Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/Muj2FNE8Gldd8yzrKLebS3hsgG8.roa
File: Muj2FNE8Gldd8yzrKLebS3hsgG8.roa (raw, json)
Hash identifier: Rd6lCWkMq66do726k8up+6ZsrZZs2AV3lPweaatdunQ=
Subject key identifier: 32:E8:F6:14:D1:3C:1A:57:5D:F3:2C:EB:28:B7:9B:4B:78:6C:80:6F
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 019F26A12917D62243BB9E80FAA10D56B634
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/Muj2FNE8Gldd8yzrKLebS3hsgG8.roa
Signing time: Fri 03 Jul 2026 06:18:43 +0000
ROA not before: Fri 03 Jul 2026 06:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.217.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:a1:29:17:d6:22:43:bb:9e:80:fa:a1:0d:56:b6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jul 3 06:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32e8f614d13c1a575df32ceb28b79b4b786c806f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:02:0a:82:57:80:3f:e9:1a:da:1a:26:3a:
7b:8d:c7:36:b3:4e:a2:fd:7f:4e:bf:c3:5a:bf:85:
17:b9:9f:37:70:a1:c9:14:12:fd:99:c8:c4:89:d6:
d0:3c:b8:93:ec:83:22:17:af:36:08:bd:1c:42:b2:
aa:b8:05:bd:cc:88:14:b1:8d:d8:13:60:df:19:b0:
f0:ef:9d:f4:93:ed:08:3f:3c:c4:86:fc:bb:66:72:
98:8d:74:6c:a7:4b:b0:51:2d:6b:45:cc:4e:ed:4a:
37:d1:f1:71:f0:fe:eb:07:f8:5d:39:91:3b:35:c7:
ac:ff:86:b4:31:4b:98:82:db:3b:3d:eb:8d:1f:06:
01:b3:d0:61:98:32:cc:24:ae:cd:fc:a3:85:00:ef:
04:7b:8f:2b:e7:eb:3c:e3:8b:88:fa:1a:b1:8e:0c:
ec:b4:79:3a:37:52:ec:c0:56:f3:1a:14:01:34:ce:
58:3e:ee:98:46:5e:d3:56:24:59:f9:27:c9:47:6c:
79:f7:bd:ec:4a:3c:d4:95:33:3e:12:df:72:d8:21:
58:c0:97:a1:69:2a:6d:12:a5:7f:52:ba:55:7b:e7:
a7:de:fc:f7:50:41:8d:cb:ab:3b:f5:da:0d:15:9a:
b1:b5:ff:80:a5:e4:ba:76:1d:b7:38:ae:06:4a:46:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E8:F6:14:D1:3C:1A:57:5D:F3:2C:EB:28:B7:9B:4B:78:6C:80:6F
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/Muj2FNE8Gldd8yzrKLebS3hsgG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.192.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:f2:5f:e9:29:81:84:3c:bf:01:f2:d7:38:3a:90:83:30:58:
27:7f:4e:fc:40:fa:56:64:b6:7a:db:9d:e8:ca:78:5e:7c:c4:
86:89:fd:9a:37:97:26:97:45:7f:c8:19:02:28:0e:87:e7:26:
45:a1:5a:4b:84:2e:b0:3a:9c:39:84:a8:a6:d9:1d:82:95:e7:
ec:10:6e:c3:43:4b:fd:f1:68:c2:58:09:fc:06:fd:db:2f:4b:
bc:da:45:cb:be:cd:6a:d6:9e:85:32:26:18:53:40:f2:bc:d7:
b9:a9:e5:16:69:56:26:e8:1a:56:5a:11:0a:b5:59:af:b4:01:
8d:15:6e:86:86:4e:c5:34:bc:dc:0e:14:6d:61:35:3d:08:70:
79:fc:41:62:ef:98:1b:90:0b:c7:45:84:7d:7c:51:b4:d2:72:
e2:4f:db:39:ac:62:5f:6a:d6:61:54:a0:47:7e:dc:dc:c6:02:
c9:65:c3:95:48:1e:ef:34:75:9c:f8:c5:40:ec:a3:2f:85:80:
3c:e6:91:e8:30:e9:85:81:9b:95:bb:33:b6:e9:31:b7:0f:bb:
d9:2c:de:a5:2e:4a:83:55:8c:6c:28:47:2e:b2:4c:80:1e:72:
39:85:a4:44:06:27:20:68:e2:81:12:1c:94:62:89:2c:2b:ea:
86:f1:6d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:51 2026 by rpki-client