Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/msFoJS2lgnt0k3mYiMMf7W7m4XI.roa
File: msFoJS2lgnt0k3mYiMMf7W7m4XI.roa (raw, json)
Hash identifier: dakN/AD/BmQJDFFo8rBDUJU0AXGNYQnGLQfcB5HJcJc=
Subject key identifier: 9A:C1:68:25:2D:A5:82:7B:74:93:79:98:88:C3:1F:ED:6E:E6:E1:72
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A0203D101079B5D924C5598F5229A05635
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/msFoJS2lgnt0k3mYiMMf7W7m4XI.roa
Signing time: Thu 20 Aug 2026 17:34:27 +0000
ROA not before: Thu 20 Aug 2026 17:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395793
IP address blocks: 195.216.162.0/24 maxlen: 24
195.216.163.0/24 maxlen: 24
195.216.173.0/24 maxlen: 24
195.216.174.0/24 maxlen: 24
195.216.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:3d:10:10:79:b5:d9:24:c5:59:8f:52:29:a0:56:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 20 17:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ac168252da5827b7493799888c31fed6ee6e172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:3d:d4:64:95:f6:4f:5e:9a:ac:a8:08:0b:
39:69:af:71:13:ed:3f:4f:5a:96:6c:f7:28:14:23:
f6:a1:90:74:e3:d5:0d:6b:c5:a9:92:4c:a4:1e:18:
85:44:90:8e:08:72:19:6c:fc:59:b4:62:fe:83:c1:
eb:0b:c0:66:96:42:46:d0:3f:fe:a3:26:73:c8:35:
95:d8:47:90:33:99:95:09:63:27:75:e2:e6:94:cf:
28:e0:6c:96:21:1c:97:87:67:c1:83:8e:25:45:cc:
64:e4:1c:ed:4a:1c:bd:35:06:c0:b1:2f:69:5a:37:
10:1e:93:d1:5c:a4:f4:5e:28:83:e6:8d:ed:79:1c:
0f:2c:a2:b9:f5:c4:e9:c0:ae:3d:9f:ec:3b:6b:5c:
e6:3d:90:97:7b:ce:a6:ce:10:2d:75:66:5f:d2:92:
de:70:61:e2:76:a0:b7:7a:b7:a7:bd:2d:86:86:ad:
55:e0:c4:01:40:ed:6e:c7:9d:63:65:09:59:53:e6:
97:4e:5c:89:60:76:81:35:39:d9:31:69:93:57:5a:
f8:5b:49:a6:79:41:b5:1d:55:c8:75:3b:8c:d1:94:
3c:28:b3:75:f6:ad:12:f5:36:42:96:69:3d:65:16:
ab:fd:6e:7e:cb:02:ea:a0:d0:49:7e:a9:42:39:1a:
4d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C1:68:25:2D:A5:82:7B:74:93:79:98:88:C3:1F:ED:6E:E6:E1:72
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/msFoJS2lgnt0k3mYiMMf7W7m4XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.162.0/23
195.216.173.0-195.216.174.255
195.216.191.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c1:ba:b4:8b:e1:81:0a:ee:72:61:66:84:f8:c4:53:f1:ce:
38:d4:64:ae:4d:71:07:49:33:62:a3:65:b6:b4:e6:fc:43:28:
35:e0:ea:8d:05:ae:ca:c7:f9:a1:b7:91:ff:c5:8b:74:b9:ec:
87:34:d4:14:b1:84:3a:3a:7d:3c:63:cf:ac:27:39:f1:20:8c:
c4:7f:d0:80:1b:c6:e2:5b:47:d8:5a:83:e0:01:e3:92:4c:d0:
36:dc:8b:ed:a9:66:31:42:2c:eb:b8:18:88:6e:35:c6:00:42:
db:a8:03:2b:b8:2d:af:68:13:ff:8b:62:65:0e:0d:7f:04:cc:
42:88:0c:35:73:98:b3:f1:bb:05:3b:86:59:aa:52:94:2e:11:
e8:4d:30:90:ca:08:dd:0e:06:43:9d:2c:f4:2e:8f:2a:ed:44:
c0:46:0d:87:b1:c2:27:ba:14:87:a9:83:4c:18:e9:a8:56:69:
ab:e4:57:8a:df:54:c7:36:dd:ef:b9:65:84:bb:c2:26:cb:0a:
4e:40:ac:bc:91:9a:ae:52:43:f8:4a:d2:d1:90:b5:4f:81:51:
16:e0:f7:f4:11:47:89:cb:ed:0c:e8:8f:af:8e:10:26:d1:21:
49:fc:d5:fa:de:5b:75:b9:12:97:55:5b:4e:48:d9:ee:e3:15:
79:8d:15:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:36 2026 by rpki-client