Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/_MwSvZpK_sGtiYLx6EKzmSrljis.roa
File: _MwSvZpK_sGtiYLx6EKzmSrljis.roa (raw, json)
Hash identifier: dS+nDUo51n3VpHHiTVTBJXrfS+Wyxklsi3bHmd6A/ks=
Subject key identifier: FC:CC:12:BD:9A:4A:FE:C1:AD:89:82:F1:E8:42:B3:99:2A:E5:8E:2B
Certificate issuer: /CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Certificate serial: 01A0EDC053396C03A4AACB43036DEB3704B4
Authority key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/_MwSvZpK_sGtiYLx6EKzmSrljis.roa
Signing time: Tue 29 Sep 2026 15:19:59 +0000
ROA not before: Tue 29 Sep 2026 15:19:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 176.117.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:c0:53:39:6c:03:a4:aa:cb:43:03:6d:eb:37:04:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Validity
Not Before: Sep 29 15:19:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fccc12bd9a4afec1ad8982f1e842b3992ae58e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:49:36:61:47:be:6a:53:7a:fc:91:e4:b5:
65:f0:08:f2:a7:00:02:b3:14:5c:40:ba:d4:f9:b9:
b2:28:69:01:15:71:a8:e1:ef:ac:be:5c:d8:e3:51:
f2:98:de:79:29:96:d2:f4:a0:47:7e:86:88:e8:eb:
56:c6:b5:0a:d3:ac:db:a3:95:09:a3:ff:a7:e9:58:
0c:d0:e9:7a:75:92:00:a8:b7:95:0d:84:b7:97:ce:
e2:76:d7:74:64:04:9d:5f:af:ed:ad:a9:61:5d:e7:
82:6f:60:a0:1f:3c:f1:53:31:d2:2d:3f:dc:4b:11:
2f:1c:03:04:5b:14:31:2b:27:0b:75:95:45:b0:43:
92:55:6d:09:ba:bb:56:ff:70:a5:65:d3:01:65:d3:
4b:73:71:d5:57:c5:42:c7:1d:74:48:16:4e:98:76:
7c:79:cf:a1:ea:60:b1:89:b0:d3:57:97:d6:c5:58:
5d:ce:3a:61:b1:7c:87:21:31:05:71:9d:d3:8c:56:
b3:54:c5:b2:76:47:9f:97:9c:18:44:67:40:f7:fa:
e1:b1:4f:bb:b4:69:c2:a4:47:1c:06:44:77:e7:69:
ea:9b:8e:ae:04:0a:0e:b3:c0:a3:21:1c:3e:1c:18:
80:a3:7e:ff:68:03:67:fc:fe:7d:3e:cf:53:b0:ef:
4a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CC:12:BD:9A:4A:FE:C1:AD:89:82:F1:E8:42:B3:99:2A:E5:8E:2B
X509v3 Authority Key Identifier:
keyid:CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/_MwSvZpK_sGtiYLx6EKzmSrljis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.107.0/24
Signature Algorithm: sha256WithRSAEncryption
48:91:19:78:64:e0:43:9f:4a:29:16:0a:00:55:49:58:76:a5:
d0:32:b5:81:68:a6:20:74:02:7c:b6:c2:c2:76:89:42:c3:29:
31:bc:29:57:77:5e:cb:0e:5a:63:09:9c:50:1f:3e:d2:28:c7:
f0:04:d8:84:a0:b7:77:2b:2e:7a:21:ee:ac:96:66:c1:7c:0d:
da:b9:9d:ed:ba:2e:62:26:da:47:f9:b8:0c:aa:d4:58:f1:6f:
67:7b:65:73:5f:51:86:37:35:89:51:37:c7:81:00:08:f7:bb:
23:5e:b2:92:9c:b1:1e:14:be:8f:63:0a:58:3b:f4:50:e0:82:
aa:44:73:eb:15:83:f0:f5:89:83:0f:c0:6c:50:5f:73:c4:06:
60:ce:4e:a1:0a:0e:6f:90:c4:cd:d7:0b:e1:ed:da:78:5b:be:
a3:3f:93:31:76:35:e9:a0:74:ea:ff:a9:36:21:e5:3d:12:66:
19:8e:cc:5e:e9:34:d8:24:aa:e5:2b:af:7c:f1:fe:c3:11:da:
40:94:b7:1a:ab:8d:18:de:fd:cc:20:df:9a:13:8b:3a:c6:5d:
af:de:b3:ed:f8:da:34:20:9a:72:8a:80:89:d0:17:5c:d3:b4:
fa:a9:34:b0:66:b1:7b:bd:9a:a3:ec:f6:8e:d8:ff:44:1f:5d:
3d:61:32:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:47:36 2026 by rpki-client