Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mRso_HldN8vHOEzat1ATpoxC_5k.roa
File: mRso_HldN8vHOEzat1ATpoxC_5k.roa (raw, json)
Hash identifier: LEVEc5V2KdPH/2P6azrdtnoitJsUTsC+5TL9BZqXkwo=
Subject key identifier: 99:1B:28:FC:79:5D:37:CB:C7:38:4C:DA:B7:50:13:A6:8C:42:FF:99
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019F6F229D65FC3F8305E4D4FBE6167DF8E6
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mRso_HldN8vHOEzat1ATpoxC_5k.roa
Signing time: Fri 17 Jul 2026 08:12:47 +0000
ROA not before: Fri 17 Jul 2026 08:12:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213294
IP address blocks: 2a0d:ad41::/32 maxlen: 32
2a11:9047::/32 maxlen: 32
2a12:646::/32 maxlen: 32
2a12:e83::/32 maxlen: 32
2a12:2807::/32 maxlen: 32
2a12:cf87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:22:9d:65:fc:3f:83:05:e4:d4:fb:e6:16:7d:f8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 17 08:12:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=991b28fc795d37cbc7384cdab75013a68c42ff99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:6e:af:cc:0f:6c:ff:5f:7c:71:ca:92:f9:
24:f3:49:e4:75:d7:e1:c5:08:04:10:5c:a6:7b:0e:
c4:c5:a5:84:0d:f0:9d:5a:72:42:b3:1e:5c:a9:9c:
b6:7b:7a:79:26:af:3e:a3:9d:99:69:4c:b6:f5:30:
c8:c2:5d:0d:7e:a3:b9:6e:9e:ec:8f:3e:b7:8e:a5:
db:ac:ff:02:ef:7b:6b:b8:a4:f2:ee:0f:3d:d9:6f:
95:da:ba:49:c9:99:ff:8d:b6:1b:df:03:2c:85:a9:
a5:29:06:34:da:a8:6c:95:40:49:75:52:3b:17:83:
5e:68:cd:dd:17:c1:d6:ec:dd:9d:f7:ab:ac:aa:38:
c8:0c:2e:59:02:1e:2b:00:67:17:71:1e:2b:82:3d:
8c:38:c8:64:35:1f:ca:10:f7:2f:f6:86:ef:4e:7d:
39:98:a8:c7:ef:be:b7:29:23:d0:8a:f8:3a:5f:42:
93:5e:a5:7d:d2:42:59:c6:eb:28:87:e6:a7:90:43:
bb:53:11:e0:e5:90:17:8e:77:eb:2e:dc:d4:ad:06:
3a:25:fd:ab:d8:8e:1f:45:04:d2:e3:82:66:a0:bd:
47:94:42:37:aa:5b:09:19:4c:49:e0:86:d8:1b:17:
90:73:12:ee:4d:03:34:85:98:f4:8e:77:d9:53:ee:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1B:28:FC:79:5D:37:CB:C7:38:4C:DA:B7:50:13:A6:8C:42:FF:99
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mRso_HldN8vHOEzat1ATpoxC_5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ad41::/32
2a11:9047::/32
2a12:646::/32
2a12:e83::/32
2a12:2807::/32
2a12:cf87::/32
Signature Algorithm: sha256WithRSAEncryption
45:80:21:3f:c5:08:79:eb:ce:a0:44:e8:c4:c5:26:fb:59:60:
83:72:41:d1:0c:08:67:d3:0f:01:f1:98:35:61:33:bb:a3:f8:
d5:31:65:68:6e:02:69:67:27:84:53:65:9e:27:92:03:5c:55:
5b:74:c0:dc:be:fd:a9:48:2f:03:65:7b:59:88:f4:18:ea:79:
3a:b3:6f:77:17:14:21:4e:fd:fa:38:8d:11:37:b2:71:19:28:
0e:44:5b:3a:1d:64:bc:42:4b:eb:21:8d:10:54:5d:76:08:04:
c4:a5:c2:d4:5e:22:20:08:d1:f1:74:7f:59:9e:b6:3a:82:d6:
6e:28:6b:39:8a:e6:ce:82:87:64:87:14:5e:24:c4:29:70:02:
19:ce:b9:ed:55:31:6e:20:ed:d7:8a:4c:b7:34:e7:e2:08:6e:
9c:5a:cb:34:f2:9c:60:e0:ef:ad:6d:91:99:b4:1f:99:26:c9:
a0:6c:b1:67:85:20:77:27:f5:d8:d8:73:e7:29:04:14:d0:af:
04:cb:61:83:b9:aa:e5:4c:f1:68:87:6c:da:16:4a:eb:a1:62:
99:d3:5e:43:41:b2:ef:e4:13:8e:af:e4:03:bd:27:ed:90:11:
bb:db:9f:c1:7a:02:a6:2e:63:00:93:14:d7:d7:e4:1e:e0:54:
a6:fe:54:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:26 2026 by rpki-client