Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/MuWQfO3mJklCU15dVw9qdJGgipk.roa
File: MuWQfO3mJklCU15dVw9qdJGgipk.roa (raw, json)
Hash identifier: mwuJdo4EA83qSqYe63WUHWpcqAseygQza4cwnZrRl6Q=
Subject key identifier: 32:E5:90:7C:ED:E6:26:49:42:53:5E:5D:57:0F:6A:74:91:A0:8A:99
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 019F95111C2E923574768C0FBECAB94DE16F
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/MuWQfO3mJklCU15dVw9qdJGgipk.roa
Signing time: Fri 24 Jul 2026 16:59:14 +0000
ROA not before: Fri 24 Jul 2026 16:59:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212271
IP address blocks: 2a05:4140::/29 maxlen: 48
2a05:4140:3::/48 maxlen: 48
2a05:4140:4::/48 maxlen: 48
2a05:4140:8::/48 maxlen: 48
2a05:4140:9::/48 maxlen: 48
2a05:4140:10::/48 maxlen: 48
2a05:4140:15::/48 maxlen: 48
2a05:4140:28::/48 maxlen: 48
2a05:4140:30::/48 maxlen: 48
2a05:4140:31::/48 maxlen: 48
2a05:4140:32::/48 maxlen: 48
2a05:4140:33::/48 maxlen: 48
2a05:4140:34::/48 maxlen: 48
2a05:4140:36::/48 maxlen: 48
2a05:4140:37::/48 maxlen: 48
2a05:4140:48::/48 maxlen: 48
2a05:4140:50::/48 maxlen: 48
2a05:4140:100::/40 maxlen: 48
2a05:4140:187::/48 maxlen: 48
2a05:4140:190::/48 maxlen: 48
2a05:4140:300::/40 maxlen: 40
2a05:4140:400::/40 maxlen: 48
2a05:4145::/32 maxlen: 32
2a05:4147::/32 maxlen: 32
2a11:e100::/29 maxlen: 48
2a11:e103::/32 maxlen: 32
2a11:e107::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:11:1c:2e:92:35:74:76:8c:0f:be:ca:b9:4d:e1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jul 24 16:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32e5907cede6264942535e5d570f6a7491a08a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:56:3c:1a:c8:96:a3:0c:91:0e:1c:a6:a4:
44:3a:7f:01:b9:6d:a2:fb:29:b0:ae:37:17:68:ed:
7a:49:0a:81:99:90:3a:a2:65:39:b6:fd:9a:6d:34:
62:f5:08:7a:29:77:b1:84:07:f0:09:06:8c:5a:57:
4b:fd:1b:ff:5e:09:aa:a9:e3:7c:84:8b:d0:27:c2:
a4:f1:39:aa:50:7c:ad:1e:b9:89:86:37:b4:3d:ba:
e5:d1:ae:2e:fd:f5:7b:9f:dd:a0:5b:d5:85:7f:9d:
11:ca:54:fb:58:3d:ca:2c:08:12:ef:51:6a:7b:2e:
17:36:53:ca:a1:ec:f1:a3:46:68:f7:08:bc:77:24:
00:91:29:05:14:d4:9f:24:1a:97:9c:3a:ef:90:fd:
ab:8b:54:3d:24:68:77:22:91:81:bb:36:3b:27:e7:
59:cc:44:0c:df:c6:d5:e8:73:9b:ba:28:6b:4b:4c:
c4:a6:a6:d9:d8:05:35:3e:c8:35:9d:9c:7e:a5:68:
5c:39:ce:bb:79:c4:4e:20:68:30:3c:eb:24:cb:43:
4d:6a:e6:fc:4f:c0:56:f6:0e:5e:61:56:2e:9b:9e:
60:5f:c2:7f:0e:08:a9:1a:a2:bf:97:53:b1:b2:68:
c0:78:21:1c:8a:89:3b:e2:89:5e:a6:3b:e8:f5:fb:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E5:90:7C:ED:E6:26:49:42:53:5E:5D:57:0F:6A:74:91:A0:8A:99
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/MuWQfO3mJklCU15dVw9qdJGgipk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140::/29
2a11:e100::/29
Signature Algorithm: sha256WithRSAEncryption
62:c6:fe:d4:1f:13:5c:82:09:61:87:96:4a:3e:a4:62:f6:11:
36:f9:30:48:c7:f4:74:f3:f0:ba:fc:8e:fe:bc:52:82:eb:a8:
e9:18:6f:65:5a:eb:49:93:cc:ad:fd:d0:28:0b:c3:f0:5e:c3:
e0:45:e5:21:5c:8b:9b:79:83:41:b6:7f:bf:e1:f6:9b:e3:5a:
3b:6d:1f:58:20:14:b3:6f:ca:bd:d3:95:fc:0b:5f:44:98:07:
4b:46:02:fb:d3:42:05:99:04:b3:0e:e7:29:11:b5:da:0a:2f:
29:89:08:c3:64:83:e9:1b:41:8f:46:7e:fa:ce:14:32:b1:4e:
97:21:e8:03:71:df:4e:75:65:33:a8:0c:dd:a9:99:30:4d:8d:
a5:17:54:4c:a2:00:46:25:0e:26:22:b6:be:bd:69:44:e0:d2:
76:b9:81:17:ef:20:bc:69:8b:cb:78:ce:52:17:18:b1:a2:15:
7f:fc:f6:2a:63:0e:b3:1e:38:99:97:5a:a0:5f:b1:fa:04:d8:
89:90:91:9a:0c:c4:22:79:30:a5:ae:67:d8:4d:d7:eb:ff:b2:
45:90:3f:51:b7:84:00:e9:13:71:2b:77:f5:76:31:76:51:d4:
42:ff:71:0e:53:74:e5:29:dc:1d:0c:63:1a:45:16:7a:a8:a2:
14:ac:b7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 19:19:14 2026 by rpki-client