Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/MUHAo43ATksR-SLPdrPtyQpVw8I.roa
File: MUHAo43ATksR-SLPdrPtyQpVw8I.roa (raw, json)
Hash identifier: 8g6eM7AQ3CGLVzNv2I7I6eXU5p8aStR5V5IVK5ftuSY=
Subject key identifier: 31:41:C0:A3:8D:C0:4E:4B:11:F9:22:CF:76:B3:ED:C9:0A:55:C3:C2
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23683665157841B05C7584A36DED99B6
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/MUHAo43ATksR-SLPdrPtyQpVw8I.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47157
IP address blocks: 2a10:4646:12::/48 maxlen: 48
2a10:4646:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:36:65:15:78:41:b0:5c:75:84:a3:6d:ed:99:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3141c0a38dc04e4b11f922cf76b3edc90a55c3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:2b:ad:8b:76:99:b7:52:e2:a6:ba:70:56:
14:ec:d2:b1:59:32:92:a4:24:ed:4e:d6:34:58:c6:
d9:be:14:ac:23:fd:8c:6f:f5:11:46:aa:54:19:21:
dc:c5:c3:c6:fa:0e:77:08:49:ac:8d:e7:83:11:1e:
b2:6a:f4:de:35:ba:00:57:1a:e3:fd:f0:d8:0b:f5:
d8:55:db:40:b5:24:72:78:6a:ae:af:d1:90:bd:93:
6d:fa:72:30:11:be:b4:8a:4b:90:da:20:38:43:77:
1a:6b:61:81:49:d9:b4:4c:45:fc:12:56:53:00:0f:
39:64:99:c6:e6:96:09:24:89:83:85:6b:65:e8:31:
e7:af:16:d6:27:36:62:80:31:e8:1a:e5:ff:02:69:
05:29:4a:37:57:4a:54:c1:09:1c:05:f3:c1:eb:29:
0e:3f:44:f6:1a:e7:a7:bb:9f:73:20:d5:94:de:89:
f3:2a:f1:bd:0c:f3:1a:8a:62:ec:43:b7:8c:87:25:
dc:91:66:22:e9:03:97:ee:5f:6b:c0:67:3c:97:2d:
9a:53:de:62:79:b0:48:2f:9e:50:77:ac:99:5a:a9:
0f:e8:7c:b3:21:c0:e4:ff:f6:71:5b:32:fe:d6:42:
5a:d5:e8:9f:3d:e1:85:c2:96:17:6b:8c:0a:5b:0f:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:41:C0:A3:8D:C0:4E:4B:11:F9:22:CF:76:B3:ED:C9:0A:55:C3:C2
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/MUHAo43ATksR-SLPdrPtyQpVw8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:12::/47
Signature Algorithm: sha256WithRSAEncryption
6f:39:cf:70:62:65:76:18:c4:f1:b5:6b:91:4a:06:17:34:55:
56:6f:6f:2b:e6:f4:21:1d:ee:ab:9c:bd:3d:13:65:05:a8:92:
1b:c8:6b:10:5e:6c:5c:72:92:51:ed:38:13:ba:ab:c5:f5:5c:
0e:c6:5f:a8:3b:ea:83:ed:45:bd:2b:91:d5:33:b5:34:a6:45:
de:2b:81:cc:5d:c4:89:80:bf:40:f3:51:ef:0d:fa:2f:b4:fc:
d8:a7:04:7c:3d:4b:d7:87:8c:22:8e:ef:db:53:b8:ef:67:f4:
89:65:15:a2:ae:da:f1:e0:01:b5:41:fd:e1:d0:73:ad:51:f4:
ec:61:18:a3:db:1f:10:8a:9d:95:3a:a6:aa:ea:ef:77:30:13:
ac:1d:48:70:3b:40:55:bd:c4:f4:f3:67:5f:52:90:b5:f4:19:
8f:b7:65:d6:c8:09:0b:35:15:49:2f:ee:4a:5a:00:85:1b:7e:
ff:92:09:f9:4a:e9:99:13:c5:dc:8e:54:ce:40:f7:44:7a:7d:
0f:bb:b0:c8:47:9f:d7:04:8a:3c:c5:d5:c2:94:4e:33:ee:d7:
4f:6e:4e:46:08:fb:aa:c0:0b:40:e7:ae:0f:45:91:03:f4:ed:
af:b1:9b:f9:5b:00:9e:fe:6a:81:fd:26:87:b7:ae:13:54:d9:
9d:63:9e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:57:32 2026 by rpki-client