Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/9cd2c8-34c3-4752-b629-94205f670c95/1/MuytAvGWNi9csM1_efeOZzWcb7Q.roa
File: MuytAvGWNi9csM1_efeOZzWcb7Q.roa (raw, json)
Hash identifier: h9qgjUGSCiHfaRG++Cer2xZE/EflnDPwe5zeLdCtZBY=
Subject key identifier: 32:EC:AD:02:F1:96:36:2F:5C:B0:CD:7F:79:F7:8E:67:35:9C:6F:B4
Certificate issuer: /CN=bc289d94859849dce420b1d83b2938ae1a8eaf0c
Certificate serial: 01A12EDCF646D9BF3A00B597B4D6D477235D
Authority key identifier: BC:28:9D:94:85:98:49:DC:E4:20:B1:D8:3B:29:38:AE:1A:8E:AF:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCidlIWYSdzkILHYOyk4rhqOrww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/9cd2c8-34c3-4752-b629-94205f670c95/1/MuytAvGWNi9csM1_efeOZzWcb7Q.roa
Signing time: Mon 12 Oct 2026 06:46:35 +0000
ROA not before: Mon 12 Oct 2026 06:46:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1942
IP address blocks: 147.173.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/9cd2c8-34c3-4752-b629-94205f670c95/1/vCidlIWYSdzkILHYOyk4rhqOrww.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/9cd2c8-34c3-4752-b629-94205f670c95/1/vCidlIWYSdzkILHYOyk4rhqOrww.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCidlIWYSdzkILHYOyk4rhqOrww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:dc:f6:46:d9:bf:3a:00:b5:97:b4:d6:d4:77:23:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc289d94859849dce420b1d83b2938ae1a8eaf0c
Validity
Not Before: Oct 12 06:46:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32ecad02f196362f5cb0cd7f79f78e67359c6fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:c1:50:f6:0c:7c:88:56:b3:d3:0c:4b:88:
11:b7:47:c2:7f:8e:d1:54:bd:b7:19:81:a4:e7:a2:
61:68:b3:96:18:4f:fc:b4:b9:02:b1:08:01:93:e9:
ec:48:6a:3e:77:8a:c4:ec:b4:23:0f:92:df:13:0a:
1d:5a:d7:fc:d2:db:19:86:76:27:98:d8:de:27:b2:
55:0f:5b:1b:af:f2:e6:e6:61:c5:6c:82:3b:1f:5d:
60:2b:85:ca:b3:70:38:cf:55:f5:be:02:3c:81:fb:
4f:db:50:5a:ce:e9:e4:c8:2f:b9:32:da:0b:8d:08:
a5:d5:f0:3b:e3:95:e1:3b:ef:c7:96:36:a0:b6:3b:
3a:58:7c:33:6f:e0:1b:ce:b1:35:f3:0f:0f:d1:80:
66:1b:d9:5a:3c:84:db:7d:de:e0:df:4a:f6:77:c0:
08:f4:50:8a:a8:ef:f4:23:c5:85:4d:2d:8e:d0:f1:
d0:5c:76:c0:b1:da:5b:a6:70:1f:35:ea:18:36:07:
d2:c8:1b:b8:d8:c5:e4:85:b9:5f:34:92:d7:62:8d:
71:15:2d:08:a1:64:55:10:7c:43:90:84:8d:55:2d:
d1:f8:38:3a:22:29:51:6a:e3:03:4d:bc:d7:41:08:
b2:0d:28:fb:19:eb:cf:4f:b1:ce:f7:5f:a0:6b:de:
94:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EC:AD:02:F1:96:36:2F:5C:B0:CD:7F:79:F7:8E:67:35:9C:6F:B4
X509v3 Authority Key Identifier:
keyid:BC:28:9D:94:85:98:49:DC:E4:20:B1:D8:3B:29:38:AE:1A:8E:AF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCidlIWYSdzkILHYOyk4rhqOrww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9cd2c8-34c3-4752-b629-94205f670c95/1/MuytAvGWNi9csM1_efeOZzWcb7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9cd2c8-34c3-4752-b629-94205f670c95/1/vCidlIWYSdzkILHYOyk4rhqOrww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.173.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:85:94:76:3e:e2:8c:8c:97:75:d1:0c:86:cb:db:6d:66:e7:
fb:62:00:4e:7c:4f:0e:1d:46:bd:46:2b:0f:08:a3:73:02:b7:
09:f9:4a:f1:1c:a8:24:2e:82:bd:5e:dd:92:c0:6c:b9:71:24:
3b:aa:02:c1:62:2e:8a:cb:49:df:8c:d8:c3:69:94:2e:d3:cd:
82:e8:fc:8b:2a:58:ab:57:2e:88:82:a5:a7:1d:9c:e2:7d:9e:
fc:03:d1:9f:43:2c:25:90:22:6b:2c:a7:ab:a3:5f:2d:2f:c2:
84:75:4a:f1:fc:58:03:d3:04:ce:fe:2b:ec:79:40:ec:f7:24:
c7:7a:f8:33:f6:7c:6c:20:d7:9e:7f:9b:c0:5b:65:e5:dd:fc:
49:70:69:ea:20:e7:44:6b:02:88:61:95:ba:24:cf:3c:b7:b1:
d5:59:25:15:a7:10:a2:97:d7:be:05:8f:f1:4a:28:54:3b:36:
a5:e3:36:6d:46:47:2f:34:6a:de:31:b0:04:c1:9a:b0:47:62:
aa:52:e6:ac:d1:93:eb:8f:bd:a9:47:f8:21:c4:e7:f5:a2:12:
1e:78:24:87:1f:95:fa:24:6e:c4:2c:c8:1c:ed:a6:10:b6:ec:
f4:cc:e9:30:95:35:52:5d:31:11:4d:b3:7e:ad:9d:e9:2c:cb:
68:17:0c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:48:20 2026 by rpki-client