Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/_msrPFl7j-h-scWfwUUyG5vmI0Q.roa
File: _msrPFl7j-h-scWfwUUyG5vmI0Q.roa (raw, json)
Hash identifier: C0U0oHsxASzeTthWbTeZAy4SqW+0azDdamHmVesAW1U=
Subject key identifier: FE:6B:2B:3C:59:7B:8F:E8:7E:B1:C5:9F:C1:45:32:1B:9B:E6:23:44
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 019C4D6EFA6CB19DF190EDC9C9BECB0EF79B
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/_msrPFl7j-h-scWfwUUyG5vmI0Q.roa
Signing time: Wed 11 Feb 2026 16:00:44 +0000
ROA not before: Wed 11 Feb 2026 16:00:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201235
IP address blocks: 2a14:7dc0:520::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:6e:fa:6c:b1:9d:f1:90:ed:c9:c9:be:cb:0e:f7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Feb 11 16:00:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe6b2b3c597b8fe87eb1c59fc145321b9be62344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:be:48:c5:b8:df:f6:a1:79:40:0d:9b:bb:
60:d6:fb:5f:d5:81:37:58:ec:3b:83:e8:40:32:d8:
28:34:7d:10:b9:53:0b:4a:e6:2e:ae:d8:2a:8d:fe:
4f:f7:80:b6:d2:4a:52:03:0f:08:da:1c:f5:2f:a8:
c9:8b:d1:0c:3f:28:e6:6a:d6:0a:f5:53:e7:90:78:
8f:f8:64:9d:d1:e6:ba:45:86:fa:9a:c5:08:55:07:
78:4f:9d:03:a4:d5:a1:53:d8:9d:75:48:f3:26:59:
39:c4:b9:39:87:c7:15:e0:29:b7:a2:84:c6:d7:83:
36:c6:ac:dc:a9:f8:8b:4c:9e:c7:4f:78:ae:7c:16:
3e:9f:9a:5b:bf:27:9e:34:ad:7a:2f:9b:3a:e9:09:
07:64:7d:5a:3b:f9:53:5d:35:0d:e8:be:c8:53:66:
4d:0f:b2:16:19:c9:1f:94:e3:17:06:aa:86:ff:19:
1e:7f:a4:44:5d:5d:41:76:3b:05:6f:00:df:15:75:
9d:8b:f9:07:32:83:4e:ee:4d:97:22:7c:16:38:80:
cc:c5:a4:05:37:1f:78:88:af:86:ef:a1:78:7b:be:
10:5f:7f:44:b0:94:d5:b4:39:67:b4:ae:03:d0:7e:
d3:af:74:09:6d:35:e1:46:10:cb:54:03:6e:eb:fc:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6B:2B:3C:59:7B:8F:E8:7E:B1:C5:9F:C1:45:32:1B:9B:E6:23:44
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/_msrPFl7j-h-scWfwUUyG5vmI0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7dc0:520::/44
Signature Algorithm: sha256WithRSAEncryption
5d:eb:e8:09:b7:13:d0:e4:03:d4:55:31:09:7a:57:7b:2d:b8:
7c:01:9a:54:24:72:53:44:23:d9:2f:d4:4f:63:15:75:f5:ac:
a6:5f:6a:8f:93:07:57:6d:28:8e:88:34:ad:55:41:b8:b3:30:
71:dd:6c:e1:d1:8a:c6:1b:83:16:02:3f:1e:3c:a8:6f:bc:4c:
a7:c9:7c:1e:ef:fd:86:6d:37:73:0c:f3:4f:f9:26:bc:8b:6c:
8a:3d:f4:a1:87:43:d2:e2:dd:7f:1f:a2:b7:97:11:63:e2:be:
35:b5:e1:95:a4:14:f6:2c:19:be:f7:6f:c2:50:52:4e:ac:b9:
3f:78:da:2a:af:70:81:ae:34:32:f0:8e:8b:7a:c1:6d:e8:05:
2a:50:f9:c0:14:01:38:85:8d:b3:81:1f:85:86:32:f2:c4:9e:
a1:ce:e1:dc:03:a7:8d:76:81:41:ee:0f:e7:01:19:40:11:ee:
8a:4c:07:f8:da:b0:67:af:82:7f:91:6f:86:b5:6f:60:bd:dc:
9f:93:73:ed:ad:46:06:b7:0b:91:27:f6:fb:9b:ec:f9:33:19:
7e:8e:e0:87:d8:24:e3:aa:37:7b:ed:9f:ac:34:c9:ad:0c:ed:
8e:7b:c9:11:41:24:19:d0:74:ca:74:f9:7c:70:e9:d3:d7:c1:
90:1f:60:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:02 2026 by rpki-client