Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Mg7yBT-_TdbvB4_HqZgLVDgbbac.roa
File: Mg7yBT-_TdbvB4_HqZgLVDgbbac.roa (raw, json)
Hash identifier: /c8OfM2YQqdGadLWvti8TK/OCgatKha6kPKI91RnhE8=
Subject key identifier: 32:0E:F2:05:3F:BF:4D:D6:EF:07:8F:C7:A9:98:0B:54:38:1B:6D:A7
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A0ECD9E0A5051B64280B8FEF6C9C56A0A7
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Mg7yBT-_TdbvB4_HqZgLVDgbbac.roa
Signing time: Tue 29 Sep 2026 11:08:16 +0000
ROA not before: Tue 29 Sep 2026 11:08:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218548
IP address blocks: 2a03:5840:169::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d9:e0:a5:05:1b:64:28:0b:8f:ef:6c:9c:56:a0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Sep 29 11:08:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=320ef2053fbf4dd6ef078fc7a9980b54381b6da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:97:18:e7:40:cc:41:06:95:1a:0f:63:15:
ad:71:92:c4:b0:9c:b8:8f:96:42:a3:88:8f:36:38:
20:3e:2c:a8:9b:80:54:35:79:fc:db:dd:00:4b:dc:
cb:f5:25:14:bc:a7:98:65:1b:cc:9f:7f:e4:da:df:
93:3f:03:3c:7e:2a:61:42:17:73:01:1a:01:f6:7e:
9f:42:e1:90:37:b0:cd:91:90:4b:66:4e:e3:25:1a:
ee:6a:e8:b2:13:f5:11:93:45:c7:37:0f:b5:dc:23:
8f:bb:68:9e:71:7c:28:c9:a1:57:af:f2:d3:67:8a:
9e:c7:3e:1d:d5:b1:9f:22:7a:01:3a:7a:0e:c7:4d:
88:79:80:bf:b8:a7:e5:e0:8c:ca:95:c3:7f:0b:89:
67:57:ac:54:f2:42:1d:f4:f0:00:a3:4a:66:b6:e3:
1c:fa:47:a0:78:2f:10:10:3c:cb:a4:79:ae:81:68:
96:fc:25:dd:d9:5e:af:62:63:8f:d0:05:ae:42:b3:
0f:4b:fe:99:0d:6f:70:1d:c3:cd:49:8e:22:1e:68:
40:f9:f4:de:16:ef:33:49:30:21:8f:03:03:0c:79:
5a:53:31:37:f6:3c:a7:fc:8d:a7:c0:55:db:8c:d4:
75:3e:59:ff:5b:d4:d2:a0:b0:8d:84:46:0a:48:d1:
ae:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0E:F2:05:3F:BF:4D:D6:EF:07:8F:C7:A9:98:0B:54:38:1B:6D:A7
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Mg7yBT-_TdbvB4_HqZgLVDgbbac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:169::/48
Signature Algorithm: sha256WithRSAEncryption
8a:75:4a:eb:90:bf:b5:81:7e:2c:77:fc:e9:56:b8:14:03:cf:
85:9c:5e:49:ff:a8:fe:df:11:ca:1d:87:49:16:6a:09:2c:fb:
6d:be:4d:b5:1b:54:50:59:d6:5e:6b:e7:0c:c9:c2:c2:59:fe:
fa:c1:c7:ad:ca:f5:f0:c8:f8:ff:6d:d5:27:f7:2e:81:5a:77:
98:93:db:ba:d5:42:55:8a:08:e3:cf:6b:2e:aa:d9:fe:cf:d0:
24:4c:a2:61:cf:5d:40:0b:ac:b3:3e:10:80:aa:0b:bb:16:0c:
53:aa:cf:d6:f1:02:55:a4:54:30:03:0b:97:24:e3:6a:09:e7:
38:20:fd:d6:e7:fb:7b:cc:fb:6e:c9:41:4e:45:50:b2:df:0a:
91:05:e8:08:4e:33:52:2c:3c:46:cf:48:40:c7:c0:23:5e:df:
b4:0a:40:d7:26:5c:ad:e9:59:cf:72:8d:7e:2d:98:80:bc:23:
2b:85:12:9f:d5:47:90:cf:a5:5a:47:69:3c:06:35:83:c5:be:
d3:ed:39:83:05:58:f3:00:c1:cd:ef:8a:9f:6b:b1:d3:8a:12:
42:db:96:60:2c:a5:9e:9e:b1:28:e4:38:d2:de:95:5a:be:6d:
7b:f9:2f:de:f1:6e:f2:24:df:c3:b2:d8:8e:86:2f:7b:c9:cd:
af:74:04:0e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaDs2eClBRtkKAuP72ycVqCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjYwOTI5MTEwODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjBlZjIwNTNmYmY0ZGQ2ZWYwNzhmYzdhOTk4MGI1NDM4MWI2ZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRuXGOdAzEEGlRoPYxWtcZLEsJy4
j5ZCo4iPNjggPiyom4BUNXn8290AS9zL9SUUvKeYZRvMn3/k2t+TPwM8fiphQhdz
ARoB9n6fQuGQN7DNkZBLZk7jJRruauiyE/URk0XHNw+13COPu2iecXwoyaFXr/LT
Z4qexz4d1bGfInoBOnoOx02IeYC/uKfl4IzKlcN/C4lnV6xU8kId9PAAo0pmtuMc
+kegeC8QEDzLpHmugWiW/CXd2V6vYmOP0AWuQrMPS/6ZDW9wHcPNSY4iHmhA+fTe
Fu8zSTAhjwMDDHlaUzE39jyn/I2nwFXbjNR1Pln/W9TSoLCNhEYKSNGuaQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDIO8gU/v03W7wePx6mYC1Q4G22nMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvTWc3eUJULV9UZGJ2QjRfSHFaZ0xWRGdiYmFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAFp
MA0GCSqGSIb3DQEBCwUAA4IBAQCKdUrrkL+1gX4sd/zpVrgUA8+FnF5J/6j+3xHK
HYdJFmoJLPttvk21G1RQWdZea+cMycLCWf76wcetyvXwyPj/bdUn9y6BWneYk9u6
1UJVigjjz2suqtn+z9AkTKJhz11AC6yzPhCAqgu7FgxTqs/W8QJVpFQwAwuXJONq
Cec4IP3W5/t7zPtuyUFORVCy3wqRBegITjNSLDxGz0hAx8AjXt+0CkDXJlyt6VnP
co1+LZiAvCMrhRKf1UeQz6VaR2k8BjWDxb7T7TmDBVjzAMHN74qfa7HTihJC25Zg
LKWenrEo5DjS3pVavm17+S/e8W7yJN/DstiOhi97yc2vdAQO
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:06:39 2026 by rpki-client