Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/MnZPFExKPyfFTF0RLiRlD0liZPE.roa
File: MnZPFExKPyfFTF0RLiRlD0liZPE.roa (raw, json)
Hash identifier: B98JUG7YJ48MawJtAk+S043gyyf6z3+pS1W2R1HhXLU=
Subject key identifier: 32:76:4F:14:4C:4A:3F:27:C5:4C:5D:11:2E:24:65:0F:49:62:64:F1
Certificate issuer: /CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Certificate serial: 01A14B07A517061E04FA084AEF6EDF096E10
Authority key identifier: 86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/MnZPFExKPyfFTF0RLiRlD0liZPE.roa
Signing time: Sat 17 Oct 2026 18:02:34 +0000
ROA not before: Sat 17 Oct 2026 18:02:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9515
IP address blocks: 2a0b:a500:30::/44 maxlen: 44
2a0b:a500:1030::/44 maxlen: 44
2a0b:a500:1040::/44 maxlen: 44
2a0b:a500:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:07:a5:17:06:1e:04:fa:08:4a:ef:6e:df:09:6e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Validity
Not Before: Oct 17 18:02:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32764f144c4a3f27c54c5d112e24650f496264f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:7a:0c:44:10:da:2e:04:07:1a:5f:4a:71:
8a:2a:39:0a:98:77:ae:d1:f1:d3:3c:70:83:c7:5f:
11:43:c5:76:41:51:c5:32:04:4f:36:f4:dd:c9:43:
8d:9d:52:75:2e:2f:51:df:1d:bc:df:27:ac:08:63:
b5:93:fd:8f:1a:1d:bb:cc:db:44:5e:02:b8:d3:ea:
e9:1c:a4:d3:6d:01:a3:5f:7a:37:3d:77:38:8f:df:
7f:26:a8:4f:f0:ad:33:6a:cc:0e:dd:b5:31:3d:f1:
33:fe:f6:d3:ca:01:c6:1b:c9:0f:fe:65:b4:bc:a1:
e9:36:b8:67:d0:4f:3b:37:11:6d:e2:e9:d8:6a:62:
8b:d6:cc:39:1a:65:63:e4:b7:e9:34:34:51:5d:03:
d4:09:4b:e4:49:67:e8:2a:8e:22:b8:85:55:c8:04:
db:cc:51:6d:10:e4:a1:91:59:81:70:1b:ad:a2:10:
a3:9e:be:79:70:e3:09:6c:47:75:28:6c:6f:88:35:
73:d5:01:e4:e4:c6:ff:43:c1:84:78:ca:48:fc:8b:
5c:d9:95:63:3d:6e:3e:39:a5:cf:df:d3:e9:47:77:
a2:d1:99:f8:a9:a1:01:75:2c:98:e9:80:37:81:db:
55:a0:35:74:49:47:29:84:1e:df:3e:98:bb:7b:5d:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:76:4F:14:4C:4A:3F:27:C5:4C:5D:11:2E:24:65:0F:49:62:64:F1
X509v3 Authority Key Identifier:
keyid:86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/MnZPFExKPyfFTF0RLiRlD0liZPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a500:30::/44
2a0b:a500:1030::-2a0b:a500:104f:ffff:ffff:ffff:ffff:ffff
2a0b:a500:2000::/40
Signature Algorithm: sha256WithRSAEncryption
4a:b3:b2:57:4f:13:4d:fd:8e:c9:d0:d5:67:85:38:81:49:ad:
96:ba:33:30:0f:fb:bb:26:cd:63:8b:cb:c5:85:32:e7:33:42:
71:11:14:8d:da:83:ed:60:1b:e6:22:9c:63:f4:c9:6e:11:04:
1c:7b:ce:7f:d4:79:24:7c:42:06:63:25:8d:9a:fc:a2:16:00:
50:95:c6:c0:e6:34:b7:7f:41:ed:ea:27:00:25:da:a6:3e:a1:
b9:2e:39:03:d4:a3:d0:ac:91:05:21:05:36:3a:59:12:fc:ed:
d4:07:82:7d:48:44:9f:9a:b3:33:8e:f5:d8:9a:ea:53:c5:cc:
67:3a:69:6c:4f:4e:28:1d:c0:80:aa:92:68:16:fc:09:64:76:
79:c7:55:af:44:0c:46:8b:bc:ee:04:1f:c9:6f:15:74:f8:a6:
d6:50:a9:ea:80:b7:50:37:b4:29:25:1a:e0:07:72:1f:5f:b0:
9e:ef:5d:ba:e5:2f:3e:ed:6b:75:8b:cf:31:5f:16:b8:18:bf:
5d:9e:57:20:97:6f:e2:83:09:92:9e:df:77:7a:2b:80:89:4b:
08:58:1c:9e:17:9f:e7:73:88:2e:04:c2:65:5a:0f:b4:fe:41:
f7:67:18:ff:06:16:39:70:a9:c3:89:74:30:a9:eb:14:b5:86:
58:89:58:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 06:07:26 2026 by rpki-client