Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/mnODa5wDvkGX4Jfpz4BI1Vtzz80.roa
File: mnODa5wDvkGX4Jfpz4BI1Vtzz80.roa (raw, json)
Hash identifier: jyMMr46dns8Qs3JvGsMvWCbFmVoKBoUCnfmLlBoBHdM=
Subject key identifier: 9A:73:83:6B:9C:03:BE:41:97:E0:97:E9:CF:80:48:D5:5B:73:CF:CD
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 019C74FB5094143CA8C211AA0734B8AE6232
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/mnODa5wDvkGX4Jfpz4BI1Vtzz80.roa
Signing time: Thu 19 Feb 2026 08:19:13 +0000
ROA not before: Thu 19 Feb 2026 08:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25238
IP address blocks: 195.234.204.0/23 maxlen: 23
195.234.204.0/24 maxlen: 24
195.234.205.0/24 maxlen: 24
195.234.206.0/23 maxlen: 23
195.234.206.0/24 maxlen: 24
195.234.207.0/24 maxlen: 24
2001:67c:2620::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:74:fb:50:94:14:3c:a8:c2:11:aa:07:34:b8:ae:62:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Feb 19 08:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a73836b9c03be4197e097e9cf8048d55b73cfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:85:f2:29:05:2e:ba:ac:f2:f9:93:96:95:
85:d1:44:76:a8:4d:76:20:0a:0c:c4:1c:f8:fb:34:
93:bd:17:34:17:1a:93:35:47:cf:e9:89:1a:3b:1e:
38:b9:41:4b:ac:6e:dd:24:93:cc:e1:58:94:9b:8a:
37:f3:4a:2e:c1:bf:58:72:7d:7f:bc:2b:b0:d5:7e:
87:99:76:e4:60:32:ac:fd:90:d1:b6:29:19:81:bf:
8b:d6:73:b6:aa:5e:5a:c3:ec:22:81:5e:c0:19:0f:
a4:8f:4b:d9:2b:d2:2f:6d:c8:78:41:2e:e3:ec:80:
7d:09:78:ac:02:95:24:02:e0:6c:5c:ce:0d:f2:49:
00:f3:3d:9c:26:23:77:c4:7d:1e:a8:4d:f0:d2:a6:
19:1b:49:85:1f:17:47:0a:5c:38:04:d9:25:6d:8b:
2d:c1:39:fb:83:71:f8:8a:16:62:bd:0c:ce:ea:7e:
56:eb:52:fe:ee:10:a7:66:e6:48:f0:42:f7:f7:78:
37:25:0b:98:cd:67:9b:4f:a9:59:55:dc:fc:66:4a:
cd:d4:25:bf:f0:8c:72:b9:1a:10:33:dc:26:e9:9c:
54:b5:48:44:ca:7a:0a:e0:f7:91:00:6b:b1:dc:52:
48:98:1e:f9:df:8e:d9:a7:6e:bd:68:6d:69:76:4a:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:73:83:6B:9C:03:BE:41:97:E0:97:E9:CF:80:48:D5:5B:73:CF:CD
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/mnODa5wDvkGX4Jfpz4BI1Vtzz80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.204.0/22
IPv6:
2001:67c:2620::/48
Signature Algorithm: sha256WithRSAEncryption
6e:8f:9c:a1:5d:03:34:43:fe:30:ec:11:38:e0:75:7c:19:70:
02:92:29:91:ac:9a:6b:ce:39:e3:3e:50:fc:ba:71:9e:37:ea:
7e:69:80:7d:f1:02:95:39:f3:01:59:ba:5f:32:bc:36:c0:a2:
89:78:bd:84:48:af:10:21:19:2b:28:46:21:a3:24:c0:2d:a3:
71:35:68:97:b9:d5:12:f7:b9:28:ac:a3:ec:f6:47:81:21:35:
7f:00:0f:5c:a7:44:de:54:2a:cc:a1:2a:66:6b:8e:6d:76:22:
49:dd:ba:53:9b:14:f2:24:a8:bf:4f:0d:67:f0:79:d9:83:f6:
37:01:85:7e:50:dd:66:4a:b0:1e:04:eb:5e:57:d7:84:f1:7e:
10:0b:cd:f3:e3:1c:a8:3c:7c:85:04:cf:84:ca:3e:cb:55:92:
7e:29:94:6e:97:4a:9a:aa:03:c9:07:64:2a:8c:a4:81:a7:21:
b1:d2:76:d3:1d:6a:cb:55:83:be:af:98:20:1d:e1:f9:22:fb:
fb:57:bf:5a:6b:48:9a:2e:14:f5:a3:35:50:d6:f5:12:c9:cd:
bc:b2:7c:8f:77:3e:ba:98:5e:b5:0b:98:5a:b5:6a:35:09:32:
f2:98:17:a5:57:6d:82:ae:7f:92:b7:04:45:09:ab:81:83:e7:
e7:2d:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:52:22 2026 by rpki-client