Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/MOJcdxQiBxAx2vvdcpdbYmiGD_A.roa
File: MOJcdxQiBxAx2vvdcpdbYmiGD_A.roa (raw, json)
Hash identifier: ZIMOdFsqgaXvljzA+t76+XedwYdcjxI2Gj45XhDck7I=
Subject key identifier: 30:E2:5C:77:14:22:07:10:31:DA:FB:DD:72:97:5B:62:68:86:0F:F0
Certificate issuer: /CN=d0c3f954885483cf12a9aed05cce60357fa4b4be
Certificate serial: 019D3E806FF2B1AE3982241149931EB51F64
Authority key identifier: D0:C3:F9:54:88:54:83:CF:12:A9:AE:D0:5C:CE:60:35:7F:A4:B4:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/MOJcdxQiBxAx2vvdcpdbYmiGD_A.roa
Signing time: Mon 30 Mar 2026 11:28:17 +0000
ROA not before: Mon 30 Mar 2026 11:28:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213635
IP address blocks: 91.211.196.0/22 maxlen: 24
193.109.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:80:6f:f2:b1:ae:39:82:24:11:49:93:1e:b5:1f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0c3f954885483cf12a9aed05cce60357fa4b4be
Validity
Not Before: Mar 30 11:28:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30e25c771422071031dafbdd72975b6268860ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e6:4d:81:f9:31:30:ce:b6:0a:ae:2e:24:2a:
57:37:38:be:5f:2f:ab:bf:49:ee:67:41:4f:1e:18:
6e:a2:58:04:ad:e3:32:54:39:46:3c:a1:a0:00:a6:
cc:cf:e6:77:40:3d:b1:fc:d9:e0:d9:d5:2a:20:f9:
67:40:52:d1:0f:fe:44:7a:06:49:a1:39:5b:a6:6b:
17:a0:37:fb:cd:51:0e:f3:b7:f7:b5:68:35:db:3a:
7b:0a:25:e4:ed:67:ab:84:ff:33:80:f1:40:cf:bd:
0c:e2:77:e1:25:43:91:4e:3e:06:ee:4c:72:12:fc:
3c:1e:68:a2:84:60:c3:82:17:75:cc:59:87:99:cc:
a6:33:cb:4c:d2:ed:b1:f2:0d:50:10:2a:59:fa:4a:
22:88:0b:80:53:b3:e2:d9:1b:89:43:1b:e4:6d:2b:
e8:74:d7:5e:77:93:a4:6a:16:c3:ef:63:6c:e1:74:
6f:4d:7b:6f:0c:e5:d6:22:3b:cb:6d:22:a3:0b:64:
4f:cb:78:12:0b:5f:e7:e2:2e:3a:20:45:01:9e:c6:
96:03:60:02:1a:10:8e:eb:18:6e:02:e7:48:b4:79:
9c:fd:d2:35:fb:ff:33:2e:7a:4d:e4:63:b8:2c:b9:
c2:8e:6d:d4:5a:9a:22:f0:30:98:11:2e:50:dc:3f:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E2:5C:77:14:22:07:10:31:DA:FB:DD:72:97:5B:62:68:86:0F:F0
X509v3 Authority Key Identifier:
keyid:D0:C3:F9:54:88:54:83:CF:12:A9:AE:D0:5C:CE:60:35:7F:A4:B4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/MOJcdxQiBxAx2vvdcpdbYmiGD_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.196.0/22
193.109.152.0/21
Signature Algorithm: sha256WithRSAEncryption
26:3a:b3:48:46:40:09:cb:58:a6:26:e4:9c:f7:d6:af:a6:b3:
50:2d:d7:7f:ea:c4:9d:1f:d1:ed:93:bc:5c:82:c5:eb:9a:53:
6a:34:a1:1f:5e:34:61:33:d0:01:7f:88:86:aa:cb:e2:22:9d:
67:db:8a:62:da:d4:7c:f7:e0:4b:b2:33:fa:62:e7:0e:de:0c:
94:e6:fe:d1:0c:67:e3:a5:1d:4c:a3:6e:bf:3f:92:c5:59:72:
1d:17:af:23:92:6f:7f:89:16:39:eb:cd:48:89:b1:69:3f:a9:
1e:77:de:93:f2:bf:f3:fc:96:7b:f1:58:96:7e:4e:bb:89:f2:
b3:7c:c2:3d:89:91:e0:24:53:25:1c:f8:52:60:57:8f:91:00:
39:78:ec:5f:9d:29:90:b9:f3:27:f2:2a:c9:38:f1:60:bd:ff:
62:c8:65:67:72:45:40:28:2e:4d:87:c6:23:45:57:74:9a:9c:
1c:87:aa:0d:cf:12:00:45:13:c6:8c:1e:c6:a5:be:77:98:44:
bd:30:ff:18:fd:b0:4a:8e:33:a0:55:cd:d5:1f:cd:30:f0:5a:
4d:2f:a0:b8:4f:05:25:a4:39:d5:60:7b:6b:65:d6:21:77:57:
fb:a2:69:35:38:3a:ae:a1:39:12:be:06:d0:71:87:30:f3:57:
a2:20:28:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:03 2026 by rpki-client