Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MlIeXeRVXTH0Bn_Rq1iG-Rx6-_s.roa
File: MlIeXeRVXTH0Bn_Rq1iG-Rx6-_s.roa (raw, json)
Hash identifier: NRgb0MGgfzBWFBof4r2izggT9Z1fC6BBQ+XR13b9aoM=
Subject key identifier: 32:52:1E:5D:E4:55:5D:31:F4:06:7F:D1:AB:58:86:F9:1C:7A:FB:FB
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 01A08A0571020F05662618F12CF18D7EF481
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MlIeXeRVXTH0Bn_Rq1iG-Rx6-_s.roa
Signing time: Thu 10 Sep 2026 06:33:27 +0000
ROA not before: Thu 10 Sep 2026 06:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39305
IP address blocks: 2a0e:7400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:05:71:02:0f:05:66:26:18:f1:2c:f1:8d:7e:f4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Sep 10 06:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32521e5de4555d31f4067fd1ab5886f91c7afbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:9a:99:df:a4:2d:ef:55:20:29:27:61:12:
be:2f:42:a7:b9:05:67:70:1c:c0:82:b7:a9:a5:c6:
44:e3:6c:fd:e0:52:69:f7:d0:81:57:46:79:2d:c7:
c7:7e:49:61:cb:b9:16:3f:11:73:ee:7c:bb:d7:75:
10:04:dc:2a:a3:c8:c7:a9:34:45:5a:c8:ee:03:6e:
59:cf:e5:93:6e:f2:2b:2b:cc:18:65:9d:24:74:6a:
bb:26:8c:ce:57:83:65:bf:4d:56:5e:6e:15:50:1d:
82:41:cf:a3:34:1b:ff:ef:18:c8:05:5c:6c:51:e4:
b7:6f:74:f0:87:5e:ec:4b:e1:ee:8e:8c:03:ca:62:
0d:cf:5b:d3:1e:17:b3:02:c4:09:13:4f:23:94:48:
d6:fd:4d:42:87:48:d3:4f:cf:60:dd:4e:a0:e7:a2:
f1:1c:40:43:1b:37:91:b5:a7:40:98:09:9d:35:00:
40:79:c6:47:a0:1a:c0:de:47:52:8a:74:4a:a4:4b:
f9:eb:2d:65:24:74:69:c9:bb:c1:43:6b:39:93:30:
c2:5b:7a:fe:15:e1:4b:5b:09:cb:1e:cb:ea:8c:00:
a0:af:a9:2c:c9:a5:a8:7a:39:90:e4:1c:cd:a3:ad:
95:de:67:02:0f:55:f7:ba:ed:fe:69:37:7d:a9:06:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:52:1E:5D:E4:55:5D:31:F4:06:7F:D1:AB:58:86:F9:1C:7A:FB:FB
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MlIeXeRVXTH0Bn_Rq1iG-Rx6-_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7400::/29
Signature Algorithm: sha256WithRSAEncryption
63:89:7c:b9:ed:e6:48:a5:07:3f:8d:28:56:9d:10:80:c0:7f:
82:09:54:fa:a9:82:f6:7e:ae:64:13:a8:78:38:14:a2:6d:04:
31:ef:dd:1f:2a:c6:14:4a:79:c4:fb:52:4e:00:0f:4d:00:5d:
9b:97:59:dc:74:32:e5:fc:a2:87:84:4c:1d:6d:14:4f:7e:e1:
c1:9e:04:9f:fa:2a:8e:6e:2c:ba:fa:61:15:42:2e:8c:b9:e7:
cc:c7:81:8d:0e:de:6f:72:87:03:cf:3b:14:62:8c:b3:f4:98:
b4:65:b0:45:d0:ac:56:43:ab:ba:ff:61:31:6c:47:61:fa:67:
b3:22:dd:91:2d:c2:e3:e8:7f:91:5e:bb:7f:81:4b:54:24:e5:
86:8c:e8:e4:77:33:9f:2a:f5:c4:7e:b1:35:ba:16:18:7a:02:
a6:80:6b:3d:6c:f8:f2:28:29:54:0e:fd:7b:cb:d3:93:ce:71:
e6:7c:f6:2f:2b:44:f9:84:15:ab:14:a6:fd:0f:6d:33:00:ec:
26:ae:e8:bf:4e:a5:44:28:8c:9a:6d:41:5c:70:43:a7:d8:ec:
c3:a1:6d:8e:0a:2e:e6:fb:f6:e1:9c:03:52:32:ca:be:15:98:
cd:2a:1e:b8:3a:2a:dc:5e:7b:f0:5f:a4:c0:28:1c:7d:27:7a:
30:33:a7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:45:54 2026 by rpki-client