Route Origin Authorization
$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/1/3138352e37372e3232342e302f32322d3234203d3e203335393136.roa
File: 3138352e37372e3232342e302f32322d3234203d3e203335393136.roa (raw, json)
Hash identifier: 8gWLg8Th9wmqQpUsrE3rnTGXsfsUBsQHJFqgwdfcIv8=
Subject key identifier: 3C:EE:C2:19:C4:54:3E:38:41:EF:72:95:BA:57:74:5A:A9:D4:BC:8C
Certificate issuer: /CN=f827056c07ea5582db063b6af62f8f3076237cd7
Certificate serial: 0C1113C390CE5241FA63DD1CF78C0FA2E86EE00B
Authority key identifier: F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
Subject info access: rsync://rpki.multacom.com/repo/MCOMCA/1/3138352e37372e3232342e302f32322d3234203d3e203335393136.roa
Signing time: Thu 16 Oct 2025 19:07:11 +0000
ROA not before: Thu 16 Oct 2025 19:02:11 +0000
ROA not after: Thu 15 Oct 2026 19:07:11 +0000
asID: 35916
IP address blocks: 185.77.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl
rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:11:13:c3:90:ce:52:41:fa:63:dd:1c:f7:8c:0f:a2:e8:6e:e0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f827056c07ea5582db063b6af62f8f3076237cd7
Validity
Not Before: Oct 16 19:02:11 2025 GMT
Not After : Oct 15 19:07:11 2026 GMT
Subject: CN=3CEEC219C4543E3841EF7295BA57745AA9D4BC8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:25:ad:b1:f3:00:e9:e2:cb:1b:d7:c6:c4:
87:dd:f7:33:63:e6:ca:fd:d3:32:77:5e:ac:2a:9d:
9a:05:e7:e1:fb:d1:63:16:a2:d3:48:d3:b5:af:b3:
b0:70:f4:f7:8d:f3:f8:e3:74:73:77:57:96:12:9d:
f2:db:f8:9d:df:2a:10:36:d8:53:27:bb:63:f6:4b:
04:b9:f0:4f:42:e3:d7:5b:ef:c7:37:ab:81:e5:7f:
73:03:c5:56:0e:bd:fd:56:79:bb:0d:40:13:6b:af:
d9:77:62:b4:6e:11:48:8c:ab:dd:55:eb:c4:02:7d:
88:ba:2c:7a:f3:11:68:c9:1c:f8:e4:40:56:0a:fc:
51:68:a2:54:99:31:81:79:9e:2d:30:4b:b5:e5:29:
cd:bb:df:38:e3:3e:47:fd:f5:9a:90:d3:64:f9:94:
87:96:9a:92:af:f4:3a:f4:c5:64:f3:19:43:be:52:
53:5f:40:f5:d8:e3:53:db:5e:a5:ab:92:f4:cb:f9:
05:09:a7:b2:a0:f4:c7:b7:0d:0f:6f:97:b9:f0:13:
36:d4:df:f2:e0:7f:01:53:db:32:4c:f3:93:41:ed:
50:ba:02:f0:af:b8:c7:a7:41:b9:d0:86:06:3e:54:
3b:54:d4:dc:63:14:26:c6:d8:8b:f6:53:7f:32:0c:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EE:C2:19:C4:54:3E:38:41:EF:72:95:BA:57:74:5A:A9:D4:BC:8C
X509v3 Authority Key Identifier:
keyid:F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/1/3138352e37372e3232342e302f32322d3234203d3e203335393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.224.0/22
Signature Algorithm: sha256WithRSAEncryption
36:2c:7e:a9:04:3e:65:05:c4:34:6f:08:51:d3:de:00:a4:50:
17:d0:ba:0d:62:06:80:bd:05:c9:bf:b4:5b:96:8a:5e:82:26:
2d:49:23:c7:3d:53:98:78:d5:37:e4:dc:f2:4a:be:f9:04:03:
6f:ff:57:17:2d:34:c5:9f:b5:48:88:16:fc:0a:8e:b5:43:2d:
4a:99:92:20:b0:90:2e:06:5d:44:1a:5a:0b:3c:e6:db:fb:9b:
df:1a:18:fa:10:77:c3:0d:86:04:c8:c5:a7:32:6e:5e:94:cd:
c0:7f:2e:b9:ae:44:8f:dc:a2:0a:10:c1:a3:19:01:18:81:38:
e0:a4:ea:8b:fb:2a:2a:f1:59:5b:6f:64:5d:c2:01:0d:40:19:
c6:cb:fd:25:b4:64:3d:2f:c2:16:6e:9a:7a:29:38:76:67:cd:
f3:86:e3:1e:85:40:48:4f:fe:5c:25:43:e0:9e:aa:5c:e5:d2:
13:e1:8f:46:1a:4b:bb:c7:ae:00:78:5b:95:68:1a:01:3c:99:
e6:65:db:cc:69:0c:04:ab:a3:ba:f2:0c:e1:3e:01:41:b2:40:
fb:cc:cc:8a:7e:f0:b6:81:4d:bb:99:09:1e:ac:df:d4:96:79:
5a:ae:61:dd:74:50:75:95:7a:88:ca:84:63:38:b2:ca:fb:cb:
77:57:75:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:16:13 2025 by rpki-client