Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/mtJz-hUI0Cx0jLgkDLzYwDMbWdM.roa
File: mtJz-hUI0Cx0jLgkDLzYwDMbWdM.roa (raw, json)
Hash identifier: CKUhSDm/qBK/JCbTgbEQJEgA0HKSbKEajcNdo2qCwys=
Subject key identifier: 9A:D2:73:FA:15:08:D0:2C:74:8C:B8:24:0C:BC:D8:C0:33:1B:59:D3
Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial: 019D3E6B6120D6106017F08105F82F349D8F
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/mtJz-hUI0Cx0jLgkDLzYwDMbWdM.roa
Signing time: Mon 30 Mar 2026 11:05:17 +0000
ROA not before: Mon 30 Mar 2026 11:05:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212233
IP address blocks: 212.40.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:6b:61:20:d6:10:60:17:f0:81:05:f8:2f:34:9d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Validity
Not Before: Mar 30 11:05:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ad273fa1508d02c748cb8240cbcd8c0331b59d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:df:b6:45:35:a3:47:cb:58:70:cc:2e:65:
42:02:25:67:88:b0:62:e7:85:3e:e0:19:ea:2f:4d:
c2:68:5f:db:ca:48:f5:51:70:aa:86:d3:06:fc:b5:
e6:cd:b1:24:80:5c:f0:9a:fe:45:f4:17:a9:31:72:
c1:26:cd:f0:1f:7d:36:d7:c9:17:34:da:de:a9:c1:
2c:8c:98:de:aa:31:9f:73:94:b2:bd:5d:75:b9:af:
db:42:2a:c7:d7:fc:bc:31:78:58:73:c2:a5:d9:dc:
d5:64:b9:41:94:29:a1:64:5c:ea:65:a1:0a:d5:80:
03:dd:9f:a0:2b:3e:c6:aa:aa:1c:4b:40:d3:47:64:
1a:f0:51:4b:07:b3:c2:6d:87:0e:89:74:41:59:33:
ab:ce:e0:b9:0f:0f:d7:21:0f:ee:19:4e:ea:99:bd:
af:1e:54:e5:85:d7:3f:86:a0:48:c1:8e:75:50:f0:
5e:d1:3e:85:a1:67:2a:69:42:42:87:a9:33:49:36:
f4:99:45:08:5d:b9:59:29:eb:73:97:e6:2e:26:e8:
ca:87:5d:11:18:93:e6:c0:97:a7:0c:f8:b9:35:88:
d7:10:de:55:e7:33:6b:dc:ad:ff:d3:37:b7:e2:03:
d6:27:8a:21:3b:0e:13:85:ec:2b:b3:1d:f7:ee:11:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D2:73:FA:15:08:D0:2C:74:8C:B8:24:0C:BC:D8:C0:33:1B:59:D3
X509v3 Authority Key Identifier:
keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/mtJz-hUI0Cx0jLgkDLzYwDMbWdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.40.50.0/24
Signature Algorithm: sha256WithRSAEncryption
04:fb:b3:cb:b6:5a:c4:99:26:f2:38:56:d9:60:27:ec:ce:0d:
b7:63:38:d3:9e:14:74:e5:20:9e:3d:89:62:fc:5c:46:ae:f1:
cb:a1:00:15:c2:b8:38:58:05:c7:1f:9b:22:d9:f3:ea:63:4c:
0b:af:22:c4:1d:eb:da:da:63:f2:10:2d:de:75:73:a3:f0:bf:
f8:a5:04:09:ba:9d:71:2b:79:b8:22:19:6d:a8:cf:3e:3a:12:
a4:05:10:43:52:e8:26:b9:75:f6:5c:67:c3:a0:64:ba:e3:7f:
95:68:bc:90:d7:5d:41:47:31:8e:82:38:fe:b3:4b:1d:24:7d:
ea:ec:fa:b1:96:c7:04:ad:42:34:44:b4:d1:0a:fa:4d:c4:3a:
62:79:0c:b7:8c:df:97:a7:d8:42:0c:87:ca:2d:4f:af:07:06:
29:fd:f8:ec:70:ff:e8:c0:54:44:0c:9c:bf:18:d4:ed:1f:9f:
7c:9b:80:fb:a5:e2:e3:97:b2:b0:65:fc:ec:22:4f:9e:1f:3b:
05:d9:d0:44:95:fa:9b:c6:0f:e9:81:67:c2:ff:f6:f3:a9:1b:
e4:7f:dc:78:93:52:03:e9:d4:f0:da:c7:8a:57:d4:4f:82:a7:
cf:5a:4b:b0:38:62:07:b9:cc:4a:c2:95:bf:2b:bd:96:ea:6d:
97:ac:df:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:51 2026 by rpki-client