Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/mVGia7ENoLLUpW98RzfdJc562rA.roa
File: mVGia7ENoLLUpW98RzfdJc562rA.roa (raw, json)
Hash identifier: JYp208WHpb5yzKFE/ZHw5jIH7B35gZOJdVbE93AnYU8=
Subject key identifier: 99:51:A2:6B:B1:0D:A0:B2:D4:A5:6F:7C:47:37:DD:25:CE:7A:DA:B0
Certificate issuer: /CN=2ef67b74ce8f2a4ca350163a7b3e13c37173c7ae
Certificate serial: 01A052C36685A2A785F6460606CC50E60EC8
Authority key identifier: 2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/mVGia7ENoLLUpW98RzfdJc562rA.roa
Signing time: Sun 30 Aug 2026 13:02:12 +0000
ROA not before: Sun 30 Aug 2026 13:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35258
IP address blocks: 136.176.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:c3:66:85:a2:a7:85:f6:46:06:06:cc:50:e6:0e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef67b74ce8f2a4ca350163a7b3e13c37173c7ae
Validity
Not Before: Aug 30 13:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9951a26bb10da0b2d4a56f7c4737dd25ce7adab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:4f:21:2c:e7:5c:92:04:1a:b4:69:ef:96:
2e:c2:98:82:32:b6:ec:0f:40:41:f3:e6:60:3d:6d:
bb:44:3e:4e:56:ed:18:a7:21:45:c8:af:8e:b8:b4:
ce:cd:ac:a5:58:e2:b1:3f:9d:99:7f:45:0b:42:53:
03:b1:e6:1b:da:20:28:11:fd:5c:f6:2e:d6:3b:a9:
7e:70:6a:6c:0e:a2:d8:6c:0f:8e:bb:b3:69:bb:4a:
c5:6e:f8:0c:d5:fb:86:4f:82:e3:bd:7f:ec:01:90:
90:79:32:63:91:f4:c6:07:15:f4:0b:ab:ca:6d:84:
cb:29:07:80:67:f9:a8:6f:14:15:68:8f:5d:87:99:
83:bd:c1:79:47:48:d4:c9:95:d9:5d:ee:48:5e:e2:
f6:50:e1:c4:6b:e5:2e:3d:1e:13:a5:9e:f4:16:07:
c1:00:4d:3f:fb:32:da:a8:27:7d:ee:ec:44:75:aa:
1c:7f:5a:0c:d9:d3:9c:92:da:a8:c6:b7:e4:f5:2b:
ea:8b:c7:f1:68:63:ae:05:58:c9:02:f5:4e:54:fc:
e5:0f:f0:e9:99:aa:85:e2:83:93:c1:ac:96:9a:f8:
78:fe:a5:a8:e1:72:0f:e4:d8:b1:c5:72:29:0f:a7:
39:95:15:91:60:b0:d4:36:36:40:bd:5e:3d:28:26:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:51:A2:6B:B1:0D:A0:B2:D4:A5:6F:7C:47:37:DD:25:CE:7A:DA:B0
X509v3 Authority Key Identifier:
keyid:2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/mVGia7ENoLLUpW98RzfdJc562rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.194.0/23
Signature Algorithm: sha256WithRSAEncryption
65:66:91:3a:dd:4c:14:d2:0a:e7:dd:09:da:84:30:15:98:4e:
39:1a:c9:9e:c4:be:70:5d:f0:15:f6:5e:ee:24:eb:06:59:01:
20:48:95:0c:45:02:4d:6f:ed:90:3a:fb:84:22:24:bc:7e:43:
aa:e6:32:6e:c0:98:af:aa:58:bb:8d:17:cd:e8:ad:69:9e:1f:
69:bd:bb:6c:68:5e:7b:5a:b2:3c:22:26:cd:3d:fd:33:ca:a6:
6e:7d:30:67:56:24:98:c2:d1:61:29:95:e9:2b:6c:dd:8e:5e:
63:9e:87:ee:0b:b7:be:4c:0b:e6:59:a2:d1:1b:6a:67:e9:b7:
f2:f6:12:96:22:05:25:81:25:15:e2:3b:ab:83:f5:33:78:25:
f5:38:02:96:bb:31:86:9b:c6:fa:1c:8d:65:dd:c7:e9:85:6b:
4a:34:a9:15:90:85:eb:25:84:29:ec:d2:47:cc:e7:50:88:d2:
23:c3:89:0c:f6:89:28:0b:b2:88:8f:8d:47:03:d6:e3:59:a2:
6d:25:02:a1:27:cc:d2:84:0d:7d:3b:ac:d7:74:1f:3a:0d:e5:
61:7c:bb:db:d0:2b:05:fa:f9:7d:32:b8:36:82:f3:73:11:f4:
d1:d6:93:4a:f3:f2:b8:fe:96:1a:56:a4:5b:77:2d:3d:5c:3a:
ec:ac:f8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:40:47 2026 by rpki-client