Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Mg1D6QC_g63JPX2rdrLMPwpxCSY.roa
File: Mg1D6QC_g63JPX2rdrLMPwpxCSY.roa (raw, json)
Hash identifier: Yh3tNT6+XfpBErn2NHfTJsOgi2In688uCxSwQz2Lk7o=
Subject key identifier: 32:0D:43:E9:00:BF:83:AD:C9:3D:7D:AB:76:B2:CC:3F:0A:71:09:26
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 019F95111BB2F6E4F35B147D144CB54DAD12
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Mg1D6QC_g63JPX2rdrLMPwpxCSY.roa
Signing time: Fri 24 Jul 2026 16:59:14 +0000
ROA not before: Fri 24 Jul 2026 16:59:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208229
IP address blocks: 2a05:4140:29::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:11:1b:b2:f6:e4:f3:5b:14:7d:14:4c:b5:4d:ad:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jul 24 16:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=320d43e900bf83adc93d7dab76b2cc3f0a710926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:03:8d:a8:f3:c9:70:67:8c:62:6a:2c:92:
60:4e:50:c7:d0:5f:44:d4:fd:88:71:f8:f7:c1:01:
ec:99:68:c9:44:fc:16:6d:8f:68:05:91:5f:6f:34:
d0:74:a4:75:23:e1:03:56:12:1b:a0:68:ff:c4:81:
8c:ad:fc:97:f8:92:26:5b:ef:68:cc:11:75:b1:44:
20:91:a5:a5:7c:1b:78:46:7a:7b:fc:6c:42:92:3f:
90:ec:90:4a:73:81:ef:f1:bc:3c:72:84:7a:9e:33:
4b:a8:70:6d:63:a8:9f:d6:2f:03:0b:e3:d3:44:e0:
65:b3:46:9e:1c:0c:61:eb:56:00:b2:6d:2f:e5:cc:
b9:75:fd:fb:72:9a:a2:21:eb:91:9a:94:a0:f7:9c:
ce:71:eb:2c:b1:b2:60:f6:8c:3c:a6:b2:a0:17:8e:
e5:c8:7b:a5:9a:3a:e8:79:ca:8d:fa:00:60:6c:e6:
67:9e:78:bc:c7:02:8f:4a:b7:40:8b:6d:a6:45:74:
c8:d2:5f:63:ba:51:cf:91:b7:de:36:3f:0b:26:8b:
9a:01:81:67:d6:06:c2:45:de:22:df:a4:ec:cb:43:
ab:09:c7:df:ea:c5:cd:7a:98:3d:e0:8c:63:6f:31:
08:5e:e6:35:e2:93:f7:95:7e:55:22:5f:3c:37:b8:
6d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0D:43:E9:00:BF:83:AD:C9:3D:7D:AB:76:B2:CC:3F:0A:71:09:26
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Mg1D6QC_g63JPX2rdrLMPwpxCSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:29::/48
Signature Algorithm: sha256WithRSAEncryption
3a:df:15:b2:0d:ef:ed:d6:ac:b8:a7:70:6f:59:83:3b:09:8d:
24:e0:67:93:a2:cf:f8:2a:a7:fc:7f:c3:c6:a9:6d:f3:b9:52:
ea:30:fd:40:03:74:1e:2d:32:41:47:20:24:f0:eb:8a:ca:4e:
42:0c:c3:0b:ba:ef:b9:e6:9b:ea:82:bd:e3:eb:3d:54:42:55:
a7:0c:f9:0a:d6:21:ca:2f:26:17:d0:27:23:15:ad:25:9f:14:
65:63:dd:6d:01:5f:1b:44:c3:ff:9d:18:92:9f:57:90:f5:a6:
ad:43:6a:5c:63:36:77:53:94:a3:97:60:67:37:79:eb:6c:53:
47:b9:33:34:61:d7:0c:b9:38:d7:c4:5d:41:4b:ad:7b:41:64:
2d:4f:64:ec:66:27:d4:62:c9:e9:13:05:6b:c1:3f:2f:16:bf:
b8:e8:28:eb:6a:ad:9e:49:43:5d:de:be:60:8f:25:01:4d:8b:
19:52:78:6e:42:19:75:69:da:a1:68:24:f7:ee:dd:f3:b1:e9:
39:63:7d:b4:ff:fc:a6:ff:af:d3:a9:95:a3:ec:68:87:9b:16:
bd:17:27:2b:8b:3f:7b:40:fb:c6:11:6c:dc:60:fd:02:bd:1b:
47:5b:2b:9f:06:b6:dc:28:ac:e9:d7:60:69:e3:23:c9:71:cb:
95:7c:d4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:16 2026 by rpki-client