Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/mvb79A0HUkJlZndsX45jDyz3xNo.roa
File: mvb79A0HUkJlZndsX45jDyz3xNo.roa (raw, json)
Hash identifier: DRFLjSmWscvkXgycuK2x94FLFsx3eZZTXHXgBM0N/QU=
Subject key identifier: 9A:F6:FB:F4:0D:07:52:42:65:66:77:6C:5F:8E:63:0F:2C:F7:C4:DA
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23691902CB715B4B2C3D571438368C18
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/mvb79A0HUkJlZndsX45jDyz3xNo.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209326
IP address blocks: 212.243.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:19:02:cb:71:5b:4b:2c:3d:57:14:38:36:8c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9af6fbf40d0752426566776c5f8e630f2cf7c4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:3d:01:a4:a7:76:61:1a:f0:b4:84:c3:fa:
55:1c:74:0b:fe:17:55:18:16:3f:d7:9e:3a:32:77:
61:f1:28:36:68:cb:70:ae:00:de:17:37:41:84:ba:
80:8d:8a:16:71:77:70:4d:e7:1f:2e:ad:8c:fe:72:
2c:e6:02:aa:23:56:18:64:39:ea:59:75:ef:22:b5:
db:c6:0c:8a:0e:be:bb:48:ea:73:b5:2d:84:bf:63:
ef:f4:95:8e:39:7c:57:37:92:4d:da:b2:cd:36:64:
93:01:c4:fe:5b:5a:8c:63:a9:15:7f:a8:25:f9:ce:
db:d4:ab:eb:7c:3e:2a:e6:c3:a4:01:5a:e6:cd:2a:
d8:b2:c4:b6:4a:03:a4:9e:17:59:c7:0f:25:76:16:
eb:12:f7:b3:57:c0:70:84:08:f1:39:4e:e5:66:19:
59:1b:16:b2:79:86:ef:94:79:a9:7a:4e:08:9d:b4:
1a:72:d8:07:0e:69:fe:72:aa:b8:c0:a0:05:90:05:
4d:1a:97:5f:ae:d3:9e:c2:15:d8:9b:ff:28:b7:c3:
66:2a:a6:0c:82:0f:0f:42:a7:0f:1d:5e:33:d4:04:
1b:6a:d8:d2:b5:7a:0c:5a:6f:05:8c:38:76:ca:c6:
88:9e:33:3a:5b:cb:e1:11:2f:fb:6e:df:ae:32:33:
b6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F6:FB:F4:0D:07:52:42:65:66:77:6C:5F:8E:63:0F:2C:F7:C4:DA
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/mvb79A0HUkJlZndsX45jDyz3xNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.112.0/24
Signature Algorithm: sha256WithRSAEncryption
54:79:e3:bf:81:f2:a1:01:27:01:ff:9d:69:e5:89:3c:b9:ef:
06:d4:df:5d:8e:2d:ae:3b:81:10:9a:c0:d1:51:5c:70:b6:f3:
1f:8b:0c:4e:d8:60:40:5e:7c:02:d6:44:40:d5:41:3a:14:72:
8f:2f:99:c3:75:aa:bb:7c:b1:99:22:5b:1a:44:48:b6:36:10:
8f:44:01:ec:69:97:d6:e0:42:cc:6d:83:92:f5:24:5e:a6:f4:
c3:ef:7f:7c:c8:0b:a9:d7:71:8a:ca:1e:58:07:10:6a:36:ea:
0b:d5:d8:16:32:f3:87:a0:28:a8:e3:65:c9:a1:29:e5:08:75:
87:4f:57:0c:27:98:e7:0e:e0:6d:97:49:c8:83:6f:c9:16:33:
5a:74:d3:bd:21:77:24:b1:9c:f6:e5:08:61:39:1a:c2:73:4f:
b9:f4:01:61:d9:8d:07:e4:c1:be:ca:9c:9d:da:0b:4c:99:6f:
30:2d:3a:da:4b:9e:27:53:bc:fa:fe:5e:5b:6e:e8:24:8b:f4:
0f:1f:4d:13:de:0f:b8:d8:7e:4e:1b:9a:17:9d:c7:04:7d:a1:
80:12:4d:d8:44:9c:03:ec:83:d9:73:fd:eb:cf:cc:ca:80:c8:
a1:49:c3:fe:0d:d1:7b:74:f2:79:96:78:f5:28:c3:6a:6f:20:
50:08:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:49 2026 by rpki-client