Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/PMVxDduYgQJ0BG5nMLjgUjPq-Fo.roa
File: PMVxDduYgQJ0BG5nMLjgUjPq-Fo.roa (raw, json)
Hash identifier: 8MELFyGN82m0iqvP/pWKQ/F8wrQUyEvQTg8CFQeMMOw=
Subject key identifier: 3C:C5:71:0D:DB:98:81:02:74:04:6E:67:30:B8:E0:52:33:EA:F8:5A
Certificate issuer: /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial: 019D49D6C7849D340B21133A2983439B40B3
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/PMVxDduYgQJ0BG5nMLjgUjPq-Fo.roa
Signing time: Wed 01 Apr 2026 16:18:25 +0000
ROA not before: Wed 01 Apr 2026 16:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214331
IP address blocks: 2a06:b700:1000::/48 maxlen: 48
2a06:b700:1001::/48 maxlen: 48
2a06:b700:1004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:d6:c7:84:9d:34:0b:21:13:3a:29:83:43:9b:40:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Validity
Not Before: Apr 1 16:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cc5710ddb98810274046e6730b8e05233eaf85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8f:a7:73:31:1c:e0:7f:23:f1:3e:5c:8a:ba:
d8:c5:88:3c:4e:51:3c:fe:1a:e6:7b:3b:ec:e3:f3:
fa:e6:62:a0:53:4c:87:e6:3e:f0:0e:37:06:58:6f:
d7:29:9f:ee:10:de:55:ce:1e:0a:fc:32:d5:51:5e:
0b:0e:ae:43:c3:a7:08:1d:df:43:2a:9a:d0:ed:25:
81:06:03:0a:96:e2:ea:3b:e1:b2:21:6c:91:db:92:
a9:5d:38:d3:d4:a1:52:a8:05:a9:d4:28:80:06:d8:
67:0a:b3:67:95:d1:7b:fe:54:e4:96:77:80:b7:0f:
dd:2d:55:66:5a:0e:26:9f:5e:9c:d2:6a:e1:90:85:
37:e1:4a:6d:a9:34:7d:11:0b:a9:1e:dc:01:cd:42:
a6:b8:79:c1:0d:b1:83:1d:ca:f4:4c:8c:83:74:57:
9b:02:fb:1e:ff:ab:f5:44:2d:11:c0:37:37:11:ac:
5b:54:6b:9b:47:02:86:7d:cf:f8:4f:09:d9:7d:4e:
c7:dd:de:d9:9d:56:23:38:ef:89:2d:1b:46:2a:dd:
f3:c6:d5:54:90:ab:c0:50:82:a0:9e:92:43:61:ab:
39:3c:37:6b:39:45:b1:2f:5a:2b:43:56:2f:1d:e8:
79:c0:c2:89:6c:af:c1:56:dd:89:36:f4:d4:5f:6b:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C5:71:0D:DB:98:81:02:74:04:6E:67:30:B8:E0:52:33:EA:F8:5A
X509v3 Authority Key Identifier:
keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/PMVxDduYgQJ0BG5nMLjgUjPq-Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b700:1000::/47
2a06:b700:1004::/48
Signature Algorithm: sha256WithRSAEncryption
72:e6:ea:6d:ec:6a:0b:7c:72:f4:b9:b5:89:23:dc:5c:44:6b:
71:bd:d5:e6:48:de:27:13:74:30:43:5c:1b:12:4d:57:c1:aa:
0b:65:70:52:fa:65:ad:af:72:da:6c:11:0a:63:ea:40:81:91:
ae:74:21:e7:6b:47:7d:40:a9:d4:ca:93:42:97:a6:0e:20:98:
26:ec:ff:22:f1:19:3d:d5:96:65:fd:b8:58:6e:f5:b3:c4:27:
2d:16:1d:d2:e6:b2:56:f9:ec:85:4e:68:c2:37:bb:6e:19:9c:
77:68:84:14:0e:b9:8d:08:8e:ed:9c:d1:70:ec:d1:dd:df:0c:
ec:4e:77:b3:38:b6:1e:b3:85:44:4c:4f:c4:77:b7:f0:7d:a9:
12:c6:da:16:e8:bb:08:c9:2c:69:d2:8f:5d:c5:36:37:5a:46:
ae:2e:dc:83:1d:29:48:fd:d5:b2:1d:d3:f5:a5:61:a7:42:ab:
5c:79:64:78:33:f3:aa:2c:4c:60:cd:d5:36:af:37:d0:8c:c9:
d2:b7:4c:fa:d9:44:3b:7e:08:ac:e9:67:40:31:b9:57:6c:d2:
45:25:1e:77:17:5f:f1:ea:8f:04:e3:af:2a:c4:6a:6e:ab:21:
1f:fd:ec:00:47:c2:c5:4d:ff:08:92:a2:10:38:4b:91:39:30:
77:eb:8f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:59:58 2026 by rpki-client