Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MSCHdozXiQ-N6mwEypolh7iyAFs.roa
File: MSCHdozXiQ-N6mwEypolh7iyAFs.roa (raw, json)
Hash identifier: wllCWVj7m7YqHQe6XcQNxA6FbjPeFZFd/GjMto93z0U=
Subject key identifier: 31:20:87:76:8C:D7:89:0F:8D:EA:6C:04:CA:9A:25:87:B8:B2:00:5B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F096F9BFCF8658ACF0D7C9CF3E14DE457
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MSCHdozXiQ-N6mwEypolh7iyAFs.roa
Signing time: Sat 27 Jun 2026 14:15:37 +0000
ROA not before: Sat 27 Jun 2026 14:15:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210814
IP address blocks: 87.83.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 16:11:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:6f:9b:fc:f8:65:8a:cf:0d:7c:9c:f3:e1:4d:e4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 27 14:15:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=312087768cd7890f8dea6c04ca9a2587b8b2005b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:5a:7b:6d:06:32:36:69:87:62:83:51:a6:
e5:58:18:54:81:64:05:6b:94:7b:56:53:6b:18:ea:
a7:e8:0a:8f:22:f4:e6:da:11:60:66:f7:10:0d:73:
b1:01:ca:26:ae:a5:e9:b9:7f:f9:f0:90:fc:ad:66:
99:d2:33:9d:3e:d2:54:ba:89:37:68:4c:a1:54:28:
0e:34:1b:ef:20:22:75:62:1c:bb:bd:74:41:3f:f4:
4b:2c:70:86:4e:57:ad:bc:2d:c3:f6:78:6b:76:af:
eb:41:28:de:77:2c:73:28:be:8c:08:30:0e:cf:8f:
7e:25:da:51:57:7f:f5:46:cc:65:38:77:a1:26:41:
f5:0c:46:93:1d:dd:08:e7:c7:53:22:4a:4c:c3:d0:
47:9b:57:a7:c2:e3:9b:fc:cc:59:3d:dc:08:ca:ff:
23:93:23:2f:10:36:eb:34:ef:2e:d5:05:c5:dc:d9:
27:d2:36:86:a0:81:19:5e:ed:e8:8d:f1:e8:2e:79:
d2:aa:ed:c9:0f:8d:d0:a0:fe:49:b4:a0:3f:19:08:
ef:e8:d7:6d:31:1a:52:f1:56:60:37:ca:93:65:f8:
21:11:a7:00:59:db:8c:a4:5a:46:5d:c2:78:b8:44:
3f:7d:d0:33:8e:be:77:4b:ce:a5:cf:95:ab:27:51:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:20:87:76:8C:D7:89:0F:8D:EA:6C:04:CA:9A:25:87:B8:B2:00:5B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MSCHdozXiQ-N6mwEypolh7iyAFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.84.0/24
Signature Algorithm: sha256WithRSAEncryption
86:39:92:40:79:b8:0d:2c:f7:79:f6:43:41:df:7b:17:c7:c3:
2b:06:e2:d2:a5:4b:30:89:0b:05:2b:6a:d4:7b:5e:5d:3e:42:
d5:df:e2:93:00:61:0f:13:19:99:0a:da:f0:9e:93:27:04:3f:
df:5b:8b:b0:04:cb:90:20:1e:62:2c:f7:ae:53:cf:85:ff:74:
0d:27:36:fe:0d:c7:31:29:4c:b8:b5:67:46:8b:10:31:df:e9:
87:ea:40:62:d8:59:29:e4:e5:26:65:38:e8:f4:17:43:38:15:
00:84:a9:e9:eb:29:c9:00:ed:dc:5f:2b:21:3d:87:55:43:b9:
d0:68:d8:68:94:07:4f:e2:4e:30:1a:da:80:09:52:13:73:d2:
d3:0a:ab:c5:e4:d3:e2:96:68:89:34:9b:d8:45:d0:fc:ae:5a:
2c:57:b9:8f:dc:bf:a5:48:1a:4a:93:06:bb:17:8c:f8:8f:cd:
05:7d:97:ce:97:ca:75:df:73:95:cf:4a:4c:cf:c5:da:60:65:
4c:5e:bd:9f:09:1c:d5:6f:a8:9e:da:60:3a:ff:ca:82:09:92:
03:53:1b:f6:00:24:a8:07:91:de:aa:19:31:60:83:31:fa:1c:
44:dd:8f:fc:35:04:13:48:5e:0b:20:34:7c:5d:fb:0f:84:11:
18:ca:39:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 01:59:50 2026 by rpki-client