Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/MAzm6RNKt95HUjzZodbddhW1wQg.roa
File: MAzm6RNKt95HUjzZodbddhW1wQg.roa (raw, json)
Hash identifier: xjFjmydwLTdUCXAAyipWTke8mO8XCtF0GMsZOoi8zCY=
Subject key identifier: 30:0C:E6:E9:13:4A:B7:DE:47:52:3C:D9:A1:D6:DD:76:15:B5:C1:08
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A00BE760920E6788609934F7D2B1A6B599
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/MAzm6RNKt95HUjzZodbddhW1wQg.roa
Signing time: Sun 16 Aug 2026 18:48:27 +0000
ROA not before: Sun 16 Aug 2026 18:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214480
IP address blocks: 2a0e:4001:a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0b:e7:60:92:0e:67:88:60:99:34:f7:d2:b1:a6:b5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 16 18:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=300ce6e9134ab7de47523cd9a1d6dd7615b5c108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:78:6d:26:b8:41:90:19:a0:6f:53:34:f3:
55:e6:83:ec:f8:63:49:ca:83:17:0a:40:9b:b0:4c:
05:9b:49:cd:12:32:b9:b6:00:e7:02:cb:e3:2e:5c:
bb:0f:ca:ac:61:45:ab:a3:bc:a7:c7:57:39:46:24:
23:f3:31:d9:f9:d0:47:d1:ab:fe:64:1d:07:cb:67:
00:dd:35:95:d6:c6:20:17:18:21:0f:5d:00:13:6a:
2b:70:3f:f1:5e:bd:ec:cc:ee:d5:56:a6:7b:9a:4a:
29:a2:44:1c:62:e1:94:e8:9c:39:40:06:fa:af:99:
4f:fd:7d:ff:48:8f:94:9f:3f:97:ed:90:8c:66:37:
64:c9:3e:53:79:3d:c1:51:c2:15:41:f4:f9:6d:59:
90:dc:e7:f2:f7:38:cc:d9:2c:5a:4d:7d:f3:15:61:
3a:70:ef:47:b5:7f:d3:43:18:bd:63:6b:54:6f:d5:
1a:a6:c9:e5:ce:10:b7:48:17:2f:ce:7f:0a:be:9a:
54:59:85:71:05:47:b1:71:a4:1e:48:0f:be:66:7f:
cd:52:37:d7:b5:23:05:26:e7:29:e6:b8:20:0e:58:
46:b9:5e:f6:61:47:75:4c:f8:ae:a6:2c:ca:39:cf:
f6:a2:a2:9b:86:f5:e9:97:80:d4:ec:72:0d:58:e1:
71:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0C:E6:E9:13:4A:B7:DE:47:52:3C:D9:A1:D6:DD:76:15:B5:C1:08
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/MAzm6RNKt95HUjzZodbddhW1wQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:a00::/40
Signature Algorithm: sha256WithRSAEncryption
de:7c:c7:2a:a9:6c:50:55:f0:bc:c8:c0:37:dd:68:e3:f4:f0:
b1:fa:b9:42:06:8b:8a:c7:fd:a1:6a:eb:0c:a1:16:5e:a5:36:
be:b7:6c:79:42:da:ce:92:ed:f3:2c:8b:be:63:89:0a:7d:89:
38:07:86:5c:b3:e0:75:eb:db:61:49:90:ef:d3:aa:08:9e:bf:
7e:09:aa:5e:c5:8c:5d:7a:c8:9c:44:59:c2:33:0c:33:34:fa:
d7:16:01:d1:cb:74:23:63:8c:70:b6:40:02:4b:68:4c:41:d2:
77:be:24:3b:15:46:fd:e6:ed:67:47:50:42:2c:78:e0:0c:d4:
48:fa:c7:b7:c7:ed:5b:34:3c:ce:4a:2f:49:70:bc:b8:a5:88:
5d:f7:bb:c9:25:48:3e:89:ff:ef:4d:58:f6:35:8b:0e:d3:da:
3f:05:58:c5:95:a1:02:60:6a:59:d0:f1:b3:4b:e8:38:49:d5:
6a:c0:a3:d8:b7:82:f2:9a:12:04:2f:be:d8:9e:98:5f:cc:5b:
31:f8:4c:50:3d:f8:01:52:ab:b7:04:2f:a2:af:23:62:4b:33:
40:70:a5:cf:90:81:2f:ce:4e:ae:33:9e:c1:c6:62:30:a1:70:
4e:08:87:a6:f9:76:01:f1:1d:8c:b9:20:e4:28:12:96:37:f1:
a5:b5:ae:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:23 2026 by rpki-client