Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/mT4iExO_8k6m2zUFxjqyyXX_B5M.roa
File: mT4iExO_8k6m2zUFxjqyyXX_B5M.roa (raw, json)
Hash identifier: MP6E3DYsYt8ooikR41wucpeN+Eiz9yRT03CjiUtKRVQ=
Subject key identifier: 99:3E:22:13:13:BF:F2:4E:A6:DB:35:05:C6:3A:B2:C9:75:FF:07:93
Certificate issuer: /CN=a16102e80735fec8921e9f509fc53b10e2be9505
Certificate serial: 01A0B7E96A051AEB68A41B5A0A44DBE2E79D
Authority key identifier: A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/mT4iExO_8k6m2zUFxjqyyXX_B5M.roa
Signing time: Sat 19 Sep 2026 04:25:22 +0000
ROA not before: Sat 19 Sep 2026 04:25:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202831
IP address blocks: 2a0e:e000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:e9:6a:05:1a:eb:68:a4:1b:5a:0a:44:db:e2:e7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16102e80735fec8921e9f509fc53b10e2be9505
Validity
Not Before: Sep 19 04:25:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=993e221313bff24ea6db3505c63ab2c975ff0793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:4a:1f:96:66:40:da:33:07:09:eb:da:ef:
4b:35:6b:8e:3c:5c:54:1a:fa:65:cc:6f:ab:6b:43:
77:76:59:73:4a:27:61:57:dc:c1:a2:41:4b:73:5d:
c2:37:8b:2b:5f:85:68:88:1d:a3:7d:9c:cb:54:67:
01:bd:5a:ba:a1:73:ab:78:24:42:d1:b0:c2:32:85:
38:74:6c:39:77:1d:1a:00:fd:87:be:d8:de:2b:d7:
f4:af:b3:41:35:d4:c6:15:77:76:77:27:d8:45:3b:
49:a9:cc:2c:ff:07:ed:c4:33:c7:dd:73:86:5b:33:
09:83:55:11:fb:f5:c3:7d:ab:e5:cc:87:d3:d2:0e:
75:85:7f:e2:7c:59:21:d6:fd:25:62:7d:f5:4f:b7:
26:fb:1d:82:f1:93:71:9f:35:97:f1:98:2b:10:28:
b3:89:72:ca:c5:88:fe:56:7c:63:62:db:c3:e5:17:
fe:ad:37:6d:76:f8:d3:6f:c3:41:f4:55:1e:8b:db:
72:dd:65:b9:24:69:96:b9:72:4a:2a:82:0f:31:25:
be:7a:9a:15:60:7e:88:8b:2c:34:a0:38:fc:f7:a5:
43:e4:79:a3:92:a7:83:02:ce:9f:a4:36:1c:dd:80:
17:47:df:d1:de:be:90:72:41:8f:12:1f:cc:ab:35:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3E:22:13:13:BF:F2:4E:A6:DB:35:05:C6:3A:B2:C9:75:FF:07:93
X509v3 Authority Key Identifier:
keyid:A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/mT4iExO_8k6m2zUFxjqyyXX_B5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e000::/32
Signature Algorithm: sha256WithRSAEncryption
97:7f:93:4b:40:8b:e9:60:45:a6:b3:2f:b5:59:bd:f5:4a:a2:
4e:06:6d:8a:cf:10:86:4e:b3:02:ef:ba:9a:c4:db:70:f0:68:
37:61:24:ad:bb:a7:c6:f4:65:d6:25:cb:88:c0:87:53:67:5a:
72:12:7f:0e:d3:41:5a:f1:25:44:4a:c5:67:76:7a:1d:8f:f5:
bc:c4:55:a7:70:6a:a5:a8:3b:bc:98:ea:e1:14:d1:a5:cd:ae:
a1:e9:4a:1b:6e:1f:46:db:f9:ca:a2:f3:5d:2d:d2:66:72:b1:
8b:5f:77:ef:59:50:3c:43:b6:d4:1c:99:7a:6c:bb:26:87:16:
c5:7d:88:26:2b:f2:4c:ae:1c:03:87:11:02:7a:e5:f0:cd:b9:
be:aa:d9:1d:af:a5:e5:53:2e:46:58:c6:f1:fa:15:1d:8d:7f:
12:db:17:e4:b9:ca:b0:2e:f6:1a:ae:93:2d:9f:ba:f0:d6:0f:
4f:4b:77:06:08:4b:cc:4c:77:f7:8a:53:0c:f8:9b:f7:54:3d:
6c:11:b4:0d:c4:33:39:f5:98:4c:e4:0f:18:d2:f7:0f:af:e4:
d9:06:da:aa:5e:c0:0e:a2:22:02:ef:79:90:8a:b3:d1:5b:04:
ea:f5:23:9c:f3:ab:de:75:ac:a0:27:3e:82:a7:c2:d8:bd:e0:
9b:c1:30:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:30:58 2026 by rpki-client