Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/Mms177HtX3TjlN2MiOHM0BNdM-M.roa
File: Mms177HtX3TjlN2MiOHM0BNdM-M.roa (raw, json)
Hash identifier: 6tAtVpViENOZeqH3thFVa27bEoYx5sT8PZcqvhEal1M=
Subject key identifier: 32:6B:35:EF:B1:ED:5F:74:E3:94:DD:8C:88:E1:CC:D0:13:5D:33:E3
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019D29596CFCD937548734C38C363A6518EB
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/Mms177HtX3TjlN2MiOHM0BNdM-M.roa
Signing time: Thu 26 Mar 2026 08:53:39 +0000
ROA not before: Thu 26 Mar 2026 08:53:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216395
IP address blocks: 86.107.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:59:6c:fc:d9:37:54:87:34:c3:8c:36:3a:65:18:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Mar 26 08:53:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=326b35efb1ed5f74e394dd8c88e1ccd0135d33e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:37:4c:e3:c9:f3:f1:7b:22:27:79:11:1a:
ac:27:7b:2b:22:b0:bc:4a:3e:9e:9b:48:66:f2:3e:
3e:7b:c2:d5:b6:84:6e:55:3d:be:c5:94:09:f8:48:
ee:a5:ef:99:b7:41:d3:c4:79:52:ec:a8:14:47:64:
39:75:03:9a:26:64:bd:a8:56:ff:0b:c0:4a:2f:88:
75:d5:10:17:4d:84:80:00:88:59:74:24:6a:7a:3f:
13:ec:a3:f2:36:40:73:04:23:5f:96:da:92:ce:9e:
17:ee:8e:20:c1:e5:58:2a:ac:09:a8:15:46:22:04:
52:d4:eb:3e:d7:6a:95:5f:11:1c:be:95:3b:a3:33:
b1:30:c9:2e:f3:ee:b8:7a:36:46:48:a9:3b:f8:80:
cd:90:0e:c0:17:7e:4b:a8:ae:56:43:4c:0c:d5:f9:
50:96:f3:b2:ee:e1:01:c6:56:62:a4:8b:40:53:57:
62:53:32:1b:33:94:3f:dd:c4:6d:e3:d2:7f:5f:e9:
4e:e9:24:3b:c5:f2:ae:8e:18:1b:eb:1d:e9:bc:b2:
15:82:de:bc:36:df:ed:63:3d:41:c1:d5:60:7a:48:
2c:57:78:78:a5:ed:89:39:67:b4:67:4c:d1:70:cc:
9f:a6:ea:54:24:e6:eb:4d:1a:60:d2:33:36:c0:68:
7b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6B:35:EF:B1:ED:5F:74:E3:94:DD:8C:88:E1:CC:D0:13:5D:33:E3
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/Mms177HtX3TjlN2MiOHM0BNdM-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.77.0/24
Signature Algorithm: sha256WithRSAEncryption
00:dc:2c:1d:e0:6d:be:f9:34:17:c9:f3:ff:99:1d:b8:53:83:
b7:a3:42:bc:cd:57:e4:2b:2a:9d:7f:ba:d1:68:f8:fd:6d:c6:
73:30:b1:91:c6:d2:37:ad:71:1f:6b:de:37:c9:99:36:bd:5e:
27:e7:42:84:bf:17:d3:2e:73:e1:16:9d:3d:8b:35:63:7b:15:
4b:f3:3c:bd:82:76:db:83:67:e9:b9:97:fe:ed:20:f9:cd:b4:
3c:62:10:fe:06:e2:e3:89:86:fd:10:fe:34:9b:18:49:56:fd:
59:8f:dd:60:7e:e0:d6:39:4c:8b:c9:3f:4d:2c:08:5d:68:08:
d9:63:fc:c6:2b:fa:40:84:83:49:0c:5f:b3:88:39:b3:95:03:
26:20:ac:b6:a1:da:a7:b3:73:5d:10:91:5b:66:d2:d2:92:d4:
74:d4:9e:76:a8:64:7b:2b:6c:d6:90:2c:f7:a3:49:6d:c3:d3:
0c:cc:c6:b7:c0:f5:9c:92:e8:0c:97:be:af:fa:1b:c7:fd:b9:
26:6e:16:b8:f4:55:00:f3:a1:f8:c2:e3:8d:e9:58:c8:1e:fe:
61:c2:20:cf:9d:c6:9a:35:ec:f9:11:94:f6:69:d0:7e:b4:4a:
db:db:7b:17:a1:39:70:fe:42:ce:be:9a:65:a0:11:d3:be:93:
ce:d4:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:33 2026 by rpki-client