Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/MZ7S-RSHcnSELGMtrXuzvi3LI68.roa
File: MZ7S-RSHcnSELGMtrXuzvi3LI68.roa (raw, json)
Hash identifier: +fq1dXYLe8pvw7cMIz7e2FS56xrJY1Io672b/msokkQ=
Subject key identifier: 31:9E:D2:F9:14:87:72:74:84:2C:63:2D:AD:7B:B3:BE:2D:CB:23:AF
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 019FA7F7004234593FEE38F289DCA1242A0B
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/MZ7S-RSHcnSELGMtrXuzvi3LI68.roa
Signing time: Tue 28 Jul 2026 09:03:30 +0000
ROA not before: Tue 28 Jul 2026 09:03:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216024
IP address blocks: 77.221.134.0/24 maxlen: 24
77.221.145.0/24 maxlen: 24
77.221.147.0/24 maxlen: 24
176.98.183.0/24 maxlen: 24
176.98.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f7:00:42:34:59:3f:ee:38:f2:89:dc:a1:24:2a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jul 28 09:03:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=319ed2f914877274842c632dad7bb3be2dcb23af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:84:b4:5f:3a:72:a4:89:83:3b:db:1c:46:
84:a6:f5:6f:15:e8:34:32:35:1b:7a:03:9e:f2:70:
21:a2:27:3b:6f:e2:39:d3:07:7c:34:e4:88:e4:9e:
bb:1d:87:dd:0c:4e:6b:df:40:07:4a:65:1e:f8:e6:
48:e5:bd:f3:7d:25:38:39:ae:2f:90:54:12:6a:08:
cc:d5:8b:7c:9d:bb:9c:7d:ff:d5:08:31:65:f3:63:
7f:71:89:ab:ed:28:84:d8:f3:91:47:30:99:4a:3e:
ab:6c:e0:6b:3f:bf:a2:56:f9:54:51:b3:74:9c:7a:
b4:2d:0b:04:f4:74:ca:54:40:1a:dc:cc:7a:c2:c3:
ab:12:19:80:4a:c1:03:b3:f7:de:9f:28:48:70:f2:
e6:a0:a1:e3:b2:72:fb:95:ad:fe:0d:25:1f:66:8a:
f9:f3:84:64:19:fc:a8:01:0f:c5:ec:a1:3c:aa:90:
3c:79:90:a5:f3:d5:d1:66:9f:88:95:3f:e8:7a:25:
22:0c:ef:03:a0:0d:62:4f:ee:1a:42:67:e2:d3:fc:
cc:0f:46:52:44:18:a3:3a:c8:65:04:31:9f:f9:ef:
8f:9c:20:c6:fc:19:65:26:e2:9a:37:de:83:9b:08:
ce:ca:27:98:f8:65:39:b8:68:b5:0f:0c:5d:8b:18:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9E:D2:F9:14:87:72:74:84:2C:63:2D:AD:7B:B3:BE:2D:CB:23:AF
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/MZ7S-RSHcnSELGMtrXuzvi3LI68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.134.0/24
77.221.145.0/24
77.221.147.0/24
176.98.183.0/24
176.98.191.0/24
Signature Algorithm: sha256WithRSAEncryption
47:72:9f:51:40:2e:0c:05:fc:26:c5:39:92:2e:8d:14:2a:2c:
14:38:6a:fd:64:ef:0e:2f:01:84:81:cf:15:a8:5e:0c:68:8d:
2b:a9:8b:23:7c:36:82:2b:40:3d:83:ef:16:c4:f5:61:3a:e5:
5d:b9:7e:c2:bf:df:84:5b:18:5f:32:53:fc:e3:e9:bc:1d:1a:
f9:b1:42:40:39:3a:7a:38:c0:fe:35:df:1a:ab:1f:e8:eb:c1:
39:eb:99:48:28:bc:a7:f8:1a:c5:38:86:7f:f1:33:a1:f5:6d:
0a:1e:62:37:6f:6c:76:77:19:c8:a1:2c:30:d9:d3:98:85:e5:
6f:d7:35:63:86:2d:1f:03:a4:32:5c:3b:9d:c1:55:0f:92:3d:
5a:3d:11:c5:57:c7:92:db:f6:13:97:f7:09:2e:15:ae:b6:12:
1a:d9:32:d5:a6:1b:5f:bd:51:8e:52:ac:2b:78:68:51:9c:37:
fe:00:8d:d7:d0:c7:6c:6a:ee:56:f6:5e:e8:3d:36:58:10:5d:
19:00:24:e4:a6:97:ad:e3:68:45:91:b7:bb:a1:9f:8e:a3:df:
e3:9a:1e:c6:b3:00:16:64:b0:6d:6f:91:6a:fb:10:8a:90:73:
82:8a:92:74:53:0e:d1:ff:48:1b:40:0b:4c:bc:dd:7e:f8:58:
a9:49:4e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:43 2026 by rpki-client