Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0MEQxwD9zfWWZH2uW7sIhd_mFno.roa
File: 0MEQxwD9zfWWZH2uW7sIhd_mFno.roa (raw, json)
Hash identifier: bP379mwRyG+37X38gwvy3mtfEkchSNALzGhS0CYul3s=
Subject key identifier: D0:C1:10:C7:00:FD:CD:F5:96:64:7D:AE:5B:BB:08:85:DF:E6:16:7A
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 019E888570AC297E9D2175E15C53C924CF9B
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0MEQxwD9zfWWZH2uW7sIhd_mFno.roa
Signing time: Tue 02 Jun 2026 13:28:26 +0000
ROA not before: Tue 02 Jun 2026 13:28:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8387
IP address blocks: 207.244.212.0/24 maxlen: 24
216.120.174.0/23 maxlen: 23
2001:678:554::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:85:70:ac:29:7e:9d:21:75:e1:5c:53:c9:24:cf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Jun 2 13:28:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0c110c700fdcdf596647dae5bbb0885dfe6167a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:f6:6d:dc:7b:c4:9d:9a:07:50:1b:88:5c:
9b:42:94:10:1a:d5:e4:d3:54:6e:d2:1d:e3:f3:65:
ad:9c:5c:4a:48:52:a9:8a:9c:98:ef:19:c2:f8:a1:
d6:6f:4d:ee:c1:40:65:d1:6b:51:17:59:fd:27:4f:
bd:52:0b:34:00:19:e2:80:ea:8e:25:9a:e7:5f:c2:
c2:c6:98:7a:3e:db:58:c0:48:b7:98:0d:ad:b5:f9:
8c:fc:df:d1:27:75:bf:29:ab:eb:07:9a:3a:9e:0b:
c3:e8:e1:3b:8c:b0:3c:8d:6f:f1:bb:48:76:ea:cf:
98:7e:f3:e3:a8:cb:d9:fb:6d:5c:7b:60:d9:ce:08:
1e:9a:51:22:07:87:2c:9b:ae:d7:0d:da:ab:6e:54:
ed:3b:27:78:5b:64:f2:58:7c:5f:68:f6:3b:c7:fb:
02:c7:98:12:74:2f:19:60:64:6f:31:77:90:f1:45:
f2:38:40:6d:7a:25:ca:38:a7:2c:a2:44:87:3f:dc:
d7:dd:17:9b:a7:06:c5:98:cc:eb:dd:3d:50:03:29:
10:03:9e:a8:21:99:87:b1:d5:26:cc:71:7b:f7:f2:
20:93:68:2b:a1:74:6a:3e:35:97:9e:e3:41:ff:05:
19:ee:86:7a:df:8a:2c:6b:86:93:a3:d3:a0:a9:45:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C1:10:C7:00:FD:CD:F5:96:64:7D:AE:5B:BB:08:85:DF:E6:16:7A
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0MEQxwD9zfWWZH2uW7sIhd_mFno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.244.212.0/24
216.120.174.0/23
IPv6:
2001:678:554::/48
Signature Algorithm: sha256WithRSAEncryption
09:c7:ab:7a:97:29:02:7b:e4:d8:c5:81:bd:fb:5a:94:90:7f:
35:a5:f7:5d:b7:dc:f2:16:be:70:d7:6d:9b:f3:5d:36:9c:da:
99:92:b0:0f:d1:fa:dd:c4:59:d4:95:c3:5f:06:31:78:36:0a:
f2:e5:07:22:1b:63:4b:3b:90:80:15:05:fd:c1:a1:4a:5a:c4:
d5:ab:87:e6:8d:e1:4e:cf:6a:58:43:ca:4d:39:16:60:c5:4e:
bb:7c:5c:fe:6d:e7:4e:00:3a:2c:17:76:f4:e9:d1:33:70:c1:
20:73:87:f1:d3:9d:bd:20:a3:a8:58:98:26:a7:d8:25:ad:97:
82:69:83:fe:a6:54:9e:13:de:f5:5c:14:d9:e0:14:83:85:a5:
48:ef:96:45:46:32:a7:04:ad:b0:e3:4f:84:36:2a:31:a0:61:
67:01:87:98:1a:03:5b:06:e8:c6:f4:85:21:9a:60:35:71:e1:
2b:50:32:d5:8b:91:a3:f1:40:c6:00:3e:50:5d:c0:25:97:d9:
5a:11:0e:03:65:50:db:bb:33:da:4b:14:64:40:34:8d:90:49:
e9:3a:84:96:0f:32:1a:88:12:83:05:fe:9f:8f:a1:38:f1:73:
73:51:f5:7b:d6:e4:b4:b7:be:29:64:4b:0c:c0:67:85:4b:74:
a6:72:51:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:40:24 2026 by rpki-client