Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/Moxn3iWlB5DXKcsT3Hpix-jum0w.roa
File: Moxn3iWlB5DXKcsT3Hpix-jum0w.roa (raw, json)
Hash identifier: 3VaeGFqKYdLPf7mP0u+ieEaG1+gde8oE5cPWlEgSrKI=
Subject key identifier: 32:8C:67:DE:25:A5:07:90:D7:29:CB:13:DC:7A:62:C7:E8:EE:9B:4C
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019F0A463EAC1F9EA432A05DA853603F8430
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/Moxn3iWlB5DXKcsT3Hpix-jum0w.roa
Signing time: Sat 27 Jun 2026 18:10:03 +0000
ROA not before: Sat 27 Jun 2026 18:10:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198365
IP address blocks: 185.16.0.0/24 maxlen: 24
194.165.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:46:3e:ac:1f:9e:a4:32:a0:5d:a8:53:60:3f:84:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Jun 27 18:10:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=328c67de25a50790d729cb13dc7a62c7e8ee9b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ca:fe:a5:af:fc:8b:e4:37:c0:46:a6:74:fc:
09:b5:d2:ad:e4:53:0c:06:67:f2:10:90:4f:f2:71:
29:49:47:28:dd:ee:4f:02:e2:3d:c9:f5:af:c9:23:
1a:8f:97:99:2b:af:8d:03:79:87:d3:19:a0:23:5b:
c8:79:06:c5:04:1c:0e:0b:7a:a4:6a:7d:31:97:75:
f4:44:a7:b1:a3:c9:bc:e1:2b:94:a5:71:ac:c7:3d:
b2:cb:60:68:c3:11:d7:00:44:37:ad:21:6e:b3:10:
fe:ab:06:42:f9:9a:4d:86:84:08:8b:53:b6:da:a7:
c0:0f:f2:78:3d:9b:37:0c:51:76:f5:b0:98:cd:6b:
88:5c:9a:10:4f:17:0b:1c:3b:ab:65:94:55:06:d8:
f8:dd:53:bf:02:ae:32:7c:b9:42:8d:c5:3b:a5:db:
9d:65:39:c3:20:f5:5e:5c:81:62:9a:de:b9:66:f0:
71:4d:59:56:9f:54:f2:61:cf:f7:80:85:6a:da:9f:
8f:70:49:2c:9e:d7:af:4b:89:c3:44:c6:39:c4:76:
aa:d3:21:81:0c:ca:e2:70:19:26:80:08:86:68:a6:
e4:f4:85:34:39:26:37:ec:61:a3:73:b9:93:73:14:
cd:4c:e2:47:03:57:8e:d8:bb:e4:54:73:0f:ff:f4:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8C:67:DE:25:A5:07:90:D7:29:CB:13:DC:7A:62:C7:E8:EE:9B:4C
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/Moxn3iWlB5DXKcsT3Hpix-jum0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.0.0/24
194.165.37.0/24
Signature Algorithm: sha256WithRSAEncryption
46:0f:ed:54:02:78:22:ff:4a:ad:f6:e5:29:55:ae:f4:19:86:
8a:f8:76:55:38:77:ed:60:51:b0:bc:e1:a3:8b:8c:5f:d4:60:
02:0a:ee:3b:93:81:cd:f2:ce:1c:44:7d:0f:05:10:ad:0d:27:
da:42:c8:4e:22:24:01:8a:2c:e0:da:98:a5:41:f7:f9:bb:58:
d0:17:23:d8:d0:82:90:6c:2a:7a:0d:7b:8b:e4:80:0c:84:de:
4b:d2:c5:df:02:a1:f4:70:2d:57:58:6e:11:1d:ce:26:ed:04:
59:a4:3d:74:76:aa:09:e9:84:75:fe:f0:dd:2b:91:ad:35:56:
8b:e4:ac:a5:fd:81:59:ed:37:03:25:aa:4e:3a:dc:67:1f:b4:
8a:6e:d0:22:ec:0a:bd:8f:9f:92:37:79:28:7a:c2:52:94:0c:
e0:87:84:f2:f0:64:5c:e1:24:dd:ec:d9:d8:32:cc:cf:26:76:
10:e0:00:03:6e:2d:3d:73:8d:9e:43:79:aa:07:be:bc:eb:ea:
5b:38:20:a9:0b:cf:1c:0f:18:1c:b6:76:0d:46:6e:ac:71:e2:
7f:cf:08:09:62:76:18:22:29:14:09:13:4e:09:d3:6d:c4:1d:
64:7f:6e:9d:d4:db:ef:96:d1:93:65:f6:2c:bc:e2:4e:46:17:
23:a9:df:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:06:15 2026 by rpki-client