Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/mboKspA8G9FkmFfcx8mA67v6opo.roa
File: mboKspA8G9FkmFfcx8mA67v6opo.roa (raw, json)
Hash identifier: jBxkwjHZ4qEnzPoLX8zSdegfCvzp0ZrVo8U68KcaOoQ=
Subject key identifier: 99:BA:0A:B2:90:3C:1B:D1:64:98:57:DC:C7:C9:80:EB:BB:FA:A2:9A
Certificate issuer: /CN=2369cf693efc102c937faca7ba09cccaec574948
Certificate serial: 01A1C48B1F7E1BFA3FA47F0F3360B54D6102
Authority key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/mboKspA8G9FkmFfcx8mA67v6opo.roa
Signing time: Tue 10 Nov 2026 08:20:14 +0000
ROA not before: Tue 10 Nov 2026 08:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 146.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 08:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:8b:1f:7e:1b:fa:3f:a4:7f:0f:33:60:b5:4d:61:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2369cf693efc102c937faca7ba09cccaec574948
Validity
Not Before: Nov 10 08:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99ba0ab2903c1bd1649857dcc7c980ebbbfaa29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:b1:f2:de:8f:b9:b5:e2:aa:15:0c:4d:cc:
e7:65:29:a7:8c:da:9a:71:1b:7b:47:e0:f8:1e:29:
49:67:45:10:58:f9:55:8d:0f:3c:59:3c:3d:71:31:
f8:b1:d2:8d:41:16:dd:7c:6f:b8:5f:4e:86:58:ce:
6d:a8:8c:44:7c:2f:db:17:cb:cc:5a:ac:ea:ef:99:
12:0e:80:f8:c0:54:01:d4:e6:22:f8:be:88:9a:34:
59:a5:9b:c3:11:50:7a:0f:1a:44:d1:66:53:10:0b:
dd:b7:ed:7e:57:43:b5:8e:e6:d9:2e:ba:a8:e8:23:
1a:ee:f1:03:66:fb:0b:9a:44:16:75:f4:38:a8:cd:
49:72:03:44:74:b8:e2:3b:6f:52:b3:f0:53:cd:a4:
48:a3:3b:2f:a8:eb:68:98:d2:c2:4c:2a:0b:e8:21:
f0:c9:72:05:9e:b2:ac:d5:81:83:5a:50:51:11:e4:
cd:f9:90:7d:9a:48:68:67:e2:c3:5b:b0:8d:c0:d1:
bf:32:2e:31:61:3b:db:b8:7c:7b:b3:84:a0:13:b1:
8b:f0:56:84:57:f2:14:81:ad:aa:77:14:22:07:0a:
fb:95:31:81:3e:e0:af:86:9f:b1:27:9b:7e:64:7e:
14:fa:0d:35:7c:08:a8:5c:27:7c:3c:ac:03:18:a1:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:0A:B2:90:3C:1B:D1:64:98:57:DC:C7:C9:80:EB:BB:FA:A2:9A
X509v3 Authority Key Identifier:
keyid:23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/mboKspA8G9FkmFfcx8mA67v6opo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
08:3c:92:ec:03:b6:52:16:60:e7:73:0d:a0:de:34:17:7e:78:
5a:a6:d2:b3:ef:1a:1e:14:36:06:62:1c:73:e1:59:ee:7b:89:
69:5f:d1:1c:b9:06:1e:8c:bb:72:7f:9d:ad:61:0f:82:d2:1e:
35:63:41:8f:d0:8b:54:09:ce:7d:6e:d8:ab:19:1d:c5:41:60:
fe:f3:5e:cc:ea:c4:44:4a:74:f8:ae:7f:db:7d:28:75:b3:46:
ab:03:f8:cb:c2:d5:fb:6d:49:f6:08:00:01:8c:32:53:83:67:
f3:bd:bb:c8:ca:86:3c:cc:b1:e1:33:0a:71:ff:68:76:8f:60:
bd:83:e8:e8:e9:ce:88:03:81:01:99:30:53:2a:c2:63:37:c5:
73:35:9e:45:fb:21:1f:10:1f:d7:bc:de:54:c0:ed:8b:bf:c3:
f2:75:ac:0d:f8:7c:39:86:95:80:56:05:2e:62:e7:3a:39:05:
95:3c:01:fe:a2:4e:78:12:64:5b:34:74:54:a2:5e:95:1c:1a:
86:08:75:90:f4:44:20:22:cb:0b:4c:53:a4:1a:48:1f:2e:f9:
60:ca:64:90:0c:a2:68:75:bb:02:7b:5a:36:e2:01:dd:c5:77:
1d:bf:7a:c2:9c:c3:cc:cb:b2:38:f4:43:6e:33:4d:45:dc:99:
2c:65:97:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:36:10 2026 by rpki-client