Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/m8zy49mlilgd1SPfU7e74Pq-L9w.roa
File: m8zy49mlilgd1SPfU7e74Pq-L9w.roa (raw, json)
Hash identifier: 3ByWSNaUHf3Y97SFh9Lm+qACChqfIOs4+xqkpYGrpug=
Subject key identifier: 9B:CC:F2:E3:D9:A5:8A:58:1D:D5:23:DF:53:B7:BB:E0:FA:BE:2F:DC
Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Certificate serial: 019F229A467F88030FB6B70DA7452246D271
Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/m8zy49mlilgd1SPfU7e74Pq-L9w.roa
Signing time: Thu 02 Jul 2026 11:32:43 +0000
ROA not before: Thu 02 Jul 2026 11:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4785
IP address blocks: 2a02:f440::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:9a:46:7f:88:03:0f:b6:b7:0d:a7:45:22:46:d2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Validity
Not Before: Jul 2 11:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bccf2e3d9a58a581dd523df53b7bbe0fabe2fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:84:40:59:b1:55:e4:cf:87:bd:bc:21:8f:
82:8a:5a:ce:12:6a:bf:d7:3f:9d:13:93:84:9f:db:
6f:11:9a:6d:74:6e:05:d2:56:d4:cd:53:11:f5:4e:
f7:86:1a:be:6e:55:1c:8a:86:59:37:1e:a8:e9:05:
b9:63:05:29:dd:82:a1:b2:6b:df:c8:99:c8:98:ec:
b9:53:65:fc:9d:76:1b:da:5d:53:46:ce:6c:4f:b5:
69:2e:3e:97:60:15:f6:db:87:77:e7:7f:63:5b:19:
e6:a5:e8:5f:20:ac:fd:2e:ac:1f:c1:28:a7:56:14:
3d:cd:26:3d:e5:4b:61:2f:57:8d:c4:b1:0a:ea:5b:
14:d5:a7:a7:62:64:cc:7c:54:94:42:15:73:73:18:
28:8c:0e:dc:a2:92:a4:fe:19:75:33:a8:0e:08:d7:
61:e5:39:f6:cc:14:5e:b9:ea:90:45:0d:80:29:9a:
14:67:2d:c9:b8:6a:5c:6c:46:ce:b6:58:40:54:1f:
45:19:45:fa:25:0e:54:cb:8f:82:c4:b6:17:d1:3b:
22:f3:33:af:b7:77:cb:ee:4f:d8:2d:11:e6:26:c0:
28:b5:27:bd:af:49:42:40:05:7b:f0:2e:0e:3c:55:
8f:f8:b8:c1:94:dd:49:2e:07:5d:b6:ac:8e:2c:0a:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CC:F2:E3:D9:A5:8A:58:1D:D5:23:DF:53:B7:BB:E0:FA:BE:2F:DC
X509v3 Authority Key Identifier:
keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/m8zy49mlilgd1SPfU7e74Pq-L9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:f440::/29
Signature Algorithm: sha256WithRSAEncryption
78:a6:0e:a5:54:a9:c0:37:76:be:89:40:23:4b:ce:40:d8:8e:
02:65:e3:f2:32:4d:55:bf:76:55:fe:e5:5e:f0:7b:78:27:8c:
c0:9a:8e:c8:48:09:91:53:69:43:a5:5e:53:f6:d0:8a:d7:c3:
83:9c:96:88:db:51:71:ee:64:a3:92:00:54:90:3e:cc:bb:95:
87:f6:96:cd:83:66:4a:3d:91:87:7b:90:6a:61:76:80:e3:be:
d0:38:03:b1:5d:b5:55:48:fb:a7:62:80:29:fe:a7:cb:3c:0c:
31:da:22:65:07:9f:ff:c2:1f:7e:63:e6:e1:34:be:48:14:ae:
d9:fa:bb:78:2e:12:61:a6:b4:e4:70:bc:88:fc:cd:18:ba:e8:
5e:2c:4b:57:6c:5c:46:b8:44:2b:7d:6a:b4:9b:03:fb:c0:04:
b4:92:bf:ca:90:74:45:07:a5:23:c8:63:80:d9:0b:52:d4:30:
db:33:13:b6:e7:82:76:8c:27:9c:5f:e9:98:9c:ef:e6:b9:ee:
26:27:1a:aa:05:35:79:60:0e:20:b6:a5:a5:3e:eb:72:53:ac:
83:7b:8d:2e:b0:4c:83:7e:08:8c:b3:e5:49:23:d1:11:c3:af:
d6:ae:3b:9c:50:5b:66:22:66:b3:db:f8:07:43:09:f7:1e:d2:
67:eb:22:f4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8imkZ/iAMPtrcNp0UiRtJxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNDllMTBlMGU3MDk0YjQ1ZWJhMWMxNmY5NjM3ZTFjZWM2
N2JkYzYwHhcNMjYwNzAyMTEzMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmNjZjJlM2Q5YTU4YTU4MWRkNTIzZGY1M2I3YmJlMGZhYmUyZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp2EQFmxVeTPh728IY+CilrOEmq/
1z+dE5OEn9tvEZptdG4F0lbUzVMR9U73hhq+blUcioZZNx6o6QW5YwUp3YKhsmvf
yJnImOy5U2X8nXYb2l1TRs5sT7VpLj6XYBX224d3539jWxnmpehfIKz9LqwfwSin
VhQ9zSY95UthL1eNxLEK6lsU1aenYmTMfFSUQhVzcxgojA7copKk/hl1M6gOCNdh
5Tn2zBReueqQRQ2AKZoUZy3JuGpcbEbOtlhAVB9FGUX6JQ5Uy4+CxLYX0Tsi8zOv
t3fL7k/YLRHmJsAotSe9r0lCQAV78C4OPFWP+LjBlN1JLgddtqyOLAq6bQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJvM8uPZpYpYHdUj31O3u+D6vi/cMB8GA1UdIwQY
MBaAFCpJ4Q4OcJS0XrocFvljfhzsZ73GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQt
MmQzOGIzOTNiMTIzLzEvbTh6eTQ5bWxpbGdkMVNQZlU3ZTc0UHEtTDl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQtMmQzOGIzOTNiMTIz
LzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgL0QDAN
BgkqhkiG9w0BAQsFAAOCAQEAeKYOpVSpwDd2volAI0vOQNiOAmXj8jJNVb92Vf7l
XvB7eCeMwJqOyEgJkVNpQ6VeU/bQitfDg5yWiNtRce5ko5IAVJA+zLuVh/aWzYNm
Sj2Rh3uQamF2gOO+0DgDsV21VUj7p2KAKf6nyzwMMdoiZQef/8IffmPm4TS+SBSu
2fq7eC4SYaa05HC8iPzNGLroXixLV2xcRrhEK31qtJsD+8AEtJK/ypB0RQelI8hj
gNkLUtQw2zMTtueCdownnF/pmJzv5rnuJicaqgU1eWAOILalpT7rclOsg3uNLrBM
g34IjLPlSSPREcOv1q47nFBbZiJms9v4B0MJ9x7SZ+si9A==
-----END CERTIFICATE-----
Generated at Sun Jul 12 08:34:25 2026 by rpki-client