Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/MqYbbxnxxd2l8E2Wyg96n63KYzA.roa
File: MqYbbxnxxd2l8E2Wyg96n63KYzA.roa (raw, json)
Hash identifier: 4dPDI82yOTVQJ0rKA6n7qAEvGI2ZyNWZlWVl+H4lZJw=
Subject key identifier: 32:A6:1B:6F:19:F1:C5:DD:A5:F0:4D:96:CA:0F:7A:9F:AD:CA:63:30
Certificate issuer: /CN=f7e4be70c8c869bb2649e9cb5891e927f4ec88b1
Certificate serial: 019F2368657C6AEEFA58CC2E9EAF8729FEFB
Authority key identifier: F7:E4:BE:70:C8:C8:69:BB:26:49:E9:CB:58:91:E9:27:F4:EC:88:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-S-cMjIabsmSenLWJHpJ_TsiLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/MqYbbxnxxd2l8E2Wyg96n63KYzA.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35838
IP address blocks: 178.255.80.0/21 maxlen: 21
2a02:1788::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/9-S-cMjIabsmSenLWJHpJ_TsiLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/9-S-cMjIabsmSenLWJHpJ_TsiLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-S-cMjIabsmSenLWJHpJ_TsiLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:65:7c:6a:ee:fa:58:cc:2e:9e:af:87:29:fe:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e4be70c8c869bb2649e9cb5891e927f4ec88b1
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32a61b6f19f1c5dda5f04d96ca0f7a9fadca6330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:18:48:d6:aa:45:ef:48:1d:e8:3f:8b:04:
d9:84:ca:8c:cf:91:8e:fa:b2:97:c8:44:03:e0:90:
23:e8:cd:d2:9f:74:7e:48:92:05:3b:e3:d0:10:d0:
a3:bc:1f:f6:80:31:77:25:4a:92:f5:a2:ae:d3:e2:
62:3a:76:07:14:77:2e:c8:76:3d:0d:15:0b:43:44:
9d:ee:19:25:5a:8f:84:d9:35:a9:29:cc:94:98:83:
a6:8c:7b:21:e0:de:72:36:80:d1:29:69:32:2b:71:
8c:a6:ef:fd:f8:64:66:b1:fa:33:15:32:11:87:d6:
80:2b:8e:75:60:3c:71:bb:4c:08:38:fa:6c:3e:ae:
e4:a9:41:3e:5e:a6:72:6a:81:71:f6:c1:2e:34:3f:
e8:58:7a:e3:05:ff:9e:0e:0e:a3:f2:38:4f:9e:2f:
97:55:17:5e:f9:60:08:2a:29:81:a6:9b:b0:33:0c:
b3:6d:7f:10:bc:5a:75:49:5d:75:cd:86:c7:e2:56:
88:27:b5:15:b3:ff:1d:16:d0:72:8c:bc:5c:1a:bd:
2a:44:63:25:38:d5:de:e5:70:f1:2c:4d:b1:df:a4:
4c:94:f8:a1:30:62:e2:6e:cf:bc:ca:41:e7:62:fc:
3d:1b:44:c2:d5:1b:79:5a:e2:ab:db:a5:c0:7b:85:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A6:1B:6F:19:F1:C5:DD:A5:F0:4D:96:CA:0F:7A:9F:AD:CA:63:30
X509v3 Authority Key Identifier:
keyid:F7:E4:BE:70:C8:C8:69:BB:26:49:E9:CB:58:91:E9:27:F4:EC:88:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-S-cMjIabsmSenLWJHpJ_TsiLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/MqYbbxnxxd2l8E2Wyg96n63KYzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/9-S-cMjIabsmSenLWJHpJ_TsiLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.80.0/21
IPv6:
2a02:1788::/32
Signature Algorithm: sha256WithRSAEncryption
61:0a:81:fb:10:9f:ac:0a:a1:c7:4a:e3:6c:88:4d:0a:30:c1:
ea:b8:cd:31:3c:ed:6e:68:18:8e:3b:fa:f9:b8:9a:24:a1:42:
f5:ef:1e:8e:01:2f:a5:48:57:7e:94:14:24:39:4d:c0:fa:34:
b7:af:e0:2f:7c:38:72:c3:36:9b:9e:4e:d8:b5:3c:62:20:14:
25:bb:9a:4a:aa:23:f6:fe:0b:b1:ea:9a:a5:c7:3d:e6:6f:70:
3d:05:48:b2:bc:8e:f7:b4:40:89:28:f2:9e:8a:60:83:9b:85:
68:c1:12:11:ff:b3:f2:58:c0:34:d0:1b:f5:e9:94:78:29:76:
1f:97:c6:4d:f2:53:d4:a0:3f:cb:60:be:dc:a1:cc:ac:f6:5b:
ea:5c:a6:1a:52:f1:22:dd:cc:a9:fe:f8:fb:9b:65:bb:a3:d8:
de:cb:e5:5d:b4:86:1f:8b:e0:da:26:aa:b0:70:af:c9:a9:31:
2c:4a:f6:6b:d3:e9:98:ea:8e:96:c1:c2:9c:c1:16:87:c5:dc:
be:86:c7:0c:29:a5:e2:0a:13:f0:a6:7f:eb:ec:da:6a:d0:27:
bf:39:d5:02:c2:c1:86:67:6a:72:da:a6:d3:bd:2a:0e:3d:d3:
2f:2b:6d:df:c2:c3:7b:06:c4:6e:fc:37:a0:1b:57:b5:42:b6:
ac:2f:b5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:52 2026 by rpki-client