Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/MW-Of09W86VTd-ehIdYpnjmPXXs.roa
File: MW-Of09W86VTd-ehIdYpnjmPXXs.roa (raw, json)
Hash identifier: LD0GodrBLFRUB6lFsPKkTSv+4sIk7vBheqeA3m5nPOo=
Subject key identifier: 31:6F:8E:7F:4F:56:F3:A5:53:77:E7:A1:21:D6:29:9E:39:8F:5D:7B
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019F228F4E435F11B32C5BF71C5919DDF889
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/MW-Of09W86VTd-ehIdYpnjmPXXs.roa
Signing time: Thu 02 Jul 2026 11:20:44 +0000
ROA not before: Thu 02 Jul 2026 11:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9312
IP address blocks: 2a12:a300::/29 maxlen: 48
2a14:1f80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:8f:4e:43:5f:11:b3:2c:5b:f7:1c:59:19:dd:f8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jul 2 11:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=316f8e7f4f56f3a55377e7a121d6299e398f5d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:b3:1a:7c:ad:c0:17:2d:08:3c:f7:90:e7:
5d:61:37:fc:49:86:89:fc:bd:76:3f:89:cc:76:81:
f1:aa:7b:ea:fa:73:ba:91:61:7d:ab:e2:54:f9:e0:
47:54:82:8a:65:0e:e0:0a:82:74:70:64:4b:7d:5f:
ab:79:2d:c9:d3:15:50:d9:09:2b:2c:24:28:da:eb:
f8:61:01:a0:40:8e:7a:3b:a7:08:62:74:b1:70:46:
0d:bd:c0:6a:3f:c7:fb:54:27:df:e9:96:33:c5:36:
9b:4c:bb:09:e6:e6:58:90:05:37:6d:69:dd:1a:22:
97:1a:af:1c:4a:8e:fb:d7:69:12:87:51:c6:7d:a0:
1f:79:6a:ed:2c:85:95:b8:75:8d:5e:69:ba:07:f8:
3b:04:ea:45:48:a6:b3:6e:b3:97:68:cd:d5:d1:f8:
3e:68:88:34:6e:5d:6d:26:73:fc:a6:62:2c:52:25:
51:cb:55:12:2c:72:e3:ec:bd:76:39:45:a3:03:2d:
aa:47:e8:b0:16:00:01:77:4f:a2:9f:c0:98:f8:9b:
6d:40:e2:4e:d8:42:0f:fd:3a:1e:7e:01:82:ef:3d:
41:d9:54:96:0d:08:d4:57:69:d5:5e:49:35:ae:a9:
66:07:2d:34:e9:d3:ba:de:40:43:a6:4f:79:80:54:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6F:8E:7F:4F:56:F3:A5:53:77:E7:A1:21:D6:29:9E:39:8F:5D:7B
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/MW-Of09W86VTd-ehIdYpnjmPXXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a300::/29
2a14:1f80::/29
Signature Algorithm: sha256WithRSAEncryption
48:1b:ae:e5:de:ef:cd:3e:09:9f:a2:55:84:63:29:43:d2:07:
eb:3b:22:ac:1c:03:fd:a3:8a:b0:82:dd:2a:11:ca:03:30:ce:
47:e7:57:37:57:e9:3d:cd:12:78:66:18:0f:b1:09:bf:60:6d:
b1:73:bb:d5:fe:f5:9f:32:0c:08:05:d1:2b:43:41:80:10:88:
ac:9f:6d:de:03:b1:75:59:a6:c8:e0:3a:40:08:69:5c:67:05:
94:06:4b:0e:53:72:e9:92:92:06:fc:6e:3d:82:63:b1:af:36:
e0:89:53:cf:14:7b:6b:21:ac:69:cf:57:c0:82:1f:9d:5c:99:
1e:ef:c0:d7:55:03:b9:77:77:45:61:02:aa:6c:0c:79:93:01:
86:63:6b:8d:a0:98:49:77:e5:8a:8f:63:b4:c6:ee:01:63:47:
c8:2d:01:d4:63:40:ae:a7:a9:9b:46:3b:f8:99:6c:e2:d1:25:
a8:b8:8c:a7:52:5a:d8:79:da:fc:7f:d8:27:0e:07:f0:55:3a:
3e:61:f3:38:13:4a:b9:26:d0:24:ee:4d:a4:ab:37:b5:d3:32:
4d:36:ad:52:58:eb:4a:f2:86:3e:0b:bf:5e:c5:ad:90:6c:e0:
33:86:6f:7b:70:1d:6a:9e:03:0b:a9:4e:07:20:f4:3f:b2:cb:
39:cb:b1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:12 2026 by rpki-client