Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/mpTjBzPwM8YklHVPNghilzmJdoE.roa
File: mpTjBzPwM8YklHVPNghilzmJdoE.roa (raw, json)
Hash identifier: 0yPco9x2hUn0u2NrpNZ6AJ7ldToVVrWY9opkCDCrnIE=
Subject key identifier: 9A:94:E3:07:33:F0:33:C6:24:94:75:4F:36:08:62:97:39:89:76:81
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A0572AAA4365D028EDF9D0DF0E8A977F38
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/mpTjBzPwM8YklHVPNghilzmJdoE.roa
Signing time: Mon 31 Aug 2026 09:33:28 +0000
ROA not before: Mon 31 Aug 2026 09:33:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 213.220.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:2a:aa:43:65:d0:28:ed:f9:d0:df:0e:8a:97:7f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Aug 31 09:33:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a94e30733f033c62494754f3608629739897681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:6e:8d:e9:27:87:98:6a:74:84:70:4d:dc:
6b:95:b0:06:39:8f:ff:95:09:35:bd:0a:51:03:0e:
0b:8e:51:3d:ed:41:92:c2:31:3c:59:e6:32:e7:29:
37:12:fb:f5:ca:0b:e3:2e:b9:c3:9d:aa:86:e0:e4:
7d:96:fa:04:c7:3e:07:d6:b2:95:d3:ae:42:d1:a0:
f8:f0:90:42:d5:dd:b5:9b:b5:7f:55:34:e4:3d:83:
58:fd:1e:b1:99:df:98:9e:03:f6:e3:2f:5a:26:25:
e7:6f:eb:4a:d4:a9:fd:5f:32:c3:e2:c3:2d:b4:f9:
dc:0f:f8:05:e5:ea:a0:58:cc:d9:4c:04:4b:0c:23:
9b:f7:21:c3:a2:f1:74:87:92:c9:8c:d5:0f:9f:0b:
c8:0f:82:92:b8:13:2f:c0:9c:26:7e:f1:06:35:73:
66:a7:cf:f7:e7:37:ac:b6:c3:6b:94:3b:cf:1e:f1:
87:89:2e:dc:48:37:48:19:e5:02:8c:4e:62:2c:27:
26:3f:e4:d7:ef:7d:c5:6f:76:78:63:56:b1:79:46:
df:d3:05:dd:eb:95:61:7f:10:1c:2a:c2:98:67:92:
eb:39:93:6b:42:b9:e6:fd:85:a9:70:79:c9:91:14:
50:01:2c:1c:44:b8:f9:40:3b:28:c3:35:80:c7:43:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:94:E3:07:33:F0:33:C6:24:94:75:4F:36:08:62:97:39:89:76:81
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/mpTjBzPwM8YklHVPNghilzmJdoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.41.0/24
Signature Algorithm: sha256WithRSAEncryption
37:5e:2a:63:c4:8f:74:d2:ba:25:01:e1:be:e1:5e:77:48:99:
a3:5f:c1:26:05:a1:25:7d:38:ec:32:a9:2d:2b:47:07:70:63:
b7:f3:57:21:36:09:c3:11:5e:c8:03:ee:3e:ad:62:0b:8d:96:
6f:a1:1e:6a:34:e5:54:10:79:de:47:c6:81:82:ba:24:73:ae:
0a:7e:5e:ff:4b:fc:d7:e2:ab:49:9a:f2:80:82:72:74:95:fe:
1d:1d:5f:ec:fb:3c:36:f8:a7:9e:af:55:e6:e6:f2:76:25:c2:
5d:99:15:7e:d3:6f:43:b8:f5:12:fd:7b:be:00:d6:07:95:84:
b3:8f:9b:96:6b:37:e0:b9:27:28:60:c0:ff:e0:df:b6:12:ef:
2b:e5:af:99:39:6b:f1:cb:a8:79:31:0a:4e:8f:b8:3f:20:38:
18:14:d4:05:3e:08:be:04:b8:12:61:79:58:c2:fb:98:aa:47:
c3:bb:58:fa:3f:f3:29:45:53:2a:d0:04:74:94:51:c2:9b:9b:
5f:4c:8a:1f:24:c3:8c:b1:29:28:66:ce:27:56:20:96:09:70:
52:9d:98:9f:5f:6a:6f:f9:b2:02:6f:d0:cd:8d:a2:4a:fc:e3:
a7:19:61:1d:7d:e1:7f:e0:40:af:4a:ee:94:51:67:89:97:f2:
95:11:e4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:16:06 2026 by rpki-client