Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/MoLmHWr4os_TzQ0ir6wzJ1fb9lw.roa
File: MoLmHWr4os_TzQ0ir6wzJ1fb9lw.roa (raw, json)
Hash identifier: Yy5uhhsngZrScA0Eg+QQze1+kBbvemiQtIPeKZm98z8=
Subject key identifier: 32:82:E6:1D:6A:F8:A2:CF:D3:CD:0D:22:AF:AC:33:27:57:DB:F6:5C
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F236916AF7AB4BA93C12BDB4F5F35E32D
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/MoLmHWr4os_TzQ0ir6wzJ1fb9lw.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206794
IP address blocks: 195.65.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:16:af:7a:b4:ba:93:c1:2b:db:4f:5f:35:e3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3282e61d6af8a2cfd3cd0d22afac332757dbf65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:27:4e:16:06:63:5d:4b:20:84:c4:97:6c:
a5:69:dc:cc:9f:fb:f1:9d:c1:ff:23:06:c5:ea:fb:
77:23:d0:d5:a2:49:1c:36:39:3e:44:2d:80:e2:cb:
b3:37:96:2d:5a:87:80:31:8c:41:78:c2:ef:49:a9:
7d:6d:ef:cd:74:83:d1:44:41:82:41:8d:35:d5:59:
eb:41:33:a1:6f:f7:78:f3:f2:9e:f1:e3:39:92:52:
7a:98:b5:9d:e1:b5:8b:2a:d9:03:c3:16:9a:68:d0:
43:45:20:b5:1c:40:75:69:55:c0:19:5e:40:63:4b:
54:d3:56:b2:60:2c:fc:26:d5:f4:eb:2e:ad:2f:5d:
55:68:a5:6e:e0:6f:3c:4d:1d:d6:32:3c:14:00:94:
d8:8e:48:95:d1:4c:7a:af:17:0d:be:25:e4:00:90:
e3:a2:d1:d2:8c:ad:0e:0a:7f:84:84:59:5c:08:05:
d2:9a:41:db:33:3b:37:b3:0f:23:89:e9:56:ce:c9:
15:99:03:e6:aa:2b:01:51:10:85:72:8d:35:99:2b:
6c:4a:f1:e6:4c:3c:62:cb:8a:ad:fe:12:ee:75:98:
68:df:e4:cc:c4:70:19:c5:c5:05:f9:2f:4e:b9:af:
84:3f:45:d7:88:94:79:aa:7f:cf:9c:62:28:28:dd:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:82:E6:1D:6A:F8:A2:CF:D3:CD:0D:22:AF:AC:33:27:57:DB:F6:5C
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/MoLmHWr4os_TzQ0ir6wzJ1fb9lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.86.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a1:c4:5e:7e:35:a1:14:11:e1:a0:53:90:e9:e1:3d:a5:87:
5b:24:f4:b1:06:8d:69:43:b2:08:64:14:f1:da:64:a4:03:34:
65:2f:50:fe:32:b7:7e:9b:63:1c:9e:1e:2e:32:17:8e:af:68:
58:b0:2c:a3:1c:37:5f:c6:ad:4a:60:22:5d:17:c9:ff:3d:e4:
3b:6f:89:1b:a1:62:e2:03:44:48:a4:d8:af:6f:26:bb:34:17:
1f:a1:db:58:51:1f:fc:58:8d:78:8c:1c:7f:ba:8a:5b:ae:cc:
f2:17:89:ad:22:ff:d8:1a:42:a7:d5:05:20:c3:4d:89:ab:38:
69:dd:8b:00:a1:cf:f2:93:4b:a5:d4:36:64:2d:be:69:56:a8:
1e:73:60:ae:8a:ad:ea:89:f6:c9:47:47:56:70:0b:85:c5:f1:
00:3f:b9:9c:a8:e6:0d:c6:e7:20:ef:ef:c6:2e:9a:71:0d:48:
63:5b:10:13:9d:fb:c5:1c:8e:c2:84:ee:ce:3c:90:61:5e:b3:
0d:1e:4f:0c:49:49:ea:e8:fb:15:15:87:38:41:ea:78:18:9b:
e3:4f:1e:70:bc:e2:c5:e8:be:d7:0d:45:c8:48:75:bc:e6:b3:
ad:02:96:8c:9e:20:fe:eb:f2:8f:b3:86:1a:50:26:0d:fe:5f:
b7:45:c2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:27 2026 by rpki-client