Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/mvsrCDC-NqbWrnDx8KIZT31_F9w.roa
File: mvsrCDC-NqbWrnDx8KIZT31_F9w.roa (raw, json)
Hash identifier: 6La2GkWDdDzTNk/r06zzIsY5pdXU8koA2+wcTUWWsEc=
Subject key identifier: 9A:FB:2B:08:30:BE:36:A6:D6:AE:70:F1:F0:A2:19:4F:7D:7F:17:DC
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019D77B8E8A7D8EB13AD547D8ACF9E09A457
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/mvsrCDC-NqbWrnDx8KIZT31_F9w.roa
Signing time: Fri 10 Apr 2026 14:08:20 +0000
ROA not before: Fri 10 Apr 2026 14:08:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201371
IP address blocks: 2a12:cb40:400::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:b8:e8:a7:d8:eb:13:ad:54:7d:8a:cf:9e:09:a4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Apr 10 14:08:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9afb2b0830be36a6d6ae70f1f0a2194f7d7f17dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c1:84:dd:af:6f:af:30:22:18:d5:7e:60:7f:
e5:17:93:72:f2:de:c6:6a:88:b3:90:0b:36:01:bf:
b5:3b:64:6b:47:60:1f:76:67:fe:fe:9d:77:a7:24:
33:c6:5f:53:4b:76:ce:9b:97:c7:0d:2d:43:a9:b4:
4a:a8:26:66:13:1e:8e:4c:d6:51:48:90:a1:74:3a:
f1:b1:f1:f2:55:06:2c:21:77:32:2d:5d:22:3a:f9:
d1:bd:0b:38:bd:ea:70:c5:54:b9:48:38:54:89:1e:
80:89:e3:7b:65:84:4e:6f:a2:11:0d:32:6f:b1:de:
a3:3a:a8:c9:b3:0a:6b:a3:98:8a:35:cd:8f:c7:f7:
7a:24:56:36:eb:a9:ac:21:3a:00:45:82:58:9c:b8:
e5:6d:95:69:87:cb:df:b9:1a:dc:48:da:2c:8b:54:
2f:bd:c8:47:7a:52:16:22:63:0a:df:17:25:dd:19:
dc:91:2b:65:5c:21:69:73:ed:ac:b8:04:00:17:72:
3e:fe:34:ff:64:40:3e:2a:ce:17:39:07:84:db:64:
ae:f1:28:15:97:8f:1e:b8:52:e8:87:29:b4:9a:67:
f2:b2:26:69:6f:44:51:4c:b6:32:ce:30:25:b9:94:
65:b2:31:da:01:e7:9e:bd:5e:ba:30:ad:8d:39:7a:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:2B:08:30:BE:36:A6:D6:AE:70:F1:F0:A2:19:4F:7D:7F:17:DC
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/mvsrCDC-NqbWrnDx8KIZT31_F9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb40:400::/44
Signature Algorithm: sha256WithRSAEncryption
b9:5b:07:d1:87:04:92:db:37:43:51:15:b2:b5:17:26:83:3e:
47:65:86:9f:9d:84:0c:df:93:58:29:b7:6e:07:ab:ce:6f:ef:
a3:2b:97:2c:19:91:8a:ff:2a:a6:4a:08:99:f8:48:91:d5:94:
49:39:5b:ae:64:d5:4a:e3:1c:24:68:7e:91:29:6f:fd:bd:46:
a3:8b:b9:c7:64:2c:de:3a:37:62:8c:d6:23:11:4f:85:89:cd:
84:84:bf:e5:99:19:86:1a:31:31:36:99:33:4b:96:4f:15:58:
8b:b2:c7:4f:36:aa:36:2f:63:fd:28:99:43:9b:06:98:38:3a:
48:de:c7:83:78:15:43:af:7f:89:14:9d:58:bb:9e:a0:ff:92:
91:50:4f:2c:dd:2c:29:c0:77:35:29:46:34:37:4f:f6:e9:a8:
c8:d4:1d:3c:43:73:e9:51:d8:c2:4c:91:99:00:f0:bb:4e:f7:
1c:ea:06:c7:de:97:77:13:8c:32:3e:ea:5e:ea:57:19:eb:b7:
3f:df:c9:ee:47:e7:34:5b:e8:9e:9b:0b:a0:8f:b2:e0:35:fd:
f8:4a:2f:1c:a5:c2:be:b0:8e:cb:40:01:1b:60:74:76:59:98:
c9:0a:3e:09:8a:d6:7f:11:51:a6:0d:03:30:22:35:75:98:ce:
b4:c8:39:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:29 2026 by rpki-client