Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/MYqzI5RUwoExUriUjIfr8jG2Ub0.roa
File: MYqzI5RUwoExUriUjIfr8jG2Ub0.roa (raw, json)
Hash identifier: vu4bbmCy+0VbJ0+3Vv7Ami4r7hwDO2zx72skiXEUsxo=
Subject key identifier: 31:8A:B3:23:94:54:C2:81:31:52:B8:94:8C:87:EB:F2:31:B6:51:BD
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019E2C59B783C98ABB2AAB242388231A5EA4
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/MYqzI5RUwoExUriUjIfr8jG2Ub0.roa
Signing time: Fri 15 May 2026 15:55:37 +0000
ROA not before: Fri 15 May 2026 15:55:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215330
IP address blocks: 2a0d:ad43::/32 maxlen: 32
2a11:9045::/32 maxlen: 32
2a11:e2c3::/32 maxlen: 32
2a12:a500::/32 maxlen: 32
2a12:cf80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:59:b7:83:c9:8a:bb:2a:ab:24:23:88:23:1a:5e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 15 15:55:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=318ab3239454c2813152b8948c87ebf231b651bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:64:bb:38:38:c0:c3:a4:d5:3b:ad:d2:f1:
32:15:4c:15:27:83:95:bc:ca:8b:13:1d:c9:c6:a4:
1b:ef:24:96:fb:3e:95:94:ad:40:74:df:bc:51:16:
ba:80:9e:14:4d:d3:41:e8:c8:0d:91:58:7d:42:b4:
a3:00:d2:ab:29:4e:3c:df:1a:8a:f6:37:7e:85:2a:
b2:99:e1:76:87:a1:b1:ef:79:15:ed:54:f6:a7:c6:
ff:8a:c0:1f:43:64:65:9e:2d:66:a3:f3:74:5b:d7:
6a:17:a5:b6:77:58:94:bc:e4:36:28:8a:1a:30:76:
20:c7:b8:50:2b:22:2a:51:a0:b2:16:35:5a:f4:06:
b3:1a:e7:2f:3b:4c:78:9b:2f:c2:23:fc:22:4f:f5:
a4:46:c2:ab:19:4c:6b:5b:05:d8:14:07:78:ec:f4:
ed:5b:0f:43:59:61:68:7d:39:2e:a1:45:16:b1:e6:
5b:d9:ca:71:a5:aa:23:47:9c:89:22:a5:9a:37:2b:
b1:15:90:7a:ee:ca:c3:85:2b:7d:e8:d4:82:b5:c4:
05:5f:36:9e:38:11:31:8f:a1:48:73:4a:dc:7e:84:
3d:16:c0:9e:44:7a:aa:39:c2:ae:83:db:d7:95:ce:
59:14:af:04:a3:44:18:5a:96:e9:48:e5:d4:07:d5:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8A:B3:23:94:54:C2:81:31:52:B8:94:8C:87:EB:F2:31:B6:51:BD
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/MYqzI5RUwoExUriUjIfr8jG2Ub0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ad43::/32
2a11:9045::/32
2a11:e2c3::/32
2a12:a500::/32
2a12:cf80::/32
Signature Algorithm: sha256WithRSAEncryption
1e:08:50:8d:c1:b3:8d:81:df:58:af:45:8b:9b:6a:90:5e:f2:
3e:9c:9a:c0:ee:63:41:18:3c:5f:97:4e:20:b5:cf:76:3f:91:
5d:d2:38:f0:b5:ba:dd:91:5d:a8:04:81:4b:be:81:57:27:32:
ee:35:11:93:48:4e:2c:88:a6:97:90:88:2d:e5:dc:cb:3c:b0:
d1:47:f2:b9:0e:31:0f:89:d4:a0:18:a6:90:19:d5:e8:31:12:
8b:85:47:d7:50:1d:5f:52:99:3f:7d:93:e3:40:dd:31:cf:85:
22:ee:dc:b8:71:e5:84:6e:bc:00:06:42:85:ef:c4:5b:06:b7:
cd:c8:37:05:cb:53:48:bf:15:54:a0:e7:4d:7d:8c:13:b0:7f:
3a:df:c3:16:b3:91:d1:c6:57:e4:f5:38:9f:6a:05:2d:3e:55:
56:84:03:9e:88:03:d6:97:b3:c0:b1:82:4b:5e:7e:eb:a1:e2:
c0:1a:07:a4:7d:5a:62:d2:d5:0d:b8:19:c9:25:46:4d:a7:0d:
d1:38:f2:ed:0b:d2:76:83:13:35:83:5f:ea:44:97:f7:7d:fd:
7c:8a:8d:a6:35:32:c3:5a:e4:ca:94:41:db:c8:1b:01:2b:f7:
2e:21:e9:07:e4:cb:d3:ca:2f:e9:74:8e:8a:b6:74:46:4c:94:
ef:1b:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:24 2026 by rpki-client