Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/cfecb0-aeb0-4fbb-8503-5973d41251fc/1/Msc8Vw40gg2-FntlzLu2vcJvbCo.roa
File: Msc8Vw40gg2-FntlzLu2vcJvbCo.roa (raw, json)
Hash identifier: JrvS8GVkvYRW9cXzjiTtjAVekTCOxNeNFxmhURPvtI8=
Subject key identifier: 32:C7:3C:57:0E:34:82:0D:BE:16:7B:65:CC:BB:B6:BD:C2:6F:6C:2A
Certificate issuer: /CN=7b7f52ac232e043fa8608b6c5e9923fa25478b2e
Certificate serial: 019F2335EA533FF761748B3719D090C0FBD0
Authority key identifier: 7B:7F:52:AC:23:2E:04:3F:A8:60:8B:6C:5E:99:23:FA:25:47:8B:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e39SrCMuBD-oYItsXpkj-iVHiy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/cfecb0-aeb0-4fbb-8503-5973d41251fc/1/Msc8Vw40gg2-FntlzLu2vcJvbCo.roa
Signing time: Thu 02 Jul 2026 14:22:43 +0000
ROA not before: Thu 02 Jul 2026 14:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 87.192.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/cfecb0-aeb0-4fbb-8503-5973d41251fc/1/e39SrCMuBD-oYItsXpkj-iVHiy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/cfecb0-aeb0-4fbb-8503-5973d41251fc/1/e39SrCMuBD-oYItsXpkj-iVHiy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/e39SrCMuBD-oYItsXpkj-iVHiy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:35:ea:53:3f:f7:61:74:8b:37:19:d0:90:c0:fb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7f52ac232e043fa8608b6c5e9923fa25478b2e
Validity
Not Before: Jul 2 14:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32c73c570e34820dbe167b65ccbbb6bdc26f6c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:88:22:96:ad:0a:89:34:fe:19:0c:dc:04:25:
6d:5d:a6:46:4d:04:29:b4:81:23:df:e8:cc:7d:de:
f5:04:88:cb:d0:32:db:70:ce:09:72:01:33:88:ad:
5e:24:16:48:d0:db:34:77:e1:a8:f6:5d:89:eb:4b:
49:c7:a1:9c:6a:27:f7:9f:3d:11:44:df:62:70:7f:
39:24:c4:79:81:e5:74:c7:7d:a4:d5:0b:5f:14:69:
79:c1:71:ba:97:dc:52:b6:2f:6c:a3:18:dd:ff:8d:
fc:18:4f:8b:23:6c:39:94:1b:3f:3d:3f:a2:45:8a:
98:d3:5a:75:94:42:2b:2d:3f:44:4e:05:84:3a:d0:
ad:d6:1c:c4:eb:ae:75:5e:76:d3:a9:de:c2:2a:3e:
13:58:49:ca:b9:18:6a:57:0a:c0:99:4e:e9:98:16:
72:e0:df:48:07:3d:29:71:0a:42:c9:fc:a4:e5:83:
ae:e7:7c:2d:a2:af:70:15:b0:23:5d:f0:44:49:52:
10:09:2e:76:2c:45:15:f4:c5:bf:4f:0f:2c:41:54:
b4:8d:4b:2f:20:09:12:f1:ab:9d:1f:e2:52:da:57:
17:0b:aa:9e:c8:0e:3c:57:68:ca:b2:94:e4:33:1a:
89:e8:d9:80:43:e3:d6:c9:b9:d1:a0:f3:e4:37:de:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C7:3C:57:0E:34:82:0D:BE:16:7B:65:CC:BB:B6:BD:C2:6F:6C:2A
X509v3 Authority Key Identifier:
keyid:7B:7F:52:AC:23:2E:04:3F:A8:60:8B:6C:5E:99:23:FA:25:47:8B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e39SrCMuBD-oYItsXpkj-iVHiy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cfecb0-aeb0-4fbb-8503-5973d41251fc/1/Msc8Vw40gg2-FntlzLu2vcJvbCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cfecb0-aeb0-4fbb-8503-5973d41251fc/1/e39SrCMuBD-oYItsXpkj-iVHiy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.200.0/23
Signature Algorithm: sha256WithRSAEncryption
92:fb:00:c3:9c:9e:cd:61:58:ef:91:ed:e0:bd:bb:b7:a2:c5:
26:bd:45:16:8a:67:03:d1:c7:d7:48:68:5f:cb:00:13:3c:30:
fe:3b:97:15:f9:db:45:5b:c9:41:e3:91:1d:92:c1:44:9e:ab:
d0:2d:a7:ca:37:79:cd:6c:ea:aa:22:c7:01:f9:83:0f:fd:a1:
f3:4f:da:12:8b:87:f1:a1:a9:33:7a:dd:3f:8f:03:b8:a6:d5:
ec:cd:ff:19:8c:53:20:b6:31:a9:82:a6:07:e1:39:fa:02:05:
25:f9:12:77:b5:e4:1c:38:ee:0f:7b:c3:fa:7f:62:6a:86:52:
66:57:6e:73:3e:03:15:55:61:37:f6:2a:a1:ad:b7:c1:ca:77:
43:47:3d:f9:4b:52:8b:c4:a3:c6:b2:09:7c:49:80:f6:83:a0:
38:ef:00:df:b7:f1:2c:c5:27:74:77:07:a4:69:90:18:3a:e3:
6f:da:08:65:1f:3a:8c:ff:48:b6:30:e6:78:b0:26:18:0b:e6:
11:a7:60:30:a0:bd:89:eb:21:9e:1d:57:cf:8e:a7:79:0c:b2:
1b:3d:2e:da:b6:03:06:f7:9a:dd:c3:3a:c4:12:0f:a3:d6:58:
cc:0f:0f:1b:91:3c:1c:e7:f1:c4:96:fa:17:91:97:7a:6f:57:
35:99:5f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:33:37 2026 by rpki-client