Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/mBXHe8xwrq_f8wh9M3ZXaWdq8f8.roa
File: mBXHe8xwrq_f8wh9M3ZXaWdq8f8.roa (raw, json)
Hash identifier: dI8S3nju8gYg5btIsxEkeYY9kQycBzwf9pyizszOFek=
Subject key identifier: 98:15:C7:7B:CC:70:AE:AF:DF:F3:08:7D:33:76:57:69:67:6A:F1:FF
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019F47F5E068DEF6B4334D5B1A346C419B64
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/mBXHe8xwrq_f8wh9M3ZXaWdq8f8.roa
Signing time: Thu 09 Jul 2026 17:38:43 +0000
ROA not before: Thu 09 Jul 2026 17:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214266
IP address blocks: 2a11:8d40::/29 maxlen: 29
2a11:9100::/29 maxlen: 29
2a11:d300::/29 maxlen: 29
2a12:700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e0:68:de:f6:b4:33:4d:5b:1a:34:6c:41:9b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jul 9 17:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9815c77bcc70aeafdff3087d33765769676af1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:17:56:6b:9a:3e:a1:b2:ee:8c:f1:2d:19:
37:a0:85:ac:6d:6d:99:4d:26:c4:6e:28:bb:15:1d:
35:67:83:14:10:33:e8:25:a1:dc:12:2e:36:2a:f2:
46:3e:64:f0:0f:d7:55:d1:da:c7:19:a8:df:67:57:
60:07:c3:ce:bb:5d:d6:aa:cc:af:50:83:9d:83:79:
b6:22:60:b3:9a:8e:54:5d:f5:0f:7a:c8:c7:10:51:
18:7a:f6:4f:4f:94:5f:a1:84:0e:6e:68:b8:92:6e:
cf:05:56:ae:a7:d6:97:80:41:13:cd:b0:66:f7:ff:
f2:12:22:4c:6d:e0:c7:ee:c0:55:7f:ff:9f:62:89:
97:94:5f:a5:2c:69:b0:1c:fe:89:bb:cd:aa:0f:15:
de:f6:f4:a1:e4:b7:e1:d7:3a:59:30:3c:1e:65:6d:
6d:d0:2b:93:45:a7:20:f7:fa:10:93:33:d6:7d:19:
fb:b7:78:1f:9c:76:a7:32:c7:0d:84:1c:ee:4c:af:
eb:cb:f5:c6:d9:22:3c:93:2c:ab:de:69:05:af:b2:
6e:a5:6a:c2:3a:4b:be:d1:ac:80:4e:bf:b5:9b:ec:
a9:65:32:05:e6:5b:82:5f:d0:a8:a5:65:af:2a:e8:
72:12:97:cc:dc:a4:e9:99:3a:d4:49:3f:1d:a2:ec:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:15:C7:7B:CC:70:AE:AF:DF:F3:08:7D:33:76:57:69:67:6A:F1:FF
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/mBXHe8xwrq_f8wh9M3ZXaWdq8f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8d40::/29
2a11:9100::/29
2a11:d300::/29
2a12:700::/29
Signature Algorithm: sha256WithRSAEncryption
43:4c:d1:8e:17:25:ae:9b:02:8c:1d:65:4f:59:87:39:f8:00:
0f:0f:14:11:5b:ec:3b:b6:f6:de:3d:9a:af:ab:9e:bc:2e:6e:
cc:f0:37:06:91:86:71:8b:2b:99:11:6d:04:07:cd:a4:00:23:
fd:25:14:5f:59:8c:3c:a3:d3:5a:10:14:b4:a6:f9:49:a4:bc:
7a:5d:d9:34:46:c5:9f:d3:5b:f2:63:da:5f:14:e1:09:7f:3f:
ac:f5:f1:4c:77:1c:3b:40:6c:47:ef:cd:8a:ac:56:3c:67:b8:
66:be:d5:a0:4a:03:4e:38:77:69:56:6e:81:07:2a:69:71:95:
7b:28:03:f3:0e:3d:9d:3d:48:8a:da:60:87:a2:09:1b:1b:24:
9f:51:52:53:d6:d0:c8:37:61:09:55:e5:0b:8d:28:ce:0c:8d:
f5:12:f9:66:d2:04:49:0a:00:23:32:78:b0:6c:53:1e:96:2a:
da:05:ee:95:d6:c5:7b:f7:87:de:c3:c3:c4:bc:34:52:9e:65:
79:84:89:d5:b2:8d:19:1b:53:b1:91:b4:34:f3:69:22:47:ca:
ff:71:9b:8b:18:b9:fa:f0:6d:ed:dc:44:4a:71:5c:4e:5d:5d:
61:11:54:57:1f:96:2c:8a:ba:da:14:e4:61:d3:ab:07:f4:07:
ff:39:a1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 16:04:29 2026 by rpki-client