Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/msgnxgZNTBjCcSqU_QPJtqUOmMU.roa
File: msgnxgZNTBjCcSqU_QPJtqUOmMU.roa (raw, json)
Hash identifier: OJgEcPABUr58K6pT9Z2gh2asglbScIg+k5q0lkWov3I=
Subject key identifier: 9A:C8:27:C6:06:4D:4C:18:C2:71:2A:94:FD:03:C9:B6:A5:0E:98:C5
Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial: 01A1535409DB7D15097A99E22612BBC16BD6
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/msgnxgZNTBjCcSqU_QPJtqUOmMU.roa
Signing time: Mon 19 Oct 2026 08:42:58 +0000
ROA not before: Mon 19 Oct 2026 08:42:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21105
IP address blocks: 176.100.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:54:09:db:7d:15:09:7a:99:e2:26:12:bb:c1:6b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Validity
Not Before: Oct 19 08:42:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ac827c6064d4c18c2712a94fd03c9b6a50e98c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:e0:71:4b:1c:68:3e:b2:d3:84:d7:e2:00:
66:61:43:22:86:46:11:9d:da:52:0c:a6:c6:a4:8b:
95:b4:82:08:0d:27:87:d5:b4:81:a1:de:21:83:17:
12:11:84:41:4f:51:64:b0:90:33:5b:26:73:ab:8c:
95:3a:ed:27:48:a2:7e:de:2c:7e:52:71:84:d5:f9:
b5:55:a3:6a:27:d8:74:f5:c1:2e:50:f5:7e:dd:9a:
c9:fd:2c:28:c4:e5:11:cf:92:07:df:0b:09:75:31:
76:85:42:52:c2:64:8f:51:16:c7:53:35:08:31:57:
44:b8:07:e1:94:04:a6:49:66:f3:7b:f0:33:a9:1d:
6b:72:f6:32:4b:0a:af:2c:ea:62:19:52:01:89:d3:
4b:ed:3a:37:ad:c1:89:57:39:bd:5f:b2:f9:ca:c6:
7d:73:b9:e5:7c:bf:a4:07:d5:de:14:8a:45:89:33:
64:e9:ba:75:9a:8d:0c:05:4c:73:6b:e4:49:b7:99:
fd:9c:29:8e:15:ee:7c:12:a8:b7:12:a5:a0:f9:6f:
a4:3d:72:73:cd:b7:4a:6a:d9:f7:c8:98:61:ca:09:
b4:6f:c7:1c:eb:d4:40:af:25:25:7c:f0:dd:c1:45:
4f:f1:22:c8:ed:fe:0a:1f:54:2a:f0:32:ef:20:db:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C8:27:C6:06:4D:4C:18:C2:71:2A:94:FD:03:C9:B6:A5:0E:98:C5
X509v3 Authority Key Identifier:
keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/msgnxgZNTBjCcSqU_QPJtqUOmMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.147.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b6:2a:dd:7e:94:d2:dc:12:1b:d5:c0:ae:72:51:40:3f:32:
99:80:3a:6e:39:42:ea:85:5a:7c:40:95:67:7f:6c:d9:01:33:
51:bc:92:1f:d6:8c:80:20:e7:8e:95:a1:93:8d:12:1a:b9:03:
8e:ab:2f:75:4a:ce:28:2e:9d:65:90:83:8c:d5:8e:8a:6d:a0:
ba:f2:d9:0b:6f:fc:96:63:a9:7d:d4:21:d7:2d:86:50:68:8b:
1b:66:e9:ed:11:d9:8c:e2:9e:88:0a:4a:3b:c2:a4:e1:b9:3d:
b3:f8:83:db:5b:1c:c7:71:28:f0:81:82:d3:f8:a2:f0:eb:9f:
4b:01:f1:42:73:c6:c8:30:85:43:03:b0:b6:5c:48:a4:d4:0b:
d8:74:e8:30:45:2d:60:b1:35:2b:c8:54:25:25:0b:3d:af:54:
d4:46:1d:b1:20:f4:a0:c1:89:48:c3:75:b3:33:31:da:90:49:
e3:1f:3e:3f:57:cf:42:22:1f:47:5d:17:c5:e7:3a:44:56:eb:
20:d5:eb:4a:33:bd:16:d7:93:66:31:1d:bc:0c:8b:45:28:25:
bf:01:ef:92:33:65:0e:e7:10:95:8c:04:59:f3:fc:58:22:96:
f2:07:21:df:7f:05:7f:07:4d:4e:c0:bc:6b:90:c1:1c:a5:a3:
a8:8e:40:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFTVAnbfRUJepniJhK7wWvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYTM3ZGE5NzBjNDY2NDU3NTgzYmJlMDJiMmEwZTcyZmJk
YzYzMjgwHhcNMjYxMDE5MDg0MjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWM4MjdjNjA2NGQ0YzE4YzI3MTJhOTRmZDAzYzliNmE1MGU5OGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujPgcUscaD6y04TX4gBmYUMihkYR
ndpSDKbGpIuVtIIIDSeH1bSBod4hgxcSEYRBT1FksJAzWyZzq4yVOu0nSKJ+3ix+
UnGE1fm1VaNqJ9h09cEuUPV+3ZrJ/SwoxOURz5IH3wsJdTF2hUJSwmSPURbHUzUI
MVdEuAfhlASmSWbze/AzqR1rcvYySwqvLOpiGVIBidNL7To3rcGJVzm9X7L5ysZ9
c7nlfL+kB9XeFIpFiTNk6bp1mo0MBUxza+RJt5n9nCmOFe58Eqi3EqWg+W+kPXJz
zbdKatn3yJhhygm0b8cc69RAryUlfPDdwUVP8SLI7f4KH1Qq8DLvINuUXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJrIJ8YGTUwYwnEqlP0DybalDpjFMB8GA1UdIwQY
MBaAFCyjfalwxGZFdYO74CsqDnL73GMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNDkyZmQtNmUzNy00NTgyLTg0ZTgt
OGNhMjVmNDg4ZWJmLzEvbXNnbnhnWk5UQmpDY1NxVV9RUEp0cVVPbU1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yNDkyZmQtNmUzNy00NTgyLTg0ZTgtOGNhMjVmNDg4ZWJm
LzEvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGSTMA0G
CSqGSIb3DQEBCwUAA4IBAQCJtirdfpTS3BIb1cCuclFAPzKZgDpuOULqhVp8QJVn
f2zZATNRvJIf1oyAIOeOlaGTjRIauQOOqy91Ss4oLp1lkIOM1Y6KbaC68tkLb/yW
Y6l91CHXLYZQaIsbZuntEdmM4p6ICko7wqThuT2z+IPbWxzHcSjwgYLT+KLw659L
AfFCc8bIMIVDA7C2XEik1AvYdOgwRS1gsTUryFQlJQs9r1TURh2xIPSgwYlIw3Wz
MzHakEnjHz4/V89CIh9HXRfF5zpEVusg1etKM70W15NmMR28DItFKCW/Ae+SM2UO
5xCVjARZ8/xYIpbyByHffwV/B01OwLxrkMEcpaOojkAG
-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:48 2026 by rpki-client