Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/Mz6b9RE1a7PQVFNLNaep4PvMXLo.roa
File: Mz6b9RE1a7PQVFNLNaep4PvMXLo.roa (raw, json)
Hash identifier: nsEHtmuLKoEjphj16JeJMAKFgiSN3+GdZGkD3234iFM=
Subject key identifier: 33:3E:9B:F5:11:35:6B:B3:D0:54:53:4B:35:A7:A9:E0:FB:CC:5C:BA
Certificate issuer: /CN=1a767677a33d3a799f364384296df46a91d3927f
Certificate serial: 01A07B3DC3301A7190CA0810952CD6807525
Authority key identifier: 1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/Mz6b9RE1a7PQVFNLNaep4PvMXLo.roa
Signing time: Mon 07 Sep 2026 09:40:40 +0000
ROA not before: Mon 07 Sep 2026 09:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218754
IP address blocks: 2a0c:6d87:f080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:3d:c3:30:1a:71:90:ca:08:10:95:2c:d6:80:75:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a767677a33d3a799f364384296df46a91d3927f
Validity
Not Before: Sep 7 09:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=333e9bf511356bb3d054534b35a7a9e0fbcc5cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:8d:75:f8:aa:e4:57:db:9d:8d:e3:57:b2:
0a:59:67:a5:f5:82:2c:91:96:72:e7:80:2a:14:83:
b9:01:f0:e8:52:fd:15:76:06:4d:4a:03:cb:38:e1:
2f:4f:f7:e6:f9:66:a2:79:f1:f6:c5:74:19:8c:58:
49:f3:18:fe:d0:5b:64:11:1e:e3:d5:b2:34:95:67:
1a:8b:89:c3:40:64:76:7c:8b:dc:94:6d:89:39:a9:
bf:df:bb:12:b4:13:51:4f:1b:33:ae:e0:30:4f:1d:
d7:32:68:22:a5:25:b2:04:c2:49:31:c0:04:8a:db:
ec:20:86:e7:82:3b:9c:60:3a:c4:00:64:cb:d3:8c:
69:e8:84:86:3d:1b:87:0c:84:3d:5a:82:87:ff:fa:
ea:bd:bb:8d:af:fe:62:c9:9d:35:cb:d7:5c:7b:e3:
ce:bb:18:71:94:23:f2:50:77:b9:bd:7a:a3:52:35:
48:cc:87:04:b2:52:23:f8:d7:31:2c:aa:c3:db:76:
5a:ef:cc:1b:ab:f7:a0:de:c3:9a:4e:38:78:b3:08:
14:77:bf:43:e9:ae:0f:93:71:3f:35:bd:54:c8:37:
f0:36:07:13:02:a4:ef:e0:e2:dc:9c:b3:c0:12:85:
66:1f:83:ca:54:09:d5:37:5f:3c:ff:5b:14:12:3e:
b6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3E:9B:F5:11:35:6B:B3:D0:54:53:4B:35:A7:A9:E0:FB:CC:5C:BA
X509v3 Authority Key Identifier:
keyid:1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/Mz6b9RE1a7PQVFNLNaep4PvMXLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6d87:f080::/48
Signature Algorithm: sha256WithRSAEncryption
15:e0:ea:47:d0:7a:b9:f4:be:0f:1d:de:9c:b4:c4:6b:dd:7d:
0f:75:d1:c8:4b:4e:c0:2f:1d:05:da:bd:00:4d:ae:01:c4:9b:
da:cc:10:92:22:42:68:0e:fa:51:4e:4d:f6:96:da:80:2e:5d:
fb:b2:68:e4:56:fc:0f:d0:5c:10:67:db:24:73:20:8e:43:9a:
9b:ea:68:a3:75:5e:ef:c0:32:68:8e:12:19:39:d0:e3:6a:d2:
3a:ea:e9:ea:97:d7:95:aa:16:6f:8f:33:f9:8a:02:aa:ce:ff:
9f:7e:b8:67:91:47:3f:3e:f8:7e:2a:0f:5c:25:f2:32:5a:f7:
c0:7a:dd:e9:1b:19:5a:54:2c:70:5e:6d:73:c0:4c:1f:4f:f8:
90:a7:d6:c1:a6:44:2b:32:89:5b:26:50:8d:7b:41:76:4a:11:
49:34:50:f7:17:12:69:42:f8:be:d6:1e:0d:04:7a:68:48:a5:
22:88:79:43:6c:a7:b0:86:d8:5c:44:6f:ba:58:99:5a:5c:36:
b5:c1:62:4d:4f:d8:a5:f0:42:28:f7:77:35:c7:37:ef:db:83:
c7:a4:54:83:f8:1c:97:8a:79:1e:e9:84:bd:4b:e0:57:0c:fe:
99:a1:66:3e:3e:ff:a9:0e:32:8e:99:88:1b:4b:d9:45:ab:28:
4e:d2:56:55
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaB7PcMwGnGQyggQlSzWgHUlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzY3Njc3YTMzZDNhNzk5ZjM2NDM4NDI5NmRmNDZhOTFk
MzkyN2YwHhcNMjYwOTA3MDk0MDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzNlOWJmNTExMzU2YmIzZDA1NDUzNGIzNWE3YTllMGZiY2M1Y2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPWNdfiq5FfbnY3jV7IKWWel9YIs
kZZy54AqFIO5AfDoUv0VdgZNSgPLOOEvT/fm+WaiefH2xXQZjFhJ8xj+0FtkER7j
1bI0lWcai4nDQGR2fIvclG2JOam/37sStBNRTxszruAwTx3XMmgipSWyBMJJMcAE
itvsIIbngjucYDrEAGTL04xp6ISGPRuHDIQ9WoKH//rqvbuNr/5iyZ01y9dce+PO
uxhxlCPyUHe5vXqjUjVIzIcEslIj+NcxLKrD23Za78wbq/eg3sOaTjh4swgUd79D
6a4Pk3E/Nb1UyDfwNgcTAqTv4OLcnLPAEoVmH4PKVAnVN188/1sUEj62/wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDM+m/URNWuz0FRTSzWnqeD7zFy6MB8GA1UdIwQY
MBaAFBp2dnejPTp5nzZDhClt9GqR05J/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25aMmQ2TTlPbm1mTmtPRUtXMzBhcEhUa244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYzY2OTYtOGI4Ny00N2U2LWEyOGMt
MDYyNDI5MzYwNzVlLzEvTXo2YjlSRTFhN1BRVkZOTE5hZXA0UHZNWExvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lYzY2OTYtOGI4Ny00N2U2LWEyOGMtMDYyNDI5MzYwNzVl
LzEvR25aMmQ2TTlPbm1mTmtPRUtXMzBhcEhUa244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxth/CA
MA0GCSqGSIb3DQEBCwUAA4IBAQAV4OpH0Hq59L4PHd6ctMRr3X0PddHIS07ALx0F
2r0ATa4BxJvazBCSIkJoDvpRTk32ltqALl37smjkVvwP0FwQZ9skcyCOQ5qb6mij
dV7vwDJojhIZOdDjatI66unql9eVqhZvjzP5igKqzv+ffrhnkUc/Pvh+Kg9cJfIy
WvfAet3pGxlaVCxwXm1zwEwfT/iQp9bBpkQrMolbJlCNe0F2ShFJNFD3FxJpQvi+
1h4NBHpoSKUiiHlDbKewhthcRG+6WJlaXDa1wWJNT9il8EIo93c1xzfv24PHpFSD
+ByXinke6YS9S+BXDP6ZoWY+Pv+pDjKOmYgbS9lFqyhO0lZV
-----END CERTIFICATE-----
Generated at Wed Sep 23 15:16:42 2026 by rpki-client