Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/mZsMjeGJt8TaL8eFR35V4EKM33Q.roa
File: mZsMjeGJt8TaL8eFR35V4EKM33Q.roa (raw, json)
Hash identifier: 0gVI6qOGHOIUsKLrb9SUn6L3UGsctxQ/7GY/vbtrY8g=
Subject key identifier: 99:9B:0C:8D:E1:89:B7:C4:DA:2F:C7:85:47:7E:55:E0:42:8C:DF:74
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 019FFA3EDBB01B8559C342EA634069D0B3D6
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/mZsMjeGJt8TaL8eFR35V4EKM33Q.roa
Signing time: Thu 13 Aug 2026 08:30:51 +0000
ROA not before: Thu 13 Aug 2026 08:30:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20546
IP address blocks: 203.56.112.0/23 maxlen: 23
203.56.114.0/23 maxlen: 23
2a14:3e40::/32 maxlen: 32
2a14:3e44::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:3e:db:b0:1b:85:59:c3:42:ea:63:40:69:d0:b3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Aug 13 08:30:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=999b0c8de189b7c4da2fc785477e55e0428cdf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:c0:13:0a:fc:2c:79:75:15:50:22:29:1c:
22:e7:2c:36:a6:6c:a7:ba:01:98:ea:38:85:c7:d2:
48:ef:5b:0a:1d:92:10:4d:fa:79:d0:b9:74:47:ea:
52:38:b2:c1:9d:fd:c1:4f:23:fe:9d:ec:3d:6f:ce:
64:21:43:11:ec:2f:07:42:94:00:4f:36:a1:95:69:
87:95:8b:aa:f2:f7:29:4a:7d:cc:01:db:e0:93:48:
0d:02:d7:2a:3a:50:b7:b6:8c:f1:9d:6d:7f:71:ad:
92:c8:3f:d6:b1:4c:01:60:fd:0d:4e:f1:08:f8:c5:
90:38:d8:75:c5:61:0e:2f:58:56:2d:3a:dd:f6:e2:
a3:c0:2c:00:64:20:8d:f0:9f:50:77:fc:06:00:df:
6b:c7:47:f6:c2:d6:be:ca:7f:30:41:37:f8:22:ad:
b4:7b:53:f5:65:95:7f:dd:0f:d6:0f:58:21:24:87:
b9:4f:b5:82:a5:21:0f:ca:9a:a1:13:dd:d2:67:73:
1c:3c:ed:2c:c2:3b:fe:50:f9:9e:46:a9:55:c4:2b:
54:05:17:74:37:37:06:fc:1a:7e:d0:1d:14:98:79:
fb:bd:f9:c2:a5:8b:b9:c1:c3:eb:3f:c2:81:73:5c:
2b:ce:af:a2:8c:79:6b:c2:37:c6:ed:7f:c7:ab:80:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9B:0C:8D:E1:89:B7:C4:DA:2F:C7:85:47:7E:55:E0:42:8C:DF:74
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/mZsMjeGJt8TaL8eFR35V4EKM33Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.56.112.0/22
IPv6:
2a14:3e40::/32
2a14:3e44::/32
Signature Algorithm: sha256WithRSAEncryption
03:a6:d9:91:c4:8e:15:96:54:87:8d:66:70:45:dd:d1:da:a2:
62:1e:c4:5a:fa:1f:d7:70:67:b6:c8:e3:a7:ad:95:bc:a4:d8:
7d:b2:b1:c7:eb:07:c9:6b:d6:df:3c:62:e3:11:71:7a:90:02:
98:1d:06:ff:c3:11:68:08:30:8e:84:0a:34:07:36:c6:83:1e:
d2:a4:46:eb:24:a3:0f:36:6e:23:d4:e5:b6:a4:6e:58:48:b5:
64:94:e3:8c:e8:bf:a8:31:9e:87:31:b2:05:c3:c1:07:fa:95:
00:bb:bf:45:5f:65:93:1f:ea:1a:94:7b:28:23:b0:f0:e4:98:
77:9b:5b:ba:30:8b:23:18:47:88:bb:d7:7d:54:2f:be:30:b3:
c1:f1:56:2a:2f:ca:7f:02:bd:18:7f:e3:35:20:80:15:b9:71:
fd:04:c9:21:e0:6e:72:c4:c0:71:4a:f6:17:6b:3b:15:fd:e5:
79:cc:b5:9f:cd:78:b3:d9:73:85:e6:3b:19:cf:38:60:9a:61:
04:7c:12:e4:43:ca:9d:49:dd:2d:c1:ee:70:2c:38:a9:c7:b8:
a6:c4:44:e6:f8:15:db:73:2d:d5:c8:cd:a3:d9:e8:3c:b9:41:
28:26:07:17:a9:74:01:7a:ea:55:26:a0:75:04:ca:ce:04:47:
3a:f4:29:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:55:23 2026 by rpki-client