Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/mvHb-8Z0ycvMSJhWupwMRR4wA-E.roa
File: mvHb-8Z0ycvMSJhWupwMRR4wA-E.roa (raw, json)
Hash identifier: F0CUWvlAdOp9w97cQi4qF0fyu4dYrDSQJRdTIKAGQEQ=
Subject key identifier: 9A:F1:DB:FB:C6:74:C9:CB:CC:48:98:56:BA:9C:0C:45:1E:30:03:E1
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F45D179F4DC7B49C31F0458789DBA9C2A
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/mvHb-8Z0ycvMSJhWupwMRR4wA-E.roa
Signing time: Thu 09 Jul 2026 07:39:43 +0000
ROA not before: Thu 09 Jul 2026 07:39:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151380
IP address blocks: 79.176.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:d1:79:f4:dc:7b:49:c3:1f:04:58:78:9d:ba:9c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 9 07:39:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9af1dbfbc674c9cbcc489856ba9c0c451e3003e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:10:2d:ed:11:9e:8a:b9:ba:b4:10:c2:23:
f7:90:6e:8c:4f:70:49:da:1e:e9:76:76:14:d2:14:
e6:e3:47:04:d6:59:00:f3:f5:94:79:02:ba:0c:97:
bf:0e:e1:90:5f:4d:34:ec:88:29:18:fc:4e:3e:d1:
bd:b7:77:0a:65:97:ce:70:17:8d:08:1d:44:52:89:
30:47:ea:2a:bd:61:25:5c:5e:2b:db:58:80:d7:c7:
67:28:a4:a2:23:d0:8d:9e:da:3c:9b:bd:b7:8c:db:
3d:4b:38:30:21:07:b6:6f:6f:ca:f9:f8:7d:69:fd:
fd:e7:07:53:59:3d:d8:ee:47:12:9e:30:9f:c5:42:
03:89:de:59:3b:e7:a8:9f:59:4c:c7:d8:2d:29:b9:
b7:9e:c1:1b:81:b4:2e:68:8b:d4:ac:a2:4b:e0:8a:
2e:98:73:00:e8:0d:1b:50:7b:54:a1:11:3c:ee:54:
ba:4c:cb:11:12:16:b5:8e:75:2c:88:02:96:b8:39:
64:34:f9:3e:02:38:ba:64:af:98:25:20:16:18:f2:
f6:dc:f4:d8:48:f0:69:ba:64:cc:f8:43:86:fa:92:
ae:b8:85:95:a7:95:61:43:c3:67:7e:05:a8:c1:25:
a4:d0:7c:32:75:be:b5:7c:3a:3d:c5:ad:82:b2:db:
68:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F1:DB:FB:C6:74:C9:CB:CC:48:98:56:BA:9C:0C:45:1E:30:03:E1
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/mvHb-8Z0ycvMSJhWupwMRR4wA-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.138.0/24
Signature Algorithm: sha256WithRSAEncryption
58:03:4b:af:c4:a0:ce:17:fa:8a:86:89:78:b6:23:05:51:cf:
b8:d3:cb:99:c2:8d:5c:74:0c:25:b9:cb:2f:e7:3d:ec:e1:3d:
99:bc:af:4d:cd:58:23:2c:4c:32:f4:f8:52:3c:a9:4c:f8:0e:
91:05:bf:4a:95:f7:39:77:3f:05:05:3a:14:58:49:1d:82:82:
bf:09:74:1d:17:2d:23:45:69:4f:e7:3b:40:40:98:2f:71:b7:
ac:f6:35:ee:e9:1e:a7:63:81:5a:a4:7b:06:39:80:aa:11:4d:
2a:47:fa:b6:fa:58:f7:25:68:8d:c4:34:ec:8d:92:db:86:39:
43:99:04:91:2f:2a:fc:ba:86:66:eb:d1:aa:3b:63:be:17:cb:
7b:45:bb:5a:10:11:e6:91:58:e8:75:f6:b1:dd:82:a7:69:e0:
0d:cb:65:90:54:4b:cb:35:8f:f0:c9:7f:27:44:1a:cd:81:ba:
c4:2a:a1:91:3e:ac:2c:40:c4:6e:e4:ff:ff:d2:6c:99:55:93:
77:73:05:f8:6c:fa:09:e7:9d:a0:0c:e2:00:08:09:d8:9b:9d:
f6:d6:16:64:75:44:e4:e8:47:79:39:17:5f:13:f9:67:14:10:
cf:63:0c:18:b9:11:c6:52:23:94:cf:89:63:4f:1f:bc:7a:8a:
46:75:a3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:43 2026 by rpki-client