Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1-MJzm6Kd1wbVXRBAVjb2jYmZJeA.roa
File: 1-MJzm6Kd1wbVXRBAVjb2jYmZJeA.roa (raw, json)
Hash identifier: eEcLbwZ+pTgw9CRfuwIRMIQrLkMw39e/NZ044Su5fjM=
Subject key identifier: F8:C2:73:9B:A2:9D:D7:06:D5:5D:10:40:56:36:F6:8D:89:99:25:E0
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019FD8ECF3306D43172E4D8AFFC372315CBC
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1-MJzm6Kd1wbVXRBAVjb2jYmZJeA.roa
Signing time: Thu 06 Aug 2026 21:13:55 +0000
ROA not before: Thu 06 Aug 2026 21:13:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205866
IP address blocks: 2a11:77c6::/32 maxlen: 32
2a11:b4c7::/32 maxlen: 32
2a11:bdc7::/32 maxlen: 32
2a12:640::/32 maxlen: 32
2a12:643::/32 maxlen: 32
2a12:e85::/32 maxlen: 32
2a12:6485::/32 maxlen: 32
2a12:d805::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:ec:f3:30:6d:43:17:2e:4d:8a:ff:c3:72:31:5c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 6 21:13:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8c2739ba29dd706d55d10405636f68d899925e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:29:bc:02:e3:a4:db:59:14:da:1f:7d:86:
ad:0f:d2:8e:18:74:21:47:26:5a:a5:e1:2e:a2:3d:
eb:11:4e:c9:df:16:ec:49:73:c0:ad:41:32:4c:44:
c8:38:ae:fe:1d:b6:7d:ba:ff:0f:0f:04:ce:1a:9f:
c0:cb:86:1d:28:99:85:2e:0a:3c:cb:20:43:0e:64:
92:d4:8f:7e:0c:73:a3:c9:da:e4:1e:bb:14:76:57:
c3:63:a9:3e:1f:d4:2d:f7:7b:70:6e:75:f7:fe:9b:
1b:8a:05:4e:a1:1f:2e:57:85:b3:46:51:b4:53:73:
1d:7a:48:04:b2:99:3f:82:b8:99:01:f0:a7:c5:b1:
e7:99:25:c6:eb:b0:07:1b:9a:b3:26:38:82:9d:06:
57:7a:c5:66:31:9c:82:2c:e4:d9:0e:1a:b3:db:24:
04:5a:12:26:30:3a:a4:62:f5:28:30:81:ea:74:d2:
3c:11:42:3e:46:75:1b:b6:58:71:a1:aa:b8:0d:ef:
fd:8e:65:88:26:ea:0a:7f:a4:bf:4e:b6:83:f6:ab:
ea:45:2f:4b:06:ef:7c:ac:5f:53:67:4d:9e:64:dc:
16:2c:19:14:a7:47:fb:21:37:c8:17:a8:f7:cb:0b:
e5:b9:69:93:85:0e:12:e9:73:9f:6c:dc:54:59:07:
90:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C2:73:9B:A2:9D:D7:06:D5:5D:10:40:56:36:F6:8D:89:99:25:E0
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1-MJzm6Kd1wbVXRBAVjb2jYmZJeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:77c6::/32
2a11:b4c7::/32
2a11:bdc7::/32
2a12:640::/32
2a12:643::/32
2a12:e85::/32
2a12:6485::/32
2a12:d805::/32
Signature Algorithm: sha256WithRSAEncryption
75:c6:40:9e:dc:55:be:ad:5b:07:e0:3d:51:56:1a:36:91:f0:
d8:22:86:2b:b3:aa:91:02:ef:4b:9d:5e:e0:ae:fb:0a:75:4b:
6b:02:ec:88:bb:ab:84:82:58:3e:db:f0:76:cf:63:a2:fe:99:
68:1d:7c:51:5e:d6:39:47:51:e1:be:98:c4:03:3f:9c:1b:1a:
ae:f6:77:3d:64:27:9f:32:58:6c:d5:5e:f1:bd:bd:5d:0d:8b:
16:82:f8:44:82:cb:ad:77:ec:f3:98:f0:0e:ec:3c:58:39:06:
a2:27:fb:de:07:42:b0:f1:15:7b:f8:15:35:98:94:df:f5:e3:
6a:c6:34:bc:dd:8b:a5:7a:40:ee:ad:80:27:d6:11:06:67:a1:
27:6e:42:c4:e9:eb:6f:7c:68:07:d0:33:18:86:28:c8:a7:88:
47:84:8a:a3:8f:94:3f:86:aa:02:72:29:05:81:bd:f6:5e:79:
16:3c:30:33:af:80:a9:d7:3f:de:c0:ea:8a:82:47:db:77:bf:
1b:a3:5b:cb:0c:29:48:40:74:d1:53:1b:67:66:86:90:5a:f7:
e5:62:4a:0a:95:66:63:73:b8:65:37:85:e6:31:a8:a0:f6:d8:
6c:9e:1b:27:08:80:5f:c7:b9:93:cc:31:9e:84:98:71:0d:22:
6c:74:c9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:07 2026 by rpki-client