Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/mjLGZVnuk_dvBlkUDKlaD5y8bkc.roa
File: mjLGZVnuk_dvBlkUDKlaD5y8bkc.roa (raw, json)
Hash identifier: XTq59HYwI6XXKTa47mTKLmSu+xFLIS67NJLNwlxyAWw=
Subject key identifier: 9A:32:C6:65:59:EE:93:F7:6F:06:59:14:0C:A9:5A:0F:9C:BC:6E:47
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01A08F29F825BEC9A8F20EF290F0350DF3D1
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/mjLGZVnuk_dvBlkUDKlaD5y8bkc.roa
Signing time: Fri 11 Sep 2026 06:31:27 +0000
ROA not before: Fri 11 Sep 2026 06:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218974
IP address blocks: 193.178.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:29:f8:25:be:c9:a8:f2:0e:f2:90:f0:35:0d:f3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 11 06:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a32c66559ee93f76f0659140ca95a0f9cbc6e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:1e:98:f3:a6:ff:14:f8:8c:4f:b5:7b:2b:
ff:a6:27:3f:e9:1a:b0:ad:ad:2f:bb:d6:b4:0e:7a:
ba:dc:b3:de:5c:b1:ca:46:91:96:7b:9e:02:30:97:
83:78:06:68:60:e5:9b:7c:d6:79:5c:84:89:11:0f:
ab:fc:13:6b:02:c4:3d:d2:5b:fe:5f:be:76:82:fe:
e8:0d:44:44:ee:08:a6:b3:38:a3:2c:c1:00:66:ee:
87:97:66:ba:cf:ac:ee:c9:c5:6f:16:81:c9:10:ac:
64:8b:c4:48:68:3f:ac:1e:13:f5:87:75:1d:fb:53:
eb:26:38:89:25:ff:d2:3b:3f:a3:62:0c:16:57:9d:
68:d9:de:8c:94:f4:8f:e1:26:a5:1e:65:13:70:55:
1b:81:bf:7b:a0:3b:f2:9c:80:85:8f:b2:60:f3:31:
7f:67:21:9b:85:b1:10:b1:d3:7c:7b:93:35:59:f4:
e3:58:64:41:a2:98:0f:8c:2a:60:8c:84:c3:1b:bd:
87:62:87:04:60:b3:73:ce:e1:2c:35:08:a2:9d:17:
86:e4:11:b5:0c:1c:9f:c0:bd:6d:b0:83:17:52:d6:
ba:88:73:f5:d6:da:23:7c:f6:ff:a7:c5:1b:ed:ee:
13:d1:b9:0d:23:7d:b6:8c:f1:2d:8f:05:7e:ab:d8:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:32:C6:65:59:EE:93:F7:6F:06:59:14:0C:A9:5A:0F:9C:BC:6E:47
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/mjLGZVnuk_dvBlkUDKlaD5y8bkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:2a:ef:21:21:e8:8a:10:07:71:1d:16:65:eb:15:09:94:81:
c8:e3:21:70:0b:c9:43:c0:6d:00:c9:d7:40:f4:14:53:da:85:
d4:71:ce:f3:7c:32:92:55:49:74:bf:ac:ff:f3:ef:db:65:ca:
c3:a6:44:41:24:ac:7c:58:90:ed:52:e4:42:2f:0b:07:5e:cf:
be:d3:90:2b:40:c0:7a:0a:43:0e:15:c5:2e:bd:b7:6f:e6:ad:
ed:96:4b:d2:06:7d:26:26:f9:54:47:c1:20:db:7c:69:2d:c0:
12:6d:f9:7d:6c:25:07:20:3c:3e:64:f7:36:c2:70:b5:73:ee:
91:3b:9b:4a:7e:aa:c9:f1:f4:dc:9b:e6:56:b1:2b:ca:4b:ec:
2e:84:92:b4:d1:af:e1:e1:dc:1a:58:d2:56:71:b5:4b:ed:2c:
47:be:55:a8:03:a3:d1:b2:3c:1d:a3:d3:06:55:db:d1:f7:c8:
89:27:da:72:a9:b7:c4:6d:24:ad:8c:27:6d:ce:6a:05:a6:1e:
9b:8d:bf:b7:4c:58:85:04:7b:ca:7f:11:c4:74:5b:c9:cf:ef:
93:f9:ff:57:b5:83:5d:9a:de:fe:95:07:3a:5a:36:0c:f3:11:
e9:dc:07:09:75:94:6c:c2:84:01:4b:22:d7:76:7a:88:e4:b8:
dc:1a:22:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:57:39 2026 by rpki-client