Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/MXvVyfBfxWOD7oLbdHQdVC5C-wg.roa
File: MXvVyfBfxWOD7oLbdHQdVC5C-wg.roa (raw, json)
Hash identifier: wZoNEK1Oa0UDZZCLahAs4WaxNSizyefTF0zT149zqEQ=
Subject key identifier: 31:7B:D5:C9:F0:5F:C5:63:83:EE:82:DB:74:74:1D:54:2E:42:FB:08
Certificate issuer: /CN=1c13087c3676716032f7f90fd0e8e7fca0bfecd1
Certificate serial: 019F236833EB8D604D1069F9EAB360589CE6
Authority key identifier: 1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/MXvVyfBfxWOD7oLbdHQdVC5C-wg.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201600
IP address blocks: 46.227.220.0/24 maxlen: 24
93.159.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:33:eb:8d:60:4d:10:69:f9:ea:b3:60:58:9c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c13087c3676716032f7f90fd0e8e7fca0bfecd1
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=317bd5c9f05fc56383ee82db74741d542e42fb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:be:69:a1:3f:04:0c:2b:9b:d5:50:45:89:cd:
7a:90:f7:6a:f3:af:8e:26:92:48:ac:37:4d:90:c9:
72:ab:51:f8:38:4b:fe:c6:36:a6:6a:54:ff:a8:d7:
bb:a9:b1:10:de:81:0e:97:be:e3:1e:a9:d6:0f:9c:
85:3c:86:90:bf:e3:b7:54:86:fb:cd:e0:0f:9b:86:
ed:ee:5d:0d:95:b6:36:77:68:38:5a:7c:50:9a:41:
39:b9:d8:02:31:e3:a7:62:c5:4f:cf:86:91:05:c4:
e5:96:e2:54:91:41:27:82:8b:fd:f6:6b:e9:7d:23:
ae:a5:22:d9:0c:98:0e:cd:ea:bc:40:dc:2e:e9:bd:
c4:c4:ca:a4:40:93:97:36:3c:e8:a3:d9:c9:10:49:
32:7e:40:67:86:ec:c0:19:ba:b3:74:ad:ec:13:b2:
0e:be:5c:28:52:c8:50:69:59:15:09:9e:83:ff:85:
6c:2a:08:8f:75:63:df:4b:2b:50:b5:a3:93:95:d3:
ba:c5:4d:b2:cf:b7:38:85:ad:0f:22:65:13:43:02:
a5:60:16:60:84:2c:95:b8:56:06:c7:74:b4:7c:c7:
e8:2f:45:b2:0d:66:b1:34:e5:84:fd:c4:30:f8:49:
bc:dd:6b:76:f9:2f:ee:5e:d7:fd:89:ea:8e:38:0d:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7B:D5:C9:F0:5F:C5:63:83:EE:82:DB:74:74:1D:54:2E:42:FB:08
X509v3 Authority Key Identifier:
keyid:1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/MXvVyfBfxWOD7oLbdHQdVC5C-wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.220.0/24
93.159.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f7:ec:8e:05:51:66:0e:00:2b:5b:be:79:23:87:7b:60:8e:
54:08:b8:b4:4c:c0:df:5b:72:91:0a:8c:2b:42:69:b9:fb:6b:
4e:ed:e9:38:10:b7:63:83:04:3b:c0:1b:72:99:d2:9a:d5:33:
05:fa:ab:db:4d:8d:eb:2a:c4:62:f3:16:a7:b9:c9:7b:c4:a8:
23:86:9f:05:e8:49:90:e8:01:02:8f:3c:0c:99:47:be:1c:68:
cd:56:4a:40:32:b7:a6:4f:14:78:05:7e:97:7c:ba:ce:16:b0:
7e:07:7d:35:a5:be:9c:e4:cc:42:04:00:07:ea:75:40:7f:da:
52:8c:cb:7f:71:26:39:e7:91:d7:f6:34:d0:cc:ff:07:61:55:
d1:27:98:1c:c8:5f:71:a7:bd:b8:cf:d5:88:a0:7a:d3:6e:44:
f4:c3:b8:58:9f:c5:39:6a:3e:7e:8d:06:43:88:f0:30:f3:6e:
ed:12:ac:33:6b:46:80:b2:af:dc:c1:08:27:5f:ee:28:09:ff:
d2:a3:d9:53:d6:18:24:01:75:c5:76:0a:22:d5:f2:3b:6c:35:
31:79:b0:23:72:b3:ce:19:5b:a5:ac:84:64:f6:be:07:95:ff:
f2:82:f9:3b:0b:49:bc:de:f7:9d:a5:ca:c2:d4:d9:4c:84:ec:
9b:cd:3a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:32:59 2026 by rpki-client