Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/MXrKlHp2j8CNiQXyFme7qMn1oSw.roa
File: MXrKlHp2j8CNiQXyFme7qMn1oSw.roa (raw, json)
Hash identifier: K/tqPJnyc9iPnmAvPLHSuRK426Oc8HKnyS7m0/Cf1nc=
Subject key identifier: 31:7A:CA:94:7A:76:8F:C0:8D:89:05:F2:16:67:BB:A8:C9:F5:A1:2C
Certificate issuer: /CN=ce8f4ad9276744802e6a3a06256cd4750c1a755a
Certificate serial: 01A1532E803856ED3F616641723BA99B1EBE
Authority key identifier: CE:8F:4A:D9:27:67:44:80:2E:6A:3A:06:25:6C:D4:75:0C:1A:75:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo9K2SdnRIAuajoGJWzUdQwadVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/MXrKlHp2j8CNiQXyFme7qMn1oSw.roa
Signing time: Mon 19 Oct 2026 08:01:58 +0000
ROA not before: Mon 19 Oct 2026 08:01:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 193.168.165.0/24 maxlen: 24
2a12:62c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo9K2SdnRIAuajoGJWzUdQwadVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:2e:80:38:56:ed:3f:61:66:41:72:3b:a9:9b:1e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8f4ad9276744802e6a3a06256cd4750c1a755a
Validity
Not Before: Oct 19 08:01:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=317aca947a768fc08d8905f21667bba8c9f5a12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:ed:db:86:56:5e:36:fc:1f:31:fc:4b:f5:
65:d1:07:b7:0d:39:3e:53:63:7b:57:e1:bd:a4:96:
e9:e0:f0:16:ec:ea:b4:46:7a:f5:0c:b9:6c:a6:4a:
7f:fc:35:a1:6f:ed:c2:a2:7c:2e:65:8f:bf:35:7f:
19:2a:58:9a:6d:c1:84:7c:c4:8e:7a:f8:7a:d0:ab:
d7:7c:81:af:ea:b0:e2:4a:1a:36:0a:e8:a0:40:7a:
24:df:0b:f7:09:a6:45:33:5d:58:a9:a4:9a:2e:23:
78:f8:cd:87:e1:0f:93:75:9b:02:0d:04:3b:c6:78:
f2:e8:a4:36:2b:3c:c3:df:bd:1c:4c:c8:11:4d:8f:
c4:be:b3:a5:ee:c2:13:fd:7f:b7:03:fc:9c:f7:2f:
7f:e7:ed:6e:87:90:55:2c:75:56:a9:11:b0:93:6a:
3c:d4:04:d8:53:1b:10:4e:51:7f:1d:12:7b:33:04:
f6:5a:e6:cd:ae:8a:2e:33:da:8d:56:01:9b:ed:30:
d9:f3:de:bb:e5:ee:c4:70:cc:22:21:e8:c4:b3:f2:
b2:bc:c7:57:20:71:dd:27:98:9d:b2:2e:55:e0:3f:
37:c1:6d:7a:e0:0b:e3:d6:4b:81:38:7c:f3:cf:16:
40:0c:a2:6f:2f:46:61:e0:7b:eb:12:42:64:7e:89:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7A:CA:94:7A:76:8F:C0:8D:89:05:F2:16:67:BB:A8:C9:F5:A1:2C
X509v3 Authority Key Identifier:
keyid:CE:8F:4A:D9:27:67:44:80:2E:6A:3A:06:25:6C:D4:75:0C:1A:75:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo9K2SdnRIAuajoGJWzUdQwadVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/MXrKlHp2j8CNiQXyFme7qMn1oSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.165.0/24
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
99:d6:79:15:6c:99:12:e4:8f:a9:9e:84:1c:ae:72:2a:73:c4:
60:72:e0:f6:ab:38:d9:4c:4e:a2:4e:6f:df:b1:76:3c:47:f2:
0b:e6:5f:e3:cd:f0:3e:5b:85:ca:25:3b:6d:ad:37:a8:76:17:
82:52:7c:95:ba:86:17:ba:60:9f:16:37:aa:a6:91:9b:4d:92:
46:d5:0a:d8:b0:6f:cb:16:f9:d5:7a:f1:96:01:d1:80:3c:0c:
8d:c6:36:a3:3c:93:b1:21:69:cf:89:23:55:4a:5b:a7:ff:c4:
60:08:c6:b0:9d:0f:68:6a:13:82:2d:7d:39:1d:9e:49:d5:20:
d3:a1:b5:52:55:ea:bf:82:91:e7:18:2b:e8:42:90:c8:2a:6b:
be:c8:73:12:d9:77:71:d2:28:75:2e:bf:51:9b:d3:0f:0d:9b:
35:20:71:f8:82:45:d7:ea:68:ac:b5:73:c0:e0:f2:d1:3d:26:
bc:c2:31:ba:55:f4:ef:e5:b7:61:0c:47:e9:c5:4b:22:3d:d9:
db:a1:41:40:b8:ff:6a:36:42:43:36:7e:56:24:85:8c:93:03:
ff:5a:4c:a0:98:7a:b5:7c:b1:c3:35:93:26:dd:4e:91:ce:67:
c7:08:e7:08:d5:9c:63:68:af:f3:3a:0c:5e:77:bc:09:cf:2b:
b1:4e:e3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:11:00 2026 by rpki-client