Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/muW2gXnRp1qaODo0ouyKGYdXRQM.roa
File: muW2gXnRp1qaODo0ouyKGYdXRQM.roa (raw, json)
Hash identifier: uwoS++UOOAyVAxFL4NeJEEd/lYaAh16OBVSecbqpdiQ=
Subject key identifier: 9A:E5:B6:81:79:D1:A7:5A:9A:38:3A:34:A2:EC:8A:19:87:57:45:03
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 01A0E7A39CBD3082C01AA86582BFC090DA8A
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/muW2gXnRp1qaODo0ouyKGYdXRQM.roa
Signing time: Mon 28 Sep 2026 10:50:54 +0000
ROA not before: Mon 28 Sep 2026 10:50:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210320
IP address blocks: 157.173.79.0/24 maxlen: 24
2001:67c:d4::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:a3:9c:bd:30:82:c0:1a:a8:65:82:bf:c0:90:da:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Sep 28 10:50:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ae5b68179d1a75a9a383a34a2ec8a1987574503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:ca:9b:4b:96:da:07:d1:28:5c:76:3e:ee:
f4:eb:00:60:b9:55:be:78:69:15:d5:06:21:2c:c2:
61:ba:32:fc:ce:f4:7d:1d:5c:68:eb:2e:48:c3:c6:
f2:a9:7a:a3:d9:b6:4b:52:ef:94:de:77:b5:7a:6c:
ed:c9:5e:ad:d6:82:ea:51:a1:87:c9:5c:d4:4e:6c:
df:61:7a:7c:0c:b1:9d:86:b1:38:ed:67:5f:c7:2c:
20:57:99:75:9f:2b:4c:6f:d6:00:d6:9b:50:33:13:
58:6c:ef:40:e6:4e:af:fc:d0:96:d9:ed:64:16:b7:
91:61:f4:4b:f0:3d:48:31:94:9a:f3:78:c5:d7:7f:
6d:27:bf:c1:a7:32:5e:84:e8:c8:ec:0f:c4:5f:ec:
f3:c9:18:18:09:39:02:0b:a3:57:b2:eb:64:9e:c7:
0a:51:0c:f1:0d:b3:cf:6f:d2:d0:a3:a3:06:7f:c0:
70:b0:41:83:69:00:8e:98:04:7e:d5:69:b8:b7:0c:
df:44:e7:d2:0b:08:91:40:50:22:fd:9c:a1:7a:3a:
e2:65:25:02:27:39:50:a5:ad:4a:63:93:fd:b0:bf:
9f:8b:53:df:a8:eb:d9:76:b2:40:14:2c:af:3b:91:
53:ea:3a:3e:ae:20:a4:ac:97:8c:d9:f2:eb:12:db:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E5:B6:81:79:D1:A7:5A:9A:38:3A:34:A2:EC:8A:19:87:57:45:03
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/muW2gXnRp1qaODo0ouyKGYdXRQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.79.0/24
IPv6:
2001:67c:d4::/48
Signature Algorithm: sha256WithRSAEncryption
8d:80:21:36:c0:23:2b:40:db:a0:fe:59:c2:a0:18:c3:33:d9:
25:95:89:be:6a:ff:99:2c:a6:02:0c:30:cd:b2:bc:3d:f9:b5:
28:ee:e7:07:c8:db:e1:f0:15:03:a9:eb:b1:76:ad:3b:74:c0:
d2:1d:46:4b:e2:b9:94:d4:d8:25:18:94:8f:9b:2e:4c:e0:27:
b1:7f:96:9e:f1:cf:f5:b5:48:0e:09:14:57:83:ea:27:22:e6:
dd:66:fc:3b:fc:10:f1:86:62:71:82:0c:9e:d4:a3:47:93:ad:
f8:54:99:57:44:2d:fc:f8:b8:5c:c4:c4:ae:38:b0:68:8c:65:
d7:64:c0:5b:79:04:5b:70:70:a4:c1:df:f3:ab:2c:8d:cb:15:
3a:c7:97:09:6e:66:3a:ba:05:d5:24:c1:1c:00:38:63:b9:74:
25:ee:8a:58:fe:f2:d9:52:ea:ab:c1:ce:09:5b:a2:ac:7b:18:
48:54:ec:ba:da:b2:f5:63:cc:56:5d:f9:8a:a7:ab:6d:46:72:
96:b6:51:66:34:ca:10:02:b0:7f:ea:c7:31:c6:34:c9:99:b9:
81:29:be:db:e5:92:6f:49:1e:5d:b1:a6:3c:17:93:f3:d5:07:
70:ad:9c:50:23:fc:4c:28:e4:e8:00:78:2b:a8:7e:fa:56:58:
e6:21:39:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:31:46 2026 by rpki-client