Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/mecUULX9sUHweLt-QZALqk6-kXM.roa
File: mecUULX9sUHweLt-QZALqk6-kXM.roa (raw, json)
Hash identifier: qRZuY87QVRAG8iHxl3NIpayAPG20S7mo0UT4WhmAN1U=
Subject key identifier: 99:E7:14:50:B5:FD:B1:41:F0:78:BB:7E:41:90:0B:AA:4E:BE:91:73
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A1257E4994E3EA2198BA47D6B34A917708
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/mecUULX9sUHweLt-QZALqk6-kXM.roa
Signing time: Sat 10 Oct 2026 11:06:35 +0000
ROA not before: Sat 10 Oct 2026 11:06:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218456
IP address blocks: 2a0c:9a40:e170::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 18:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:7e:49:94:e3:ea:21:98:ba:47:d6:b3:4a:91:77:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 10 11:06:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99e71450b5fdb141f078bb7e41900baa4ebe9173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:e6:64:5d:be:8d:69:6c:30:e1:d9:32:b4:
fb:ff:44:88:c4:97:8c:c6:1d:26:82:07:3d:c0:72:
76:ef:95:39:2b:0f:34:05:59:2a:42:ac:cb:2c:9d:
47:02:8f:1d:87:f7:eb:69:62:ca:25:2d:64:da:0f:
5f:bd:c8:8f:e1:6e:5d:84:b6:ae:78:d6:9f:a3:87:
3e:b2:cf:f7:8c:93:46:5c:06:54:dc:c8:e2:8e:03:
24:2d:b2:5e:39:d5:a7:42:42:98:29:06:b6:85:b1:
c4:d1:3a:e8:de:68:6c:56:53:32:72:07:ee:dc:fd:
5b:55:66:66:dd:57:2c:3a:82:d5:87:63:cf:fd:53:
1f:8d:f8:b2:4d:ae:86:03:38:ca:aa:d1:a8:9c:a6:
12:83:63:f5:d1:32:31:c2:4e:24:01:e4:ab:dd:7a:
ba:0f:5c:6b:e8:53:9e:ef:21:d8:e9:b3:c1:7a:b0:
2d:1f:9d:5f:2e:86:99:da:b6:b6:85:80:c3:7f:93:
d0:19:79:e7:99:50:63:8b:f5:dd:37:69:55:00:88:
ef:f8:05:f1:70:87:00:58:70:12:2c:86:2e:05:71:
6e:a2:6c:1f:f3:f0:da:96:8f:d8:2e:88:6b:96:4d:
f4:ae:d7:cb:ee:69:7d:a3:00:06:9e:e5:46:5c:9d:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E7:14:50:B5:FD:B1:41:F0:78:BB:7E:41:90:0B:AA:4E:BE:91:73
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/mecUULX9sUHweLt-QZALqk6-kXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e170::/44
Signature Algorithm: sha256WithRSAEncryption
bd:30:bc:83:63:6c:38:d3:b4:da:d9:8b:68:07:cb:3b:5c:65:
8b:ce:b5:ed:5c:bb:55:a9:ee:61:39:94:51:3f:28:7b:4a:29:
cb:1c:de:9e:24:15:8c:9f:f6:92:16:72:20:61:b6:0c:3c:84:
7e:b0:f3:90:75:f6:0f:35:e6:07:fc:a1:d4:07:18:75:7d:75:
ac:55:9b:d4:c2:e2:12:60:5e:94:75:df:1d:28:dd:f7:15:ae:
e6:99:64:ba:07:01:5f:bc:9e:ed:d5:02:4f:9c:7a:de:a9:cf:
65:95:33:4e:d2:b3:24:bd:aa:e6:d8:e3:ad:aa:e2:dd:f9:ed:
8a:3b:59:7f:88:b7:25:dd:3d:e6:fa:f3:68:37:2d:05:ef:1d:
23:1f:36:60:46:c7:e5:f9:93:4d:03:26:75:c7:4b:bb:07:cc:
de:a5:10:8c:03:92:f9:7e:71:5a:68:6c:01:fb:32:7d:e1:87:
a6:8e:50:90:30:55:55:35:e7:28:24:ff:af:82:a2:30:88:58:
45:ee:5f:5f:be:e8:f2:c4:46:d5:d3:f4:85:12:e7:89:21:2c:
49:54:6d:03:a5:50:78:4e:0d:f3:1b:a3:0e:14:2e:8b:a4:0f:
a5:45:9b:dc:67:8e:f6:1b:e6:68:40:fb:b8:51:6e:38:d4:2e:
31:05:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 04:53:57 2026 by rpki-client