Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Mcb7zLrwq-IZQkpW29I1rFsQ0Pw.roa
File: Mcb7zLrwq-IZQkpW29I1rFsQ0Pw.roa (raw, json)
Hash identifier: pUyyiQNHGkW4PQD5zR5m+kJdH4T6tnzkxl5t96JY/rY=
Subject key identifier: 31:C6:FB:CC:BA:F0:AB:E2:19:42:4A:56:DB:D2:35:AC:5B:10:D0:FC
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019CDC37D07D0EC05DA52B5888D2F70DD50F
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Mcb7zLrwq-IZQkpW29I1rFsQ0Pw.roa
Signing time: Wed 11 Mar 2026 09:26:11 +0000
ROA not before: Wed 11 Mar 2026 09:26:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50338
IP address blocks: 87.76.201.0/24 maxlen: 24
87.76.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:37:d0:7d:0e:c0:5d:a5:2b:58:88:d2:f7:0d:d5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Mar 11 09:26:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31c6fbccbaf0abe219424a56dbd235ac5b10d0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:ee:24:63:14:fa:4f:41:30:d1:03:68:18:
a6:bf:e5:4a:de:86:77:07:22:08:80:5c:77:0a:12:
db:33:cb:80:e0:6e:27:cc:2b:2c:ee:50:ab:6f:71:
3c:1f:df:19:bf:c4:4c:47:b5:8b:65:02:9c:93:6d:
85:19:a2:4f:0b:ca:98:b7:f9:4c:ab:07:38:bd:f5:
ea:3f:eb:42:f3:a0:5c:5c:7f:34:c6:e0:a6:fc:f0:
eb:dd:6e:e9:bc:e5:49:da:6c:c1:59:67:03:76:54:
d5:f9:ae:96:b3:1a:c4:c2:85:b5:80:aa:cc:69:f0:
ed:d0:57:61:92:fd:21:88:1a:47:0b:2a:e9:dd:54:
dd:60:1b:d2:65:72:b6:01:65:75:e4:10:54:2e:8b:
eb:a5:e0:e5:c0:ca:d8:9c:37:46:64:40:b8:d7:a4:
b5:38:9f:1e:2c:9b:a4:22:9e:a8:bb:ee:f1:ec:0a:
44:b8:f4:af:f6:1e:24:03:a3:91:f0:f1:58:1e:63:
47:60:1f:ee:47:09:70:ca:4a:5a:cc:71:d6:48:fe:
76:8e:3a:eb:1c:be:29:e3:e6:b9:23:a6:e0:ca:fd:
c4:62:59:cc:b8:6d:07:fa:b5:63:24:c8:02:66:0a:
8e:77:79:2e:5e:a8:5c:48:46:0a:2d:ec:cd:6e:8f:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C6:FB:CC:BA:F0:AB:E2:19:42:4A:56:DB:D2:35:AC:5B:10:D0:FC
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Mcb7zLrwq-IZQkpW29I1rFsQ0Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.201.0-87.76.202.255
Signature Algorithm: sha256WithRSAEncryption
96:9f:da:43:b5:81:3a:1b:2c:01:5a:06:44:d8:16:9e:c6:85:
e4:2d:f4:05:3c:e6:41:fb:21:d8:bd:9a:22:95:f4:e3:d2:d9:
ff:f0:ea:cf:3e:7d:31:ae:4a:86:c8:43:86:42:4f:07:2a:1d:
54:0d:c7:08:97:85:4b:4e:7c:4e:af:ed:a9:0d:7e:83:d2:ea:
fc:fd:71:cc:f2:25:8d:b7:05:e9:af:fb:d1:3f:e1:03:dd:90:
7f:b8:b5:f6:16:89:d8:2e:4f:dd:14:e4:60:19:43:7b:5c:ad:
05:24:f1:9a:fb:49:01:6b:e3:3f:63:46:d6:15:f3:53:3b:97:
80:64:47:d6:72:24:e0:3a:91:8e:a7:21:2d:7e:56:69:e2:fc:
73:bf:79:b6:0f:a5:25:35:a2:91:06:fd:90:6d:0d:b7:bb:48:
70:18:6d:79:e0:27:f8:36:d4:41:f0:0c:e6:61:50:cd:a3:93:
7c:dc:b9:91:da:71:f0:d2:53:b8:08:fe:de:d8:bd:fa:89:3b:
40:ae:63:9d:51:9a:e3:1a:e9:f1:3b:a1:d0:56:ba:b4:fb:93:
3f:a6:d0:d8:75:0d:d9:66:82:0d:60:0b:47:a9:38:12:da:90:
d3:d3:ef:0d:ac:cb:39:2b:f4:76:d2:84:f7:06:eb:f0:a6:eb:
2e:97:49:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:31 2026 by rpki-client