Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/moww7p-LOqTrUFdCMgiOcUbWkq8.roa
File: moww7p-LOqTrUFdCMgiOcUbWkq8.roa (raw, json)
Hash identifier: 0LuJenOzhHfNNzAchlSo36Em1kGuq8Y2UA268LygX3g=
Subject key identifier: 9A:8C:30:EE:9F:8B:3A:A4:EB:50:57:42:32:08:8E:71:46:D6:92:AF
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019D4CEB0C705697238FAE11319C320E515B
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/moww7p-LOqTrUFdCMgiOcUbWkq8.roa
Signing time: Thu 02 Apr 2026 06:39:25 +0000
ROA not before: Thu 02 Apr 2026 06:39:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209805
IP address blocks: 171.22.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4c:eb:0c:70:56:97:23:8f:ae:11:31:9c:32:0e:51:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Apr 2 06:39:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a8c30ee9f8b3aa4eb50574232088e7146d692af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:60:b7:5c:ca:72:2f:4b:a6:aa:4e:de:f0:2b:
8b:4f:3e:9b:87:da:85:4c:14:31:a5:5d:69:01:fb:
ee:23:b8:c0:04:17:6b:c5:07:74:30:1f:23:21:4d:
91:c7:d7:d8:44:89:93:43:da:df:49:7b:02:a7:fa:
3e:fe:8c:60:0f:17:04:b4:b1:dc:fd:87:d6:01:78:
3f:18:f0:0f:da:8c:23:a9:4d:df:f1:06:4d:df:85:
55:bc:0b:c0:b4:67:cd:2f:cc:df:a3:28:1c:2a:c7:
21:d8:8d:d9:6f:c3:c6:09:d6:ae:a4:ae:57:7e:0c:
2d:36:de:09:cf:98:0b:5c:c1:bb:f5:f9:f6:ad:dc:
ca:ef:06:62:45:03:49:13:82:f1:78:a5:e9:c6:d7:
e5:56:5f:d1:62:2c:b4:16:a7:cc:c8:83:2c:62:19:
80:fc:e9:84:65:17:15:f5:72:ab:47:fa:28:e6:9c:
ad:0a:a2:72:0f:35:fa:aa:d4:5c:48:ca:7c:9c:15:
3d:fa:28:e7:cb:e2:c3:8e:d5:0c:9e:f9:f7:28:04:
df:e9:37:92:04:e5:55:ff:e4:c0:4c:2a:e2:24:c2:
bf:0b:c7:5b:0f:b8:2c:ba:d4:f3:41:eb:10:e9:3d:
4b:d2:6a:eb:63:5c:8e:96:62:27:73:49:63:7f:5b:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8C:30:EE:9F:8B:3A:A4:EB:50:57:42:32:08:8E:71:46:D6:92:AF
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/moww7p-LOqTrUFdCMgiOcUbWkq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:85:2c:08:71:e0:b2:c6:1d:8a:6e:0e:70:81:bc:c5:0d:76:
09:76:26:7e:e5:ef:ec:77:fb:e6:e2:08:8a:6c:bf:08:f3:7e:
b3:31:71:3b:4f:d5:9f:66:db:44:65:fe:a6:ca:8a:bb:9c:16:
10:98:7f:c2:fa:8d:7b:d5:cd:63:12:a6:27:a7:81:60:23:e4:
31:3a:9b:ff:3e:91:77:eb:1a:ed:f3:fe:4d:48:75:b6:af:c5:
b8:4c:94:e8:6d:36:bf:cb:16:83:65:57:2b:3e:28:86:e0:50:
98:75:76:d3:2f:46:67:fb:7a:35:ea:75:80:29:73:e0:61:66:
d7:4e:62:d8:41:e6:95:c4:56:d3:a1:73:9c:c7:fe:fc:af:59:
69:6a:14:43:83:a4:77:f8:28:fb:74:2b:22:ba:f9:d7:74:48:
a5:48:02:09:5f:ab:08:79:49:02:e9:20:b6:61:70:f4:04:b4:
88:ca:80:2e:2e:16:08:2e:88:cb:6c:44:90:fe:fd:64:d5:b6:
9a:28:d1:5c:b7:aa:ec:4b:ba:89:5e:58:8f:77:cd:c8:35:5d:
9b:1e:83:b7:02:13:52:e5:a0:f4:11:12:2d:8d:73:62:fc:cc:
9c:de:c7:a7:48:77:14:ef:df:e3:89:c2:fe:3f:0e:ce:b1:6e:
5d:11:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:24 2026 by rpki-client