Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mn8yP_Q-VNtvbHO6Zjf9krBkTJs.roa
File: mn8yP_Q-VNtvbHO6Zjf9krBkTJs.roa (raw, json)
Hash identifier: H80VzWafa/c2XIxbyeWQSsokF5QWiIXe6c/U/b/NRkw=
Subject key identifier: 9A:7F:32:3F:F4:3E:54:DB:6F:6C:73:BA:66:37:FD:92:B0:64:4C:9B
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A14364750EA5521AE936DE058776C33411
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mn8yP_Q-VNtvbHO6Zjf9krBkTJs.roa
Signing time: Fri 16 Oct 2026 06:26:59 +0000
ROA not before: Fri 16 Oct 2026 06:26:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a13:c240::/29 maxlen: 29
2a13:e040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:64:75:0e:a5:52:1a:e9:36:de:05:87:76:c3:34:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 16 06:26:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a7f323ff43e54db6f6c73ba6637fd92b0644c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:cf:12:12:3d:b9:22:7a:32:f7:ed:c9:1c:
35:7e:6b:8f:5d:b5:db:cb:87:54:f1:c4:1b:f9:db:
e8:a4:3f:63:8d:26:d9:d6:34:65:1a:9c:28:af:a5:
85:03:2b:5b:9b:40:2d:1e:43:4e:f8:dd:29:fe:aa:
1d:b8:41:2f:57:39:11:2e:a8:15:c7:44:47:d4:73:
7a:cf:37:14:c8:f7:16:15:62:34:6f:b4:68:52:66:
02:ae:09:e5:59:41:ab:2d:40:ae:8a:d7:8a:e3:7e:
73:db:a8:64:ce:c4:f7:40:e4:07:b1:08:83:9a:1a:
50:4e:37:04:b0:b7:82:af:24:2f:67:85:d4:ce:22:
fe:03:c2:d4:b5:ef:a5:ad:39:74:93:bc:92:d6:6e:
44:ed:c2:74:0d:ed:d5:c1:59:69:1c:0b:5a:33:cb:
a7:25:00:18:ca:60:dd:3f:75:12:0c:08:56:55:8b:
4f:f1:f1:6e:67:f8:e7:32:e7:d6:7c:b5:4d:4f:81:
77:4d:80:c1:31:82:93:94:e2:a5:d1:c0:ce:f8:02:
84:8b:1d:6d:98:5a:65:7b:88:03:05:fa:21:fc:ab:
b0:29:20:c1:20:a5:f0:f9:d1:43:e0:cc:0f:b5:65:
3e:4b:85:a9:2c:fb:63:1a:47:a8:3d:1e:e3:26:de:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7F:32:3F:F4:3E:54:DB:6F:6C:73:BA:66:37:FD:92:B0:64:4C:9B
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/mn8yP_Q-VNtvbHO6Zjf9krBkTJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c240::/29
2a13:e040::/29
Signature Algorithm: sha256WithRSAEncryption
db:13:bd:d3:df:00:21:a4:ff:78:ae:47:5e:e1:68:bf:9f:8e:
0f:31:a5:6f:71:57:ba:e0:70:06:2d:3a:d9:df:ff:8d:39:75:
09:d8:33:9d:b0:2d:fd:7d:d5:02:02:66:d9:55:47:70:4f:f3:
97:66:35:c9:9d:bb:47:c5:72:f3:26:89:46:4f:1d:cf:8a:02:
48:38:40:7c:bf:18:85:32:9f:de:0c:22:96:d1:c3:10:f2:c6:
9c:71:78:3d:65:a3:e8:4a:77:88:6d:a2:c5:c2:df:9e:cf:df:
82:15:a4:88:3e:ca:2e:e6:aa:b4:a7:92:b2:63:8e:b7:88:10:
d2:4a:4b:f7:6d:1e:b4:b2:3c:bb:35:9e:28:bd:4f:69:1d:a2:
c1:44:66:52:35:96:e7:e2:25:9d:e7:2b:8a:f2:57:cb:45:94:
e0:4c:a6:3b:76:0e:5a:08:7d:81:25:b3:29:47:fd:00:01:13:
5b:8f:f4:bb:f6:48:7e:8d:c5:ab:38:94:50:f9:2d:35:ac:29:
8d:10:c0:a0:a0:01:27:e0:4c:75:e0:40:53:23:6b:74:77:20:
d3:28:2e:82:35:33:b2:02:6e:a1:c0:d9:8b:33:28:33:d6:db:
98:50:af:92:72:f8:33:da:d2:a9:7a:31:04:34:56:13:ea:fa:
cf:37:47:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:24:40 2026 by rpki-client