Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mNzDWQ7_gyfpy9i-4dg4Q_i_dnU.roa
File: mNzDWQ7_gyfpy9i-4dg4Q_i_dnU.roa (raw, json)
Hash identifier: pFY8n+0/bZASGpNZsHHUC6ybGbEgbcs3Jq5GYUWpZwg=
Subject key identifier: 98:DC:C3:59:0E:FF:83:27:E9:CB:D8:BE:E1:D8:38:43:F8:BF:76:75
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01A067C68DBE85C9911D75531B89EBCA5EBC
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mNzDWQ7_gyfpy9i-4dg4Q_i_dnU.roa
Signing time: Thu 03 Sep 2026 14:57:40 +0000
ROA not before: Thu 03 Sep 2026 14:57:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a10:eec0:20::/43 maxlen: 43
2a10:eec0:40::/42 maxlen: 42
2a10:eec0:80::/41 maxlen: 41
2a10:eec0:100::/40 maxlen: 40
2a10:eec0:200::/39 maxlen: 39
2a10:eec0:400::/38 maxlen: 38
2a10:eec0:800::/37 maxlen: 37
2a10:eec0:1000::/36 maxlen: 36
2a10:eec0:2000::/35 maxlen: 35
2a10:eec0:4000::/34 maxlen: 34
2a10:eec0:8000::/35 maxlen: 35
2a10:eec0:a000::/37 maxlen: 37
2a10:eec0:a800::/39 maxlen: 39
2a10:eec0:aa00::/40 maxlen: 40
2a10:eec0:ab00::/41 maxlen: 41
2a10:eec0:ab80::/42 maxlen: 42
2a10:eec0:abc0::/45 maxlen: 45
2a10:eec0:abc8::/46 maxlen: 46
2a10:eec0:abcc::/48 maxlen: 48
2a10:eec0:abce::/47 maxlen: 47
2a10:eec0:abd0::/44 maxlen: 44
2a10:eec0:abe0::/43 maxlen: 43
2a10:eec0:ac00::/38 maxlen: 38
2a10:eec0:b000::/36 maxlen: 36
2a10:eec0:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:c6:8d:be:85:c9:91:1d:75:53:1b:89:eb:ca:5e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Sep 3 14:57:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98dcc3590eff8327e9cbd8bee1d83843f8bf7675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:e4:e7:39:7e:11:e0:53:93:b4:2c:c6:22:
85:46:62:12:24:05:df:db:22:be:12:e6:84:4a:79:
87:23:ba:26:23:02:45:fc:12:a9:69:af:08:b2:13:
d2:f9:96:f5:26:6b:00:d4:5b:49:60:90:e2:d9:26:
25:64:bf:1c:23:63:c1:cf:68:d2:5b:c3:e4:84:83:
3a:bd:31:e5:b7:00:31:f9:0b:6c:29:66:34:b9:6d:
bd:79:2e:06:66:7b:c3:d0:90:b8:bb:27:2f:d8:6c:
9d:4e:e0:8b:67:84:cd:e1:b7:86:ee:ed:c5:76:a2:
32:f9:28:89:4b:cb:f5:97:3d:9c:07:c6:ae:d0:49:
cb:f0:31:55:75:ff:c5:33:23:e2:fa:b1:1e:c5:21:
71:46:57:14:c0:f5:17:2e:c9:21:88:98:d7:a8:b5:
62:ca:0b:01:8c:a8:4c:ad:92:b4:7e:7f:4b:06:eb:
f8:a2:58:51:6b:f7:ac:31:42:95:a7:55:6a:a8:5c:
ab:a9:3d:4d:8a:26:a4:07:43:6e:19:e3:98:7d:cb:
c7:cb:09:7d:cc:cb:60:11:e7:75:4a:69:1a:fa:fe:
e6:36:b3:b0:78:ca:18:0c:31:7b:8c:bc:b9:0f:17:
1c:38:79:27:bd:99:8f:08:82:95:dc:0e:94:36:08:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DC:C3:59:0E:FF:83:27:E9:CB:D8:BE:E1:D8:38:43:F8:BF:76:75
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mNzDWQ7_gyfpy9i-4dg4Q_i_dnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:eec0:20::-2a10:eec0:abcc:ffff:ffff:ffff:ffff:ffff
2a10:eec0:abce::-2a10:eec0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3a:9c:62:74:22:ab:e9:e0:9e:10:19:5d:47:82:7a:f4:c1:1d:
49:c6:cb:46:09:7e:af:30:79:a5:51:bf:ad:16:45:a6:9e:b6:
f6:1f:d0:3c:ab:bc:bc:82:37:73:e4:fd:8d:b4:c2:a0:3f:a7:
af:57:85:d8:12:bd:d6:07:4f:a2:7f:8d:a3:59:56:a7:19:e3:
24:f5:73:e5:d2:4f:82:85:4a:82:f4:15:13:c7:93:c0:39:fa:
14:bc:e8:36:8e:da:2a:d4:ea:f3:1d:51:86:a4:ad:b6:fe:df:
f1:e8:ef:9d:92:d8:8b:65:06:0e:8f:d2:4e:23:43:1a:7e:d8:
fd:49:d9:ac:51:10:2c:a2:12:69:f0:4b:d9:55:11:c4:a1:e8:
96:68:15:fd:d6:f5:00:34:29:60:72:4a:6c:a1:4c:d9:64:6a:
33:c2:6c:ab:c2:da:6c:aa:f4:cb:da:41:a1:71:90:96:43:b1:
5d:f4:b0:e5:2d:9c:a1:dc:5e:50:f8:6a:a1:2d:cf:4c:97:98:
a7:08:d9:d8:4f:10:aa:4b:c9:58:ba:52:66:61:46:a9:f0:c2:
af:27:96:a5:bc:b8:26:3e:0d:27:c5:37:86:ca:57:15:a5:90:
22:13:14:69:fa:57:35:49:17:9a:a1:dd:9f:84:e4:da:2f:df:
f0:13:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:21 2026 by rpki-client