Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_MWQOROileFNLzLVVVQSxJeLwAU.roa
File: _MWQOROileFNLzLVVVQSxJeLwAU.roa (raw, json)
Hash identifier: nMpnhI0dVN9uNXuAIr2LvoxHn8PFYrXRJpY/nGHjAm4=
Subject key identifier: FC:C5:90:39:13:A2:95:E1:4D:2F:32:D5:55:54:12:C4:97:8B:C0:05
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019C6FD40C6E390C3C22132F35993417AA11
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_MWQOROileFNLzLVVVQSxJeLwAU.roa
Signing time: Wed 18 Feb 2026 08:18:13 +0000
ROA not before: Wed 18 Feb 2026 08:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199545
IP address blocks: 192.121.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6f:d4:0c:6e:39:0c:3c:22:13:2f:35:99:34:17:aa:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 18 08:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcc5903913a295e14d2f32d5555412c4978bc005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:82:a0:4c:f2:4b:a8:45:82:b0:25:2d:eb:
de:c6:af:91:4c:09:cb:58:b7:7e:69:20:32:36:64:
04:7d:03:61:c7:42:74:3b:58:5a:10:92:49:d6:40:
09:03:09:6a:88:8a:73:81:ed:fc:2a:9a:4c:f0:76:
61:f1:32:f3:fd:77:08:e1:15:ab:f4:d3:e0:89:72:
2e:d1:58:68:3f:d5:5c:ab:6d:91:70:ea:a5:de:f0:
a7:fc:ec:6a:d5:e3:77:63:46:1b:93:c8:ad:c4:eb:
8c:30:34:a2:14:f7:c0:72:44:c8:43:25:2d:6f:7d:
85:c7:37:29:fc:5b:af:dc:9a:9c:02:0b:46:88:40:
a0:59:77:30:a5:56:35:c0:53:24:ce:0d:28:91:92:
22:b8:99:66:24:1b:1e:36:57:e4:1d:1b:7e:86:e1:
4c:d1:7e:63:04:95:b0:8e:12:97:4c:fa:16:8e:46:
67:d1:2c:15:06:e9:9e:c5:dd:f3:4a:4a:3b:f8:41:
18:a7:ac:13:86:b2:1a:56:03:ca:4d:06:bb:02:8f:
b2:20:81:33:39:64:99:6c:23:24:99:0d:5d:fe:fc:
34:58:81:5c:53:7d:b0:4e:3d:c2:b4:de:c5:06:6c:
4b:10:85:a8:63:19:7d:8a:9c:fc:99:1f:c8:3a:0f:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C5:90:39:13:A2:95:E1:4D:2F:32:D5:55:54:12:C4:97:8B:C0:05
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_MWQOROileFNLzLVVVQSxJeLwAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.118.0/23
Signature Algorithm: sha256WithRSAEncryption
00:f7:68:e6:a3:4d:ef:dc:80:aa:a9:b9:8b:83:2a:42:5e:3c:
75:c4:b6:20:6b:da:50:a5:3e:ff:e7:06:6e:54:0e:4e:6e:7d:
a6:b7:53:51:19:6b:fa:94:87:08:98:f4:dd:d0:49:3f:b0:e1:
0b:e9:97:86:97:1b:f9:be:80:27:b9:55:54:8f:f0:d3:4a:a5:
23:3b:03:40:77:af:43:f4:49:6f:0a:5e:03:dc:42:dc:c2:f3:
e6:3a:47:8c:3f:e7:af:7d:a0:2f:93:af:5b:28:c0:c8:a6:18:
01:01:0e:27:f9:86:e1:bc:0a:98:3e:9f:69:90:a3:ee:88:c0:
03:fe:02:a3:3b:cd:a1:e1:50:8f:0d:3b:b6:b0:28:5c:c4:d6:
fd:4c:8b:b5:e7:f5:5a:65:f2:4f:c1:6e:28:ba:ed:f6:cc:f4:
93:11:11:40:ae:19:db:e2:7b:c6:40:59:1e:79:86:5b:f8:53:
b4:16:f9:f3:4f:3a:b2:11:fd:2a:b3:20:8b:30:46:c0:68:95:
d8:46:a2:99:c8:e8:7c:c5:de:fa:a8:a5:bf:18:04:e6:7c:5e:
0a:df:08:74:f3:b7:f7:c2:e6:34:8d:f2:0e:26:90:5a:f9:f2:
9b:79:83:5e:19:41:a1:18:36:2d:9c:2d:84:c7:99:0d:8e:da:
01:08:5f:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxv1AxuOQw8IhMvNZk0F6oRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwMjE4MDgxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2M1OTAzOTEzYTI5NWUxNGQyZjMyZDU1NTU0MTJjNDk3OGJjMDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhyCoEzyS6hFgrAlLevexq+RTAnL
WLd+aSAyNmQEfQNhx0J0O1haEJJJ1kAJAwlqiIpzge38KppM8HZh8TLz/XcI4RWr
9NPgiXIu0VhoP9Vcq22RcOql3vCn/Oxq1eN3Y0Ybk8itxOuMMDSiFPfAckTIQyUt
b32Fxzcp/Fuv3JqcAgtGiECgWXcwpVY1wFMkzg0okZIiuJlmJBseNlfkHRt+huFM
0X5jBJWwjhKXTPoWjkZn0SwVBumexd3zSko7+EEYp6wThrIaVgPKTQa7Ao+yIIEz
OWSZbCMkmQ1d/vw0WIFcU32wTj3CtN7FBmxLEIWoYxl9ipz8mR/IOg/vAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPzFkDkTopXhTS8y1VVUEsSXi8AFMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvX01XUU9ST2lsZUZOTHpMVlZWUVN4SmVMd0FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwHl2MA0G
CSqGSIb3DQEBCwUAA4IBAQAA92jmo03v3ICqqbmLgypCXjx1xLYga9pQpT7/5wZu
VA5Obn2mt1NRGWv6lIcImPTd0Ek/sOEL6ZeGlxv5voAnuVVUj/DTSqUjOwNAd69D
9ElvCl4D3ELcwvPmOkeMP+evfaAvk69bKMDIphgBAQ4n+YbhvAqYPp9pkKPuiMAD
/gKjO82h4VCPDTu2sChcxNb9TIu15/VaZfJPwW4ouu32zPSTERFArhnb4nvGQFke
eYZb+FO0FvnzTzqyEf0qsyCLMEbAaJXYRqKZyOh8xd76qKW/GATmfF4K3wh087f3
wuY0jfIOJpBa+fKbeYNeGUGhGDYtnC2Ex5kNjtoBCF8+
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:06:36 2026 by rpki-client