Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/0mFyto1y53ruCLGWQn3gJpFGWfQ.roa
File: 0mFyto1y53ruCLGWQn3gJpFGWfQ.roa (raw, json)
Hash identifier: 3BTyCNd0Qk28bOdEJ4zgxqYBE8dkSiUija2o4afiIfo=
Subject key identifier: D2:61:72:B6:8D:72:E7:7A:EE:08:B1:96:42:7D:E0:26:91:46:59:F4
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 019F45CA255E969F33E28C1C7E054A8719C4
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/0mFyto1y53ruCLGWQn3gJpFGWfQ.roa
Signing time: Thu 09 Jul 2026 07:31:43 +0000
ROA not before: Thu 09 Jul 2026 07:31:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16084
IP address blocks: 153.100.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:ca:25:5e:96:9f:33:e2:8c:1c:7e:05:4a:87:19:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Jul 9 07:31:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d26172b68d72e77aee08b196427de026914659f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:07:3a:75:1e:8b:42:ec:d0:ac:2a:d8:b5:
ec:82:9f:55:5f:40:9d:83:cb:4a:87:50:17:d9:84:
8a:06:3f:ca:aa:ef:71:68:a7:5c:dd:0a:c1:f4:3f:
0b:15:a6:14:95:5e:86:74:da:f4:da:a9:e1:9b:3e:
c6:ae:0d:ac:41:6b:ae:ef:da:ba:61:c6:1a:16:e2:
0d:a2:0e:21:8f:9b:3c:1c:a7:30:cb:76:8d:29:42:
14:c1:46:63:df:33:e4:18:de:3e:2d:b2:34:fd:2c:
8d:3e:68:56:4c:e8:d3:1e:60:0b:7c:6c:a2:a4:b2:
c6:85:1d:17:c3:09:ed:ea:79:8e:74:26:9d:54:cf:
ef:e9:71:10:ec:db:f5:03:db:13:81:ae:54:d5:34:
1b:2d:09:3d:36:f1:a7:70:df:b2:e0:76:74:64:af:
7a:d5:30:96:e2:d5:0c:75:f4:af:ec:da:96:e6:e4:
49:78:1b:1f:f2:e3:81:10:f7:c1:40:a3:84:9a:87:
77:75:fd:32:41:fd:f6:2e:3a:20:68:9d:a6:75:a6:
6c:e9:8c:4f:da:94:3c:33:44:2e:d6:17:6e:24:20:
49:75:3f:97:b0:f5:aa:f0:05:0a:d1:ad:18:53:e2:
b6:5a:9d:65:92:20:2c:1e:68:03:a4:7e:24:fd:59:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:61:72:B6:8D:72:E7:7A:EE:08:B1:96:42:7D:E0:26:91:46:59:F4
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/0mFyto1y53ruCLGWQn3gJpFGWfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.100.8.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e8:80:56:0b:3e:f2:ea:6d:53:60:2c:ea:d5:1d:c7:e4:33:
f2:c4:b0:69:cf:1d:fe:aa:65:f9:6a:6c:54:91:63:6a:9c:91:
a7:6b:60:82:48:89:b9:c4:3c:94:aa:d0:ab:b2:1f:5d:4e:56:
13:2c:ed:fa:c0:1c:bb:8f:39:21:ab:5d:90:72:41:62:c5:79:
da:d2:40:cc:14:37:aa:cf:55:3d:03:9f:25:65:04:7d:dd:17:
8b:70:ba:9d:0f:9c:ac:b5:74:9a:f6:8d:72:43:12:84:44:3d:
42:7a:58:fd:16:e3:c0:47:55:1a:9b:02:82:2b:eb:cf:de:cf:
fd:f1:7e:7e:ae:e2:20:73:10:c0:63:a3:48:ac:78:e2:5d:fe:
cc:bb:d1:04:29:c6:f9:a2:12:b1:7f:bc:63:f9:db:be:5b:8c:
e9:8d:0b:fc:3c:07:d3:77:b5:77:76:6f:bc:9f:b2:4c:1f:bf:
7b:ee:df:7d:13:c3:aa:09:c5:02:2c:62:a2:37:1b:0f:1e:d4:
c3:e0:4f:0f:bc:e1:f7:ca:c8:03:93:ca:d1:89:34:74:3b:4d:
5d:40:1c:4c:83:d5:9f:30:9d:e7:df:cf:41:60:69:d0:79:50:
38:a5:85:90:58:c7:67:7c:15:fa:b8:4a:df:00:0a:24:a3:44:
7e:c3:e3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 22:38:12 2026 by rpki-client