Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/MGbK18crReeycP3hT0y5D69KHDg.roa
File: MGbK18crReeycP3hT0y5D69KHDg.roa (raw, json)
Hash identifier: bJ5cOxmt243LIA6o4KZp7HyiaUla0ibwqPSbCU8ga5Y=
Subject key identifier: 30:66:CA:D7:C7:2B:45:E7:B2:70:FD:E1:4F:4C:B9:0F:AF:4A:1C:38
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 019B7F141C24D611DF33D3EC86DE60578D24
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/MGbK18crReeycP3hT0y5D69KHDg.roa
Signing time: Fri 02 Jan 2026 14:19:42 +0000
ROA not before: Fri 02 Jan 2026 14:19:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3096
IP address blocks: 2a02:6a0:8ffe::/48 maxlen: 48
2a02:6a0:8fff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:1c:24:d6:11:df:33:d3:ec:86:de:60:57:8d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Jan 2 14:19:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3066cad7c72b45e7b270fde14f4cb90faf4a1c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:cb:d3:a7:d1:3f:03:17:d8:75:19:61:47:
c2:dc:41:33:4a:89:6e:6e:be:1c:1d:45:6c:b1:a9:
d3:47:ed:9a:be:f0:5c:11:14:d9:9a:59:ee:a2:52:
bf:54:8d:ba:b7:fd:2a:c9:d9:19:fc:26:e3:99:40:
67:bf:34:51:72:e3:be:72:40:b3:22:7d:56:87:af:
80:97:37:6e:2f:e9:43:a7:bb:d8:60:79:f2:75:e0:
84:3d:92:31:78:54:04:a0:4d:74:47:bb:87:ef:32:
d8:08:dc:ed:11:a4:18:5b:6c:86:68:6b:74:09:7e:
b5:ec:52:19:67:29:19:eb:aa:00:f4:69:14:d4:b3:
9d:93:a3:5e:2c:e3:a5:43:83:42:22:a8:56:80:ac:
b8:f7:ed:7b:1d:31:ce:fb:71:88:e2:11:54:5a:12:
0a:a8:c6:71:f3:56:e7:cb:be:96:60:92:78:dd:87:
54:a6:36:3a:de:88:77:7d:34:73:dc:8e:e1:22:bb:
ad:a5:73:18:66:c0:77:8b:60:bd:27:3b:b4:ea:3d:
52:43:01:dc:b7:60:90:33:87:33:6c:b2:c3:ab:df:
fc:8e:b1:9c:b8:82:00:50:e7:d7:bc:ef:03:61:1c:
d7:db:c0:27:14:29:9d:67:2c:71:a1:d6:0a:42:41:
7d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:66:CA:D7:C7:2B:45:E7:B2:70:FD:E1:4F:4C:B9:0F:AF:4A:1C:38
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/MGbK18crReeycP3hT0y5D69KHDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6a0:8ffe::/47
Signature Algorithm: sha256WithRSAEncryption
06:95:42:40:74:67:73:b7:01:eb:b2:2c:b0:65:23:19:c3:23:
14:4c:f2:27:71:27:fa:99:cc:1d:54:37:2e:97:9e:dd:d8:67:
58:20:d3:0e:3b:81:63:96:4f:e2:00:82:15:22:ac:32:a8:12:
6e:08:f1:22:1f:8d:28:4b:39:9a:a1:45:17:24:67:34:2c:da:
d8:ce:3e:e3:50:6b:f3:da:b5:c7:74:30:98:f4:76:05:2a:69:
15:cd:cf:95:f7:85:44:66:d1:e4:a7:73:02:d8:ef:df:ef:25:
d1:7b:bd:de:00:4a:84:7b:de:64:84:18:bd:1d:c3:e9:cd:9b:
ba:43:35:03:d2:92:ee:b0:e7:8f:f3:02:d1:99:1c:72:17:ac:
61:c9:cf:96:06:f5:c8:d0:83:aa:d7:70:4b:fe:bf:0c:ef:31:
b1:24:09:da:dc:3c:11:8e:70:5b:b5:22:ca:d4:be:64:6f:38:
39:bc:55:22:75:56:db:cc:43:f0:ab:a9:e7:0a:06:61:91:d5:
0b:e0:bb:a4:46:19:8b:1a:e8:04:bd:9c:f4:c8:b0:ab:7f:b4:
03:08:8e:24:58:e4:ef:16:16:9b:f3:c5:dd:54:b6:17:b3:d3:
c0:90:ed:85:c2:5a:6d:86:30:04:14:cf:64:b3:eb:32:74:a4:
f2:d7:3e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:45 2026 by rpki-client