Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/MCv_Njd7Kt1jfUDJcMfP2Ew9zGA.roa
File: MCv_Njd7Kt1jfUDJcMfP2Ew9zGA.roa (raw, json)
Hash identifier: 8slM4ZyNMUTgbPryNd+oyqvRv0X2KMYBpAbZ2g9V2+s=
Subject key identifier: 30:2B:FF:36:37:7B:2A:DD:63:7D:40:C9:70:C7:CF:D8:4C:3D:CC:60
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 019EAFEAA7226C775C4859177C42F5D7D9E4
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/MCv_Njd7Kt1jfUDJcMfP2Ew9zGA.roa
Signing time: Wed 10 Jun 2026 05:04:11 +0000
ROA not before: Wed 10 Jun 2026 05:04:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214993
IP address blocks: 2a01:4ac0:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:af:ea:a7:22:6c:77:5c:48:59:17:7c:42:f5:d7:d9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Jun 10 05:04:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=302bff36377b2add637d40c970c7cfd84c3dcc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:da:b7:be:ff:cd:48:42:14:07:c5:0d:20:
4b:d8:56:e3:72:c8:72:33:80:a0:f2:e1:4e:21:99:
fc:cd:e1:73:18:87:2f:a4:73:0e:7d:49:bc:cf:2c:
9c:38:85:d6:0a:0f:41:82:90:5e:4c:74:e7:09:65:
7e:da:7f:bf:48:73:8c:70:5e:10:26:da:e5:4a:ef:
ca:c9:39:bd:ab:d6:aa:55:03:4e:0f:37:aa:6a:40:
3a:b3:f8:d5:9a:19:b1:d3:8b:32:a7:27:82:90:6c:
ad:f0:d7:90:44:3b:85:b0:ce:33:54:2e:87:1a:87:
ab:07:44:58:2a:77:8b:4e:c3:1c:76:e5:e9:cc:b8:
c2:3a:96:3b:3e:ad:7e:13:26:25:aa:6f:44:07:f8:
4d:3d:fe:e3:3e:ee:09:55:a8:21:de:1e:19:70:0c:
99:0c:32:f2:f0:97:20:b8:4e:8f:2e:c8:67:b8:a2:
73:53:20:e2:80:31:45:90:39:17:97:a7:d7:33:e1:
d9:17:b5:2e:08:59:b0:c8:84:d8:17:00:2a:0c:dc:
e6:13:47:cf:99:fd:d4:29:da:99:89:d6:8f:7c:e4:
14:e3:24:75:c9:60:d0:52:61:4d:4a:ad:dd:14:91:
54:32:ad:56:82:42:4c:4b:38:58:7d:d9:13:f9:a8:
31:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2B:FF:36:37:7B:2A:DD:63:7D:40:C9:70:C7:CF:D8:4C:3D:CC:60
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/MCv_Njd7Kt1jfUDJcMfP2Ew9zGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:4ac0:6::/48
Signature Algorithm: sha256WithRSAEncryption
66:f9:a9:cd:44:0a:7d:88:72:64:da:cb:a9:28:aa:94:90:1a:
22:ed:f1:6c:93:c8:56:7f:21:d1:87:a9:49:87:b5:5f:36:0f:
8a:f3:68:6e:8b:81:8b:cd:93:b1:26:e4:00:f9:d8:b2:55:39:
23:d5:03:83:bb:28:77:5d:d7:c4:5f:91:37:7f:02:31:5b:4c:
7b:ab:ea:c9:ef:83:7c:6d:11:fb:d6:7d:0f:26:02:e9:34:19:
10:6a:8a:c3:b6:61:78:2d:3e:8d:61:33:77:37:0e:61:a1:45:
04:4b:e7:b3:a1:00:d8:fa:72:40:04:6b:17:4c:b7:dd:22:33:
05:cc:2f:55:28:65:4c:19:fb:eb:34:07:d4:f9:c5:25:de:83:
99:24:47:0a:c8:d7:35:e5:60:db:e0:18:d4:b9:67:ae:7f:77:
38:8e:9e:50:80:6d:54:1b:a3:ec:fe:63:b0:f7:f7:58:9f:bf:
5d:f3:91:f6:dd:a2:e4:59:84:ff:ab:84:a1:02:93:e6:26:19:
f4:be:40:25:3f:25:43:4a:94:e3:c1:72:8f:cc:bd:90:bb:a7:
e8:bd:b7:70:c7:bd:86:a0:ed:2e:c5:30:42:81:f0:c4:5f:ee:
54:aa:32:f6:6d:18:cf:2f:f7:5f:3e:ad:bf:24:14:d7:62:11:
d0:67:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:31:04 2026 by rpki-client