Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/D_MvgtM2FfrwIDXfPwh28d1QTzc.roa
File: D_MvgtM2FfrwIDXfPwh28d1QTzc.roa (raw, json)
Hash identifier: 8CgFzSpAPPwSSiKVfDGvcTacC5XDOPUob1Tjfelo/es=
Subject key identifier: 0F:F3:2F:82:D3:36:15:FA:F0:20:35:DF:3F:08:76:F1:DD:50:4F:37
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 019FCC1D89FE332D0EDB0908F242E9173FC6
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/D_MvgtM2FfrwIDXfPwh28d1QTzc.roa
Signing time: Tue 04 Aug 2026 09:31:55 +0000
ROA not before: Tue 04 Aug 2026 09:31:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 163.79.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:1d:89:fe:33:2d:0e:db:09:08:f2:42:e9:17:3f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Aug 4 09:31:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ff32f82d33615faf02035df3f0876f1dd504f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:72:5d:53:3d:a2:78:bb:a7:84:b6:1d:6c:
a4:36:0b:1b:e7:00:2c:3e:a2:8f:86:1e:d3:a2:4b:
06:33:ec:00:b8:a4:7a:12:01:bb:4b:5e:a2:d1:b5:
5c:95:39:c7:d7:0e:c6:7d:35:e0:bd:1f:bb:ff:e0:
d2:93:b2:67:ff:37:66:eb:74:1d:ab:d0:81:24:58:
9c:98:3d:f9:14:57:9d:ef:a1:c0:74:21:ae:fd:33:
f3:52:e9:bc:57:04:99:84:6c:77:3b:a2:d8:07:b6:
d5:5c:e2:85:0b:e2:26:06:99:63:e6:a4:0e:69:26:
6a:55:9c:b6:32:4b:de:92:59:e4:f4:24:50:67:98:
d1:5c:b6:08:3a:22:3c:fa:0c:4c:4a:7f:d3:44:f3:
88:c0:68:a8:12:ce:ad:81:6e:1f:98:d7:56:d0:d7:
b3:2e:c6:8d:5a:f7:af:1a:ba:23:70:a6:3d:1b:94:
7e:f1:52:94:e0:f2:8d:49:f7:77:c3:8d:62:d2:9f:
21:e9:48:f6:64:b6:6a:c7:54:c0:28:4e:34:12:cd:
14:35:e6:29:f7:05:88:b0:bc:40:57:ca:82:3b:93:
ce:49:b9:cc:5b:7d:7c:39:38:2c:2a:ef:ee:bb:5d:
2d:eb:4a:c1:ad:b8:3f:e8:bb:b9:58:d2:82:72:f2:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F3:2F:82:D3:36:15:FA:F0:20:35:DF:3F:08:76:F1:DD:50:4F:37
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/D_MvgtM2FfrwIDXfPwh28d1QTzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.79.128.0/21
Signature Algorithm: sha256WithRSAEncryption
16:71:4d:67:39:6b:2f:50:5f:63:28:e2:45:e1:36:8f:d9:b1:
6a:e7:43:b3:18:c4:f5:84:9c:5e:82:7f:3b:58:f9:51:5e:29:
f1:a2:68:8c:ca:a0:29:f4:ad:19:6b:80:b4:e4:b7:d7:70:99:
60:91:32:da:2d:1b:12:a4:f9:67:08:35:07:3d:c0:a3:33:52:
df:7c:f1:7a:3d:5f:8b:a1:e8:68:f8:a6:07:e5:c4:ee:cd:4a:
1c:f4:3c:20:bb:ca:e2:0d:9d:a2:09:01:88:82:0a:2e:88:61:
fe:1d:5e:04:98:e9:38:23:2e:f5:a0:df:6e:03:8d:92:bd:b5:
f8:37:ed:2f:0f:50:ab:06:ac:8b:0f:8b:2a:db:31:c5:cb:da:
3e:02:b9:c4:dd:7c:92:7c:94:8d:7d:2c:9c:40:6a:0d:88:08:
86:9c:f7:4e:78:ac:7f:40:38:20:ed:15:d3:bb:ae:cb:9f:41:
54:7a:a4:f9:6e:2f:7c:e9:d5:f3:3f:7b:78:be:28:6e:37:1f:
47:de:d3:d0:88:98:42:8f:00:2b:fc:b3:bf:7c:57:58:0d:b2:
15:18:3d:fe:6b:33:e4:fb:2c:d8:50:e9:f9:be:ca:b6:62:b2:
24:8b:2d:8d:58:0f:ba:db:ca:02:25:cc:3a:06:d4:c8:aa:c2:
3f:8d:e6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:32:04 2026 by rpki-client