f:3a:d1:49:c5:6c:aa:f6:d3:1b:95:47:70:d9:59:b5:
94:5e:63:04:ba:e7:df:6f:07:89:d8:fa:6f:ce:46:f0:48:3e:
7b:96:ed:8a:d4:e6:ec:80:82:68:9d:05:1c:10:01:90:bb:30:
fc:cb:f7:67:23:d7:e2:70:68:81:18:55:02:83:c4:ef:f1:31:
5a:be:90:16:21:0f:6e:ec:4a:b1:6e:a8:6a:f2:2c:dd:e9:e8:
3e:9e:1a:2a:b6:01:ae:a1:87:d5:52:f7:05:e6:a3:65:30:92:
5f:fe:c2:93:c4:ab:b3:84:fa:a9:d7:b7:bb:0c:b5:09:52:8c:
35:cb:c4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:57:53 2026 by rpki-client