Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/mKVqfFr1Lo3_ctHzN_5BMHfev_Y.roa
File: mKVqfFr1Lo3_ctHzN_5BMHfev_Y.roa (raw, json)
Hash identifier: obxPgdYmhX/WzBvDrBWc/Zbmuh6Mlkpm2qXHG0RhKJE=
Subject key identifier: 98:A5:6A:7C:5A:F5:2E:8D:FF:72:D1:F3:37:FE:41:30:77:DE:BF:F6
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019F9F9956B638D1436A8AB625A98EC43F1A
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/mKVqfFr1Lo3_ctHzN_5BMHfev_Y.roa
Signing time: Sun 26 Jul 2026 18:04:14 +0000
ROA not before: Sun 26 Jul 2026 18:04:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206604
IP address blocks: 2a0d:d940:5e0::/44 maxlen: 44
2a0d:d940:2005::/48 maxlen: 48
2a0d:d940:2007::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:99:56:b6:38:d1:43:6a:8a:b6:25:a9:8e:c4:3f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 26 18:04:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98a56a7c5af52e8dff72d1f337fe413077debff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:86:02:88:b0:77:61:3e:38:b8:76:95:0b:
58:af:d4:56:9d:b5:7a:b8:20:88:c6:27:2a:3f:39:
db:ff:0c:a6:11:39:ef:0f:b8:24:69:b0:ce:04:d5:
a5:ea:38:f3:aa:5f:15:b5:c2:be:e5:07:d1:1a:14:
eb:b8:95:b0:b0:1c:92:91:5e:6e:af:7a:6b:da:73:
4c:cb:ac:cf:26:91:ad:26:7d:45:8d:0d:c1:b4:cd:
a5:61:37:4a:56:79:e7:46:18:5c:c2:5c:34:d3:47:
64:bc:03:e2:c2:24:05:cd:02:13:c2:9a:67:00:f2:
3d:04:28:a8:1b:07:36:e6:55:42:4c:7c:e3:5d:2e:
db:05:14:7e:ed:04:64:08:35:96:e4:1f:74:dd:d6:
2c:69:58:ec:4f:58:5e:af:94:75:bd:5a:7c:3c:8c:
ac:b2:19:52:77:28:fb:c1:4e:47:1e:65:0c:ab:7f:
54:ce:b1:22:0f:d6:25:60:70:6d:aa:f4:a2:e7:a4:
e5:1b:70:4e:a0:32:87:e2:32:e9:52:cc:4d:cf:81:
14:5b:43:2b:cb:f4:61:fb:e8:ed:72:df:26:7c:72:
5c:67:77:87:07:c0:87:ea:5e:4c:60:6d:af:37:27:
a3:af:4f:db:dd:f8:f7:e6:44:96:c3:65:0c:72:2f:
40:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A5:6A:7C:5A:F5:2E:8D:FF:72:D1:F3:37:FE:41:30:77:DE:BF:F6
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/mKVqfFr1Lo3_ctHzN_5BMHfev_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:5e0::/44
2a0d:d940:2005::/48
2a0d:d940:2007::/48
Signature Algorithm: sha256WithRSAEncryption
82:17:af:63:8a:d4:89:9b:62:28:b5:9d:0c:23:c4:e5:0f:6b:
41:bd:b2:8c:d3:fe:d3:58:58:8a:79:79:be:b6:69:c6:16:fe:
a7:a4:27:14:cf:85:ef:2f:c5:95:b4:75:e2:54:69:1d:84:28:
87:c5:ce:e5:21:9f:95:48:cd:e0:52:8b:5b:19:b7:fe:1a:72:
67:30:33:cb:42:2f:9a:c1:a7:a5:6a:c9:ed:92:73:7a:7c:7e:
86:7a:a9:2c:9a:ea:7e:2e:5f:b6:33:80:55:7f:0a:86:23:f4:
84:5c:54:2b:ee:93:05:94:b2:51:8d:7b:46:4b:41:4c:06:b2:
eb:fe:63:ea:25:c6:17:b5:b4:8d:5f:8a:83:31:fe:6b:ae:b2:
18:07:35:b1:2d:5d:ad:ca:af:e2:7b:b3:79:f0:28:2d:82:cf:
c5:5a:c3:9b:a5:86:33:9f:7e:52:03:22:a2:34:87:38:f6:2f:
80:14:e0:a5:6d:68:c0:60:08:e1:0b:b0:11:f8:39:5a:32:a0:
f1:39:82:71:d2:ea:9a:92:36:af:b8:09:1d:a1:84:40:a9:32:
9d:10:85:92:fe:9a:63:19:7a:75:c9:20:c3:16:e3:41:d0:b6:
05:83:50:86:78:02:5a:d6:55:98:69:c8:49:3f:a8:0c:17:de:
18:dc:8e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:32:53 2026 by rpki-client