Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/MWCUs9X82rvNayTbM3cLTQma6Qc.roa
File: MWCUs9X82rvNayTbM3cLTQma6Qc.roa (raw, json)
Hash identifier: h+1/JHy/9IRFTDHRZzrIotWDntJmU/Qj+PFETRS6qxM=
Subject key identifier: 31:60:94:B3:D5:FC:DA:BB:CD:6B:24:DB:33:77:0B:4D:09:9A:E9:07
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A167A47990FB98BB2BF1537DEACA34F3D8
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/MWCUs9X82rvNayTbM3cLTQma6Qc.roa
Signing time: Fri 23 Oct 2026 07:23:14 +0000
ROA not before: Fri 23 Oct 2026 07:23:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 77.216.0.0/24 maxlen: 24
85.232.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:a4:79:90:fb:98:bb:2b:f1:53:7d:ea:ca:34:f3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 23 07:23:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=316094b3d5fcdabbcd6b24db33770b4d099ae907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2a:50:89:ce:4a:a9:33:2d:58:80:62:fd:ae:
2c:16:53:28:52:0d:13:8a:90:2f:10:ed:ca:cb:1c:
d6:e5:b2:cc:e0:50:b5:d4:d5:06:39:35:f0:03:10:
a9:f5:a0:fb:31:1d:91:56:33:e4:41:78:a3:98:49:
f4:e3:a9:ed:86:ff:6b:01:93:01:5f:f4:0f:76:52:
35:ac:07:a2:ee:c8:bc:6b:45:b7:2c:49:52:c3:37:
b0:43:cf:fc:52:de:c6:91:82:c2:ad:c9:28:f7:59:
ac:d6:5f:8e:0e:63:56:a5:da:49:ce:0b:8d:4b:3f:
b2:45:11:02:8d:42:b0:9e:b5:7e:5a:c9:c4:3b:54:
3f:06:0b:d2:e4:82:0a:e6:c2:cf:f8:a8:cf:33:54:
07:36:8f:e7:fe:ba:ec:66:62:e2:bb:e6:58:66:27:
76:fc:8a:13:7c:ca:20:3c:69:5d:80:8a:37:6d:be:
c8:a6:1e:81:99:ba:4e:ed:7e:ee:7b:2c:01:e1:29:
d8:8d:2b:92:76:9a:16:cd:0d:ea:16:a2:c9:b3:ad:
d9:33:50:1d:b2:39:14:07:f2:1c:3c:b2:aa:fc:1d:
b9:c0:74:ad:3a:ba:9d:78:39:91:c0:4b:6f:90:db:
a4:0d:3d:4b:8b:ad:ab:61:88:a3:52:7f:a4:58:06:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:60:94:B3:D5:FC:DA:BB:CD:6B:24:DB:33:77:0B:4D:09:9A:E9:07
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/MWCUs9X82rvNayTbM3cLTQma6Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.0.0/24
85.232.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c3:6c:8f:65:44:f4:9b:65:8e:a5:1a:dd:40:0c:91:70:77:
fe:78:55:ee:fb:58:1d:7f:57:64:6a:a6:ff:ec:3a:ad:64:64:
e8:36:50:ad:67:23:5b:58:f0:28:56:03:12:88:73:ea:43:66:
1f:e7:ef:31:f1:fe:eb:01:15:4e:6e:cf:c6:f8:2c:6a:34:84:
9d:d2:76:bd:52:a2:86:da:68:a3:a2:95:bf:84:8f:1a:8d:ec:
79:1b:64:b7:b5:39:63:5a:4e:81:bc:f8:20:ea:cf:ed:16:db:
34:99:ba:ee:ea:4a:13:b9:40:8d:66:ef:22:8a:2f:79:54:87:
da:25:c6:98:98:84:11:82:f6:e0:86:c0:3f:25:aa:90:4e:05:
06:89:09:f2:be:ca:f3:4b:93:9c:a8:52:8d:90:74:b6:2a:15:
85:ac:1f:9b:5f:c7:9c:02:5e:df:42:de:3f:8c:35:90:38:90:
8f:81:8e:ac:f7:0e:bf:eb:a3:ba:f2:26:16:7b:05:ff:6d:d4:
8e:23:88:ff:28:11:52:25:e8:06:8d:cf:9f:85:ca:f4:bb:d3:
46:3d:d9:80:4f:27:e7:f6:cd:2f:4d:cc:b3:56:5f:05:3f:02:
df:f1:af:c9:c4:b0:a0:3b:4a:7b:9c:6b:e1:1d:eb:8d:44:f7:
ca:cf:36:36
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFnpHmQ+5i7K/FTferKNPPYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0
OTRlMjAwHhcNMjYxMDIzMDcyMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTYwOTRiM2Q1ZmNkYWJiY2Q2YjI0ZGIzMzc3MGI0ZDA5OWFlOTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvypQic5KqTMtWIBi/a4sFlMoUg0T
ipAvEO3KyxzW5bLM4FC11NUGOTXwAxCp9aD7MR2RVjPkQXijmEn046nthv9rAZMB
X/QPdlI1rAei7si8a0W3LElSwzewQ8/8Ut7GkYLCrcko91ms1l+ODmNWpdpJzguN
Sz+yRRECjUKwnrV+WsnEO1Q/BgvS5IIK5sLP+KjPM1QHNo/n/rrsZmLiu+ZYZid2
/IoTfMogPGldgIo3bb7Iph6BmbpO7X7ueywB4SnYjSuSdpoWzQ3qFqLJs63ZM1Ad
sjkUB/IcPLKq/B25wHStOrqdeDmRwEtvkNukDT1Li62rYYijUn+kWAbi2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDFglLPV/Nq7zWsk2zN3C00JmukHMB8GA1UdIwQY
MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt
YmE3YzdkODE5MGNhLzEvTVdDVXM5WDgycnZOYXlUYk0zY0xUUW1hNlFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh
LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATdgAAwQA
Vei/MA0GCSqGSIb3DQEBCwUAA4IBAQCxw2yPZUT0m2WOpRrdQAyRcHf+eFXu+1gd
f1dkaqb/7DqtZGToNlCtZyNbWPAoVgMSiHPqQ2Yf5+8x8f7rARVObs/G+CxqNISd
0na9UqKG2mijopW/hI8ajex5G2S3tTljWk6BvPgg6s/tFts0mbru6koTuUCNZu8i
ii95VIfaJcaYmIQRgvbghsA/JaqQTgUGiQnyvsrzS5OcqFKNkHS2KhWFrB+bX8ec
Al7fQt4/jDWQOJCPgY6s9w6/66O68iYWewX/bdSOI4j/KBFSJegGjc+fhcr0u9NG
PdmATyfn9s0vTcyzVl8FPwLf8a/JxLCgO0p7nGvhHeuNRPfKzzY2
-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:54 2026 by rpki-client