Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/mRAPRARmIWBI0GVMPhWngw_j6ww.roa
File: mRAPRARmIWBI0GVMPhWngw_j6ww.roa (raw, json)
Hash identifier: avARUPRrUse7y3N+OWqTLKma/Wv73drbWJGHR9JSglE=
Subject key identifier: 99:10:0F:44:04:66:21:60:48:D0:65:4C:3E:15:A7:83:0F:E3:EB:0C
Certificate issuer: /CN=a24faf63520f7eff6c9083489c8b9543f5c41e6b
Certificate serial: 019C913FDB8B64D91F8AF34C64FC19B418FA
Authority key identifier: A2:4F:AF:63:52:0F:7E:FF:6C:90:83:48:9C:8B:95:43:F5:C4:1E:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/mRAPRARmIWBI0GVMPhWngw_j6ww.roa
Signing time: Tue 24 Feb 2026 20:03:26 +0000
ROA not before: Tue 24 Feb 2026 20:03:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212294
IP address blocks: 2001:67c:b64::/48 maxlen: 48
2001:67c:c00::/48 maxlen: 48
2001:67c:c68::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.mft
rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:91:3f:db:8b:64:d9:1f:8a:f3:4c:64:fc:19:b4:18:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24faf63520f7eff6c9083489c8b9543f5c41e6b
Validity
Not Before: Feb 24 20:03:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99100f440466216048d0654c3e15a7830fe3eb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:3c:ee:12:d7:3d:df:d6:ef:d9:96:28:6e:
ef:2f:ac:43:a9:fc:06:9b:c8:31:d4:3f:8f:7b:d1:
26:23:29:e0:ae:26:96:cf:14:91:da:90:94:4a:bc:
75:2e:e9:6d:8b:e0:a8:a5:8a:d8:f7:54:08:8f:72:
11:06:e6:71:d5:cf:f3:a2:d2:f3:89:34:50:cc:fc:
fe:8e:d4:2b:b8:64:ba:74:3f:99:84:30:9c:3c:74:
56:57:e3:c2:35:c1:6a:39:85:10:f4:64:46:f5:e4:
41:83:ea:d6:83:4d:9f:32:b7:e9:14:c4:da:87:92:
11:2b:aa:4d:5b:0f:ef:ba:d1:fc:0f:7a:5a:c8:c4:
ca:9d:fd:30:1e:07:03:8f:e1:bc:87:80:5b:bb:2b:
ca:f1:8a:fc:72:46:72:b2:a1:23:9f:12:a8:41:58:
70:d2:9e:27:e0:32:f6:c9:21:37:31:87:5d:6b:b4:
4a:29:0e:09:2e:a8:bb:dc:59:59:dd:90:ad:f1:12:
56:c6:0d:85:7e:62:e6:ff:20:ae:e7:75:3a:11:4b:
38:b9:d7:c1:0e:ed:73:24:f9:b4:76:44:5f:11:7b:
45:2d:c7:e5:7b:b3:c1:14:7d:0a:57:21:ef:c1:e2:
f2:a5:fb:16:1a:23:70:ac:14:24:54:67:53:1f:c7:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:10:0F:44:04:66:21:60:48:D0:65:4C:3E:15:A7:83:0F:E3:EB:0C
X509v3 Authority Key Identifier:
keyid:A2:4F:AF:63:52:0F:7E:FF:6C:90:83:48:9C:8B:95:43:F5:C4:1E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ok-vY1IPfv9skINInIuVQ_XEHms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/mRAPRARmIWBI0GVMPhWngw_j6ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a2c735-b3c8-457a-abfb-71171260db34/1/ok-vY1IPfv9skINInIuVQ_XEHms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b64::/48
2001:67c:c00::/48
2001:67c:c68::/48
Signature Algorithm: sha256WithRSAEncryption
5f:08:e0:bb:4d:59:19:55:4b:a0:cb:0d:6a:2a:cc:c6:1a:f3:
85:fe:3b:cd:99:69:76:41:fd:ae:8a:61:d2:5d:35:41:11:cd:
d7:d1:97:8b:9c:e1:82:02:a0:f9:c4:2f:c3:ed:e6:05:02:b8:
8f:ce:ff:70:30:0b:36:d5:d7:46:9d:42:8b:78:85:f4:1f:11:
c0:65:70:67:6b:38:4c:d1:91:41:ed:55:42:2f:bd:1e:45:5a:
ec:79:ee:08:46:96:9c:32:c8:c2:57:60:05:a3:ab:a0:14:34:
0c:4c:09:55:50:69:e7:41:0b:73:d7:49:d4:a0:a2:cd:e4:63:
2a:71:ce:23:bc:35:7f:b2:30:bb:44:59:59:56:d6:55:79:cf:
70:86:66:75:03:e8:47:76:48:92:a1:0b:03:90:7a:25:06:87:
ec:d2:d9:d0:3b:d0:dd:2c:dd:a9:5a:f9:82:38:12:12:e1:f7:
51:44:65:d5:a8:9b:20:18:24:98:8f:9d:c7:40:e8:a9:cb:9a:
85:c5:ba:13:06:5a:73:b9:bf:73:74:f4:91:8f:f2:04:14:6d:
d1:a1:93:4e:da:1a:18:80:32:29:fc:99:7a:69:c6:94:3d:53:
1a:c4:79:c0:f1:73:5a:9a:10:c1:b4:01:e7:25:8c:93:00:99:
ed:15:3c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:24 2026 by rpki-client