Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/MaMuRhJpZN3sUs2ReczUrxtPqog.roa
File: MaMuRhJpZN3sUs2ReczUrxtPqog.roa (raw, json)
Hash identifier: CIDmAVgYtghMXGXHEdC7pvKkJAeXg2JMbpBDZ4AJ2O8=
Subject key identifier: 31:A3:2E:46:12:69:64:DD:EC:52:CD:91:79:CC:D4:AF:1B:4F:AA:88
Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial: 019C8C3FF2B8A2F479C04A078A235CA0B3F7
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/MaMuRhJpZN3sUs2ReczUrxtPqog.roa
Signing time: Mon 23 Feb 2026 20:45:27 +0000
ROA not before: Mon 23 Feb 2026 20:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209432
IP address blocks: 2a0e:cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8c:3f:f2:b8:a2:f4:79:c0:4a:07:8a:23:5c:a0:b3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Validity
Not Before: Feb 23 20:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31a32e46126964ddec52cd9179ccd4af1b4faa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4f:03:83:11:16:61:22:99:59:76:7b:52:eb:
e9:14:8c:28:e8:c3:73:db:d6:be:5e:75:90:b3:60:
ee:4d:f0:68:a8:08:34:94:95:09:b0:90:16:9e:86:
4a:20:b5:1e:07:10:29:c0:6c:48:f3:5d:de:78:19:
03:c1:01:b0:c2:9d:c1:a4:4c:29:f6:2d:9d:93:b2:
73:aa:d5:a7:62:19:42:a3:45:fe:e8:ec:49:4e:60:
31:1b:9c:59:34:b2:b0:9d:e3:d3:ac:60:e6:c3:2c:
19:b2:29:22:62:a2:de:3f:b7:c7:18:ed:28:9c:d0:
03:d3:d0:a1:5d:ef:2d:47:bb:b1:cb:6b:4e:23:c9:
75:8f:9e:67:b8:9f:6c:7c:00:d3:3d:f5:91:64:84:
f9:96:7b:62:5e:c8:24:3a:3e:2e:09:4f:8a:2e:c5:
fd:a6:79:84:db:d1:a9:26:ef:0a:a2:40:9c:14:23:
bf:83:43:92:44:60:27:f3:e9:ff:71:3a:23:ac:ea:
a5:98:8c:5e:02:d0:c1:a6:0a:2e:a4:e4:a0:16:aa:
0b:14:0c:de:a1:2d:f0:4d:de:f2:ed:bd:dc:fb:57:
d9:d5:4b:4f:74:83:fc:fa:0f:94:1b:50:96:d0:16:
1e:0e:bf:71:cf:53:e4:66:15:a3:c3:ce:53:f6:bf:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A3:2E:46:12:69:64:DD:EC:52:CD:91:79:CC:D4:AF:1B:4F:AA:88
X509v3 Authority Key Identifier:
keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/MaMuRhJpZN3sUs2ReczUrxtPqog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:14:3d:a3:02:1d:21:3a:da:b9:6c:f2:95:b4:60:2f:f2:2d:
9e:a4:0d:fc:74:7d:88:97:d7:57:6d:63:53:50:af:e5:cb:07:
20:19:ea:5f:16:20:6e:78:6b:65:5b:ae:7d:c4:b0:ad:ac:53:
43:1c:ef:f5:d1:9d:bc:1b:0a:93:25:ff:06:e0:6b:63:07:df:
af:59:13:74:52:36:de:1f:aa:dc:a9:67:dd:bd:b0:19:95:ea:
a7:15:98:86:db:dd:5a:f9:3e:7a:6f:e6:94:dc:d3:ed:d7:15:
14:8f:d5:5d:25:a3:2b:e6:d4:02:79:70:c4:fe:3f:4c:ec:a6:
7e:39:f5:19:a0:aa:98:af:e4:1e:ad:94:c0:84:e4:3b:b0:1f:
1c:cf:4e:e0:cf:59:be:04:ab:a2:9d:53:4e:cf:95:46:e1:d1:
20:69:49:e9:e4:ba:a1:b5:a2:bf:a1:06:fc:ec:ce:f0:10:f6:
e1:c3:96:0d:06:b9:ec:d1:d9:25:52:9a:c8:f6:d5:a2:d8:8f:
71:2b:b1:ed:19:f8:28:01:ba:ac:2f:dd:9e:a2:00:6a:14:d3:
44:cf:f0:5d:13:0d:e3:d5:2c:1a:e4:20:d0:37:b5:2b:58:46:
cd:c4:4e:9d:b9:f4:4b:37:8f:cf:14:4d:02:3b:65:33:4f:3e:
2a:ba:d3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:24:09 2026 by rpki-client