Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/MKwiTdenphsYJ_kfTrcYo6UcD7I.roa
File: MKwiTdenphsYJ_kfTrcYo6UcD7I.roa (raw, json)
Hash identifier: nL9/mDZHDkh6gnqmoDFsouH6WUNsxINNDWtgs1jzkN4=
Subject key identifier: 30:AC:22:4D:D7:A7:A6:1B:18:27:F9:1F:4E:B7:18:A3:A5:1C:0F:B2
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A04F87C6784B7F9A58929AD22C7CAB8805
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/MKwiTdenphsYJ_kfTrcYo6UcD7I.roa
Signing time: Sat 29 Aug 2026 21:58:13 +0000
ROA not before: Sat 29 Aug 2026 21:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206134
IP address blocks: 77.91.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:87:c6:78:4b:7f:9a:58:92:9a:d2:2c:7c:ab:88:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Aug 29 21:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30ac224dd7a7a61b1827f91f4eb718a3a51c0fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:00:1f:09:40:56:f8:65:e5:fb:0b:a8:5a:
d1:cd:e5:cc:91:e3:7f:ed:18:df:a2:72:39:d0:15:
9e:c0:b2:98:8a:72:f2:cc:d7:fe:41:e7:67:76:ae:
26:e4:37:92:a2:d5:f8:5d:c8:74:5d:c7:6b:2e:47:
bd:5c:34:ad:06:b3:68:05:3d:06:a4:10:97:01:f8:
9b:6e:5e:f6:90:35:59:bd:33:83:f8:84:4f:9f:56:
aa:a0:25:b8:0e:02:2a:cf:b4:70:5a:e1:e6:b9:e9:
e5:10:64:95:a0:48:0e:0f:ad:d3:b7:79:d7:13:34:
73:1d:82:1d:e5:f7:d7:4f:f2:8a:2e:6d:1e:e8:99:
8d:75:b5:d2:ce:38:3c:2e:51:9c:49:89:8e:e8:d4:
7c:77:4b:1c:37:8c:f1:b5:dd:35:01:9f:ee:24:08:
c2:96:c9:55:4e:83:28:40:c4:49:eb:3a:ca:51:49:
91:66:db:75:e7:3a:6c:29:3c:4d:2c:48:7d:34:d1:
e6:5a:99:e4:92:69:10:98:ed:d9:2d:9c:e4:56:94:
d6:50:c3:00:4e:7b:6a:f7:7f:2f:f8:38:d0:64:10:
a0:34:c7:05:68:2b:19:b6:11:f2:6e:49:ea:95:3b:
b3:62:61:12:a6:2e:8b:5f:79:c0:05:4b:0f:58:81:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AC:22:4D:D7:A7:A6:1B:18:27:F9:1F:4E:B7:18:A3:A5:1C:0F:B2
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/MKwiTdenphsYJ_kfTrcYo6UcD7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.79.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:0c:60:b2:42:0e:b1:6e:4f:ea:20:57:be:7e:60:2a:0d:a7:
a1:0b:c5:d8:63:e4:fc:f2:6b:ed:e0:5b:a3:8a:f5:7d:5a:dc:
3f:ec:7a:f6:09:76:61:df:8a:ec:ac:2b:dc:14:bd:82:fd:7c:
6d:20:23:17:31:9d:60:86:fa:df:e7:c3:a8:a8:13:59:07:f6:
34:0d:82:7f:c2:d4:62:21:f1:8c:f7:41:d3:6f:22:5f:6a:49:
33:ac:ff:7d:1b:b0:b1:06:1c:73:4d:af:36:5c:23:56:85:56:
61:f7:8d:c3:36:59:0e:fe:0a:ae:33:bd:1e:3c:43:fd:f6:04:
47:ef:c3:03:52:05:96:c9:65:07:d2:34:b9:ef:32:51:b2:0d:
9d:8a:e0:1c:2c:a4:b7:13:70:9b:d7:38:f7:71:07:f2:a3:9c:
d7:78:12:17:05:0e:c4:2a:01:59:bc:39:69:9d:0b:59:13:d4:
ad:8e:0f:16:88:7f:27:8b:a6:dd:dc:19:38:f0:19:c9:62:1f:
d3:a5:9e:36:bb:e9:23:54:e7:3e:39:ae:b1:ee:ae:fe:1e:15:
09:f4:74:03:5a:77:d6:26:27:9f:a8:1d:d7:ff:c0:16:a8:74:
77:a0:83:2c:23:d2:5e:47:ed:68:6b:58:64:38:6f:85:27:18:
6f:8d:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:36 2026 by rpki-client