Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/mCHsCP7Hw-vDINkHUBUlMpgm4kc.roa
File: mCHsCP7Hw-vDINkHUBUlMpgm4kc.roa (raw, json)
Hash identifier: I5GM+zycIKl3V+6KCvVt4wyzrZN/yulSVnyaG6oiE7g=
Subject key identifier: 98:21:EC:08:FE:C7:C3:EB:C3:20:D9:07:50:15:25:32:98:26:E2:47
Certificate issuer: /CN=f2c7999df8fb353f4496a98000ea39d554eb1ba2
Certificate serial: 019F236928C95522F96ADE8C6317B298756C
Authority key identifier: F2:C7:99:9D:F8:FB:35:3F:44:96:A9:80:00:EA:39:D5:54:EB:1B:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8seZnfj7NT9ElqmAAOo51VTrG6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/mCHsCP7Hw-vDINkHUBUlMpgm4kc.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41107
IP address blocks: 2a03:bc40::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/8seZnfj7NT9ElqmAAOo51VTrG6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/8seZnfj7NT9ElqmAAOo51VTrG6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8seZnfj7NT9ElqmAAOo51VTrG6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:28:c9:55:22:f9:6a:de:8c:63:17:b2:98:75:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2c7999df8fb353f4496a98000ea39d554eb1ba2
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9821ec08fec7c3ebc320d907501525329826e247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:89:ae:49:25:d2:0d:61:ca:d9:48:37:23:95:
b4:b1:d7:53:60:90:57:3e:64:cb:db:63:fc:57:b7:
42:0d:c3:e3:ef:fa:bd:28:1a:0d:38:0e:a7:ee:2a:
02:46:48:6b:86:51:91:39:bd:b0:9c:fc:30:58:48:
96:a6:f4:e0:59:5d:c5:5e:8b:f8:32:31:0b:03:45:
8a:ad:98:a7:16:e1:fd:d0:e0:c8:4b:ff:d1:1c:2d:
ce:e1:cb:3b:d7:13:ea:4c:c5:31:56:9e:a9:77:95:
66:0b:0e:3e:33:23:cb:ac:2a:8c:46:dd:4c:3c:8f:
94:d0:21:18:e1:1c:2e:4c:78:d6:28:cb:1b:b0:d4:
bb:c5:e4:b2:4e:b9:b5:37:1f:7f:4a:6e:b3:38:75:
9d:e1:f8:cb:65:c7:08:9d:9d:6c:64:e4:93:21:8c:
e2:0a:e8:b9:7b:28:f2:17:c4:4c:bf:1b:d7:db:c0:
ef:9b:d5:a3:58:bd:58:8d:ba:4d:0d:b4:00:f8:2d:
b6:c9:54:a4:37:78:6a:ff:11:0d:40:04:34:3d:05:
d7:4c:6d:ad:7c:a3:90:ce:e5:79:eb:dc:53:49:38:
bf:8e:57:b3:1c:07:94:a1:ff:00:18:a3:54:b7:e7:
cc:3f:9c:5f:68:bd:42:f4:0d:7d:69:0f:39:74:3c:
1b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:21:EC:08:FE:C7:C3:EB:C3:20:D9:07:50:15:25:32:98:26:E2:47
X509v3 Authority Key Identifier:
keyid:F2:C7:99:9D:F8:FB:35:3F:44:96:A9:80:00:EA:39:D5:54:EB:1B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8seZnfj7NT9ElqmAAOo51VTrG6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/mCHsCP7Hw-vDINkHUBUlMpgm4kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/8seZnfj7NT9ElqmAAOo51VTrG6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:bc40::/29
Signature Algorithm: sha256WithRSAEncryption
b5:8e:de:ff:1c:a2:53:b9:36:5d:a1:c4:30:ac:d3:30:18:be:
b8:cd:2a:94:27:30:e7:5f:77:6c:0a:45:49:71:74:50:7a:e6:
40:50:50:ed:33:36:2d:42:60:e0:89:6b:82:cc:48:e5:d0:79:
5c:5d:c7:a0:a1:be:6d:47:b5:25:9f:e1:a9:bc:fd:b8:5e:d8:
b2:52:4c:87:61:38:12:36:c3:4c:4a:96:a8:eb:c9:b5:10:44:
2e:d4:12:08:7a:5d:d3:55:1b:78:2c:29:07:4e:f4:f4:29:29:
f0:a0:33:a8:92:56:5e:1e:18:97:bc:f7:56:16:4e:d4:37:de:
ae:2f:b7:63:40:e9:a6:3c:ec:ff:4b:8f:76:73:6a:25:50:42:
9a:78:1a:b4:f6:bb:55:6d:9c:22:e9:54:bc:23:12:c2:bc:23:
25:29:3a:6b:e4:df:a4:68:73:9b:1a:18:7d:74:4a:5f:58:df:
e7:86:f9:79:96:34:c7:7e:57:3d:6b:59:42:e4:74:b9:10:5f:
18:a5:f6:e6:32:13:18:ca:02:97:40:5d:03:85:27:80:e0:d3:
bf:2a:86:04:54:09:78:ca:e8:4b:c1:5a:f9:3e:94:57:96:82:
53:23:17:b7:37:c0:03:00:a9:28:f2:63:58:3f:0a:89:dc:d3:
21:9f:bd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:45:43 2026 by rpki-client