Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/MsSKYSaiVUmdk4uw5DxmwFovsBo.roa
File: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (raw, json)
Hash identifier: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=
Subject key identifier: 32:C4:8A:61:26:A2:55:49:9D:93:8B:B0:E4:3C:66:C0:5A:2F:B0:1A
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 019C95D763C9A2A9A619C85B7E455D32EA3E
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/MsSKYSaiVUmdk4uw5DxmwFovsBo.roa
Signing time: Wed 25 Feb 2026 17:27:26 +0000
ROA not before: Wed 25 Feb 2026 17:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215710
IP address blocks: 2a05:1e40::/29 maxlen: 29
2a06:4380::/29 maxlen: 29
2a09:a800::/29 maxlen: 29
2a09:bc00::/29 maxlen: 29
2a09:c700::/29 maxlen: 29
2a09:cf00::/29 maxlen: 29
2a09:e700::/29 maxlen: 29
2a0a:c0c0::/29 maxlen: 29
2a0c:72c0::/29 maxlen: 29
2a0c:9480::/29 maxlen: 29
2a0d:f840::/29 maxlen: 29
2a0e:5880::/29 maxlen: 29
2a0e:b200::/29 maxlen: 29
2a0e:c4c0::/29 maxlen: 29
2a11:6d00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:d7:63:c9:a2:a9:a6:19:c8:5b:7e:45:5d:32:ea:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Feb 25 17:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32c48a6126a255499d938bb0e43c66c05a2fb01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:33:8a:1a:6c:92:63:34:a2:5f:01:bf:72:
7a:7b:2d:0b:4c:43:b2:53:35:3f:17:f5:8e:48:75:
b3:bb:88:b8:b1:b2:b4:04:aa:9f:0f:c0:d0:d9:0a:
ae:48:b0:6d:68:bb:e9:de:79:8c:62:da:33:f6:6a:
86:68:b2:04:3e:1f:f6:46:ef:ba:de:f6:36:f1:1f:
2d:04:bf:45:0c:00:f4:56:b2:33:f5:fd:44:cb:ab:
39:eb:69:0b:4c:fb:36:9f:75:48:69:a9:a2:61:c7:
33:4e:69:02:96:78:bd:88:14:bc:c7:4e:92:f7:1c:
3a:43:1b:18:8a:b8:4b:ce:a5:dc:8d:93:9e:9b:54:
1e:19:2e:35:c6:0a:38:1f:f2:a6:ba:7f:35:da:b6:
c0:a4:5c:3e:e9:3b:8d:d7:f9:0f:45:59:28:84:ca:
a6:75:7f:89:99:43:94:ee:97:07:95:72:74:03:2e:
4c:90:c9:1c:ba:4e:97:cc:8f:58:dc:25:2b:e6:39:
9d:81:3d:7d:b7:80:6a:d4:1c:22:6e:77:eb:d3:31:
41:21:73:4f:1e:8d:7e:0d:f8:35:61:04:a6:33:31:
2b:ce:66:78:bf:2c:ba:d6:d0:f7:04:65:6f:4e:75:
63:b5:75:69:aa:5f:45:c0:16:99:f0:36:29:2e:8a:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C4:8A:61:26:A2:55:49:9D:93:8B:B0:E4:3C:66:C0:5A:2F:B0:1A
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/MsSKYSaiVUmdk4uw5DxmwFovsBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1e40::/29
2a06:4380::/29
2a09:a800::/29
2a09:bc00::/29
2a09:c700::/29
2a09:cf00::/29
2a09:e700::/29
2a0a:c0c0::/29
2a0c:72c0::/29
2a0c:9480::/29
2a0d:f840::/29
2a0e:5880::/29
2a0e:b200::/29
2a0e:c4c0::/29
2a11:6d00::/29
Signature Algorithm: sha256WithRSAEncryption
01:61:69:ec:26:84:3d:43:ec:0c:7a:ec:19:16:ae:14:3e:3e:
f8:05:80:6f:54:03:c4:4d:eb:a2:08:4e:7d:63:77:f5:b5:d9:
24:10:8c:49:a0:a7:40:e1:ef:90:99:98:16:08:0a:1d:15:5e:
42:be:28:53:8f:2c:48:f5:01:f3:84:4f:99:7c:44:9b:da:ea:
cd:52:81:9a:67:10:c4:c2:2d:95:23:8c:8a:02:a7:20:e0:fa:
a5:c5:51:f9:17:24:bd:eb:f7:4c:52:e5:68:cb:2a:f1:4f:52:
a4:74:0a:f5:4e:1f:70:d0:07:ad:9d:da:c5:22:ca:5f:b8:22:
9e:2d:20:de:1c:09:40:90:2e:e0:a3:45:79:03:99:f7:f5:33:
40:e9:13:d3:2e:c0:50:7d:2f:ba:b5:47:1a:98:9b:1b:96:b0:
88:aa:b7:cb:a7:ca:9b:71:55:cb:59:78:15:f9:dd:c3:51:e4:
f3:76:19:c6:52:b0:f8:3a:62:12:a5:ff:e6:5f:25:bf:c3:96:
0f:02:6b:10:26:57:58:a7:65:81:61:38:1c:ae:38:6c:8f:79:
28:13:bf:62:81:51:63:3d:1c:fa:d1:45:17:ba:a7:df:81:3c:
4a:5e:60:28:dc:4d:31:e1:4e:9a:5c:a9:a2:86:9d:13:0f:ee:
a0:12:66:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:37:43 2026 by rpki-client