Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/MCMxhDwLzTpTMjkcAZVMsVRmEJs.roa
File: MCMxhDwLzTpTMjkcAZVMsVRmEJs.roa (raw, json)
Hash identifier: xAdbRpmTpbyr/7nlxDtc2AHqV6jsUKMRjVvOVidxlcc=
Subject key identifier: 30:23:31:84:3C:0B:CD:3A:53:32:39:1C:01:95:4C:B1:54:66:10:9B
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A1223EFB36B9C7B6E8B305339953B5645C
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/MCMxhDwLzTpTMjkcAZVMsVRmEJs.roa
Signing time: Fri 09 Oct 2026 19:58:35 +0000
ROA not before: Fri 09 Oct 2026 19:58:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 201.4.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:3e:fb:36:b9:c7:b6:e8:b3:05:33:99:53:b5:64:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 9 19:58:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=302331843c0bcd3a5332391c01954cb15466109b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:c0:50:91:54:3d:cc:22:ca:95:0a:b1:92:
93:42:20:ad:58:0f:60:e2:b9:6e:8d:2b:f8:61:19:
3b:b5:f3:02:92:5c:45:42:e2:f2:f1:53:a9:4a:14:
67:5b:96:56:04:c5:e4:52:cf:45:92:d3:dd:b0:1a:
f9:de:42:68:ed:e1:4e:4a:4a:06:88:26:43:ca:1d:
5c:77:1c:0d:0f:0a:e6:42:c4:c0:6f:95:a8:e2:ec:
b4:8d:36:a2:f9:d4:b3:40:2d:de:20:80:6e:82:d1:
1c:b3:71:a2:1c:15:48:96:17:67:db:50:ca:c5:7f:
56:51:82:a6:81:df:1f:4f:f5:b2:c2:54:3a:7a:37:
dd:bf:3d:d4:57:bc:63:04:b1:8a:05:fc:44:bc:86:
c8:df:77:d8:fc:2b:73:d7:a3:b8:b6:8c:8c:ca:60:
06:ec:9f:a7:0e:f1:6d:0a:e2:43:26:26:f6:c7:d9:
b3:07:d5:46:0e:d0:31:f9:33:67:7b:b8:97:36:75:
92:a9:84:74:7d:c0:2e:45:c4:b9:0f:8f:7e:c1:88:
bd:77:96:cd:da:21:1f:3e:38:d9:0b:5d:ec:99:ba:
e7:26:79:6c:fa:6a:47:43:c6:55:67:d9:cb:a4:57:
a0:0a:25:fa:f0:46:d1:9d:e9:d9:34:29:32:a9:27:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:23:31:84:3C:0B:CD:3A:53:32:39:1C:01:95:4C:B1:54:66:10:9B
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/MCMxhDwLzTpTMjkcAZVMsVRmEJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.76.0/24
Signature Algorithm: sha256WithRSAEncryption
94:c9:b1:e0:a0:6a:7b:c9:13:e8:2f:4f:58:d7:5b:9b:10:93:
b7:41:da:28:bb:ed:54:da:7d:1f:7e:f2:ec:cc:af:54:fc:09:
2d:aa:fc:c6:03:a2:74:6b:7e:c3:6f:29:0a:19:e0:8e:ca:0e:
c7:22:16:d7:45:22:b0:f1:a0:fa:d6:f5:9b:1f:c1:25:14:c7:
22:ab:07:03:b1:ef:db:46:d3:2b:35:c3:7b:98:fb:af:3c:15:
20:ca:d9:f8:7c:ae:8a:e4:1a:31:ac:10:09:64:08:6a:a0:65:
0f:f0:cc:62:6c:48:83:21:60:6f:41:0a:87:7f:8c:6a:d9:6d:
be:c9:34:8d:89:41:fe:e9:27:c8:b4:53:80:60:9a:02:06:0a:
05:3e:19:f9:a0:cd:72:8f:c4:f4:39:db:d7:96:87:aa:a0:d6:
48:d0:c9:81:09:2a:a6:df:37:f1:02:1b:86:b9:c5:f1:25:da:
0d:d2:98:ac:52:00:6e:80:db:f4:e0:c9:4f:7b:75:a7:ab:f8:
86:64:ea:a8:85:07:0c:93:0e:9d:fb:77:15:e2:d4:c4:a2:3a:
d2:8c:78:bd:fb:91:54:8a:aa:68:39:de:46:1e:3a:b3:37:24:
22:70:6e:40:31:ae:12:d3:ba:f7:a5:f4:5c:5e:da:70:8d:8b:
f1:b0:58:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:21:53 2026 by rpki-client