Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/M0WXBw2kjysMRmmKIOEjiVhfPV8.roa
File: M0WXBw2kjysMRmmKIOEjiVhfPV8.roa (raw, json)
Hash identifier: jdl1rZOrS2klSJJLq5Ru7zw8pWhXBcK1BB0/SV+4ymg=
Subject key identifier: 33:45:97:07:0D:A4:8F:2B:0C:46:69:8A:20:E1:23:89:58:5F:3D:5F
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 019FA7D3F9A00C81C071CB5448D4E57E2C6D
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/M0WXBw2kjysMRmmKIOEjiVhfPV8.roa
Signing time: Tue 28 Jul 2026 08:25:14 +0000
ROA not before: Tue 28 Jul 2026 08:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216139
IP address blocks: 176.98.184.0/24 maxlen: 24
176.98.185.0/24 maxlen: 24
176.98.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:d3:f9:a0:0c:81:c0:71:cb:54:48:d4:e5:7e:2c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jul 28 08:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=334597070da48f2b0c46698a20e12389585f3d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:aa:2d:79:d7:29:b3:3a:b3:14:fb:e0:8c:
ce:fc:b6:42:f4:08:ae:f2:dd:59:65:13:e1:e3:0d:
e2:06:36:1b:b7:d2:50:fa:63:9c:e6:bc:d7:28:00:
50:a6:85:1d:94:d2:2d:6d:ce:19:5b:82:05:45:0b:
db:c4:88:dc:9d:15:50:58:ba:5f:3a:ea:82:3d:87:
b2:c5:9f:55:4b:27:0e:34:44:09:cf:9a:9f:4c:ca:
f3:40:e3:eb:36:07:4a:ce:8e:20:11:4e:76:db:c0:
92:0f:60:c9:53:e4:77:58:b7:f7:a4:56:58:f4:f4:
ba:f0:c7:28:93:49:4a:ab:b5:0e:08:04:3c:94:2f:
17:20:11:29:15:74:83:a5:21:d1:da:26:91:7d:55:
71:2e:d8:25:77:db:dc:cd:8b:30:ed:e1:31:7c:31:
05:06:bc:d0:a0:c9:85:d0:ce:77:52:97:f7:6b:ea:
18:00:50:e3:5f:1b:d3:af:c3:37:b5:86:fb:4c:5c:
da:15:0b:3f:f8:6d:37:31:b3:8b:dc:77:ab:a8:ab:
81:ef:c6:ba:0d:39:59:34:3d:71:72:81:ba:fa:ac:
2b:a7:5a:4e:a3:df:92:e4:e2:ec:e0:b2:65:ad:4f:
5a:ae:fe:e7:1b:08:7d:08:9e:f8:18:60:9e:9d:08:
52:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:45:97:07:0D:A4:8F:2B:0C:46:69:8A:20:E1:23:89:58:5F:3D:5F
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/M0WXBw2kjysMRmmKIOEjiVhfPV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.184.0-176.98.186.255
Signature Algorithm: sha256WithRSAEncryption
b0:ea:29:3f:75:00:57:cc:85:69:71:28:78:fc:54:16:32:f5:
36:8f:da:b1:c4:9e:22:3c:24:fb:c2:2d:a1:9f:05:85:58:aa:
b3:eb:e0:6e:6c:18:e1:7d:2f:bc:bc:30:7c:94:0f:c5:e5:9f:
d4:02:2b:92:91:7f:d0:b3:46:ef:02:42:85:7b:bd:fc:e4:13:
26:2e:f6:dc:83:a3:b4:01:22:b8:33:4b:45:33:c2:eb:bd:c5:
a8:96:80:44:ed:35:d3:cc:ab:04:77:aa:bd:7e:e6:6a:e1:9f:
0d:95:d6:3e:73:f5:a9:ce:a8:92:c4:02:e4:22:32:aa:c5:69:
9a:6f:2a:84:ef:24:1d:d8:5a:39:b4:f1:a3:6f:00:c3:00:a0:
f4:48:5c:7c:04:32:4b:f3:fd:6e:88:a4:aa:a1:4d:40:a1:63:
bc:0b:f7:fd:f5:de:56:17:49:6f:2c:19:37:dd:81:5f:f7:6f:
81:7c:d9:be:98:a0:6b:32:c3:6c:5e:b2:94:e9:7a:c4:f3:fe:
dc:4b:9c:a5:f3:2f:9a:03:56:03:c9:e0:10:60:2c:1c:6b:29:
63:30:16:f1:61:5c:a7:cb:ed:47:4b:82:22:52:06:bd:21:0b:
c6:18:19:ad:a1:43:31:55:8d:c2:ee:da:bb:d0:f9:b6:93:50:
ca:df:8f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:08 2026 by rpki-client