Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/MEcp7D87qw-ba-jz3jcFeNRtzWY.roa
File: MEcp7D87qw-ba-jz3jcFeNRtzWY.roa (raw, json)
Hash identifier: gjtAqoeqxyyX81G8o3jEnrtLFhSB+cdWCoiGrrDuC+4=
Subject key identifier: 30:47:29:EC:3F:3B:AB:0F:9B:6B:E8:F3:DE:37:05:78:D4:6D:CD:66
Certificate issuer: /CN=f88b443e992c665658942e6890d298d68cde6425
Certificate serial: 019CE6732221CCD141334E7DD3A0709C3073
Authority key identifier: F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/MEcp7D87qw-ba-jz3jcFeNRtzWY.roa
Signing time: Fri 13 Mar 2026 09:07:10 +0000
ROA not before: Fri 13 Mar 2026 09:07:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200882
IP address blocks: 2a12:fdc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:73:22:21:cc:d1:41:33:4e:7d:d3:a0:70:9c:30:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88b443e992c665658942e6890d298d68cde6425
Validity
Not Before: Mar 13 09:07:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=304729ec3f3bab0f9b6be8f3de370578d46dcd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4d:a5:de:37:73:44:f8:d8:cf:5a:50:c8:13:
c6:68:0c:1c:e4:ad:45:ce:6a:48:e5:97:8d:98:35:
3d:8f:6e:11:30:0b:14:16:c3:88:ed:f7:bf:60:21:
50:94:5f:9e:62:e7:20:65:5c:d6:bc:7a:70:eb:df:
10:a6:a9:3d:80:8c:26:22:2c:ce:22:12:10:d4:9d:
91:34:76:5a:66:ce:ce:89:f6:0a:0d:4d:ce:11:46:
5c:6c:fc:63:0f:37:b6:32:3e:70:7d:6c:cd:91:6a:
ac:e7:9a:ef:a5:d1:e1:3d:e6:14:da:c9:b8:44:a4:
43:43:ac:6a:c3:e2:87:a9:30:02:71:c2:95:4c:00:
a1:d0:68:3f:7b:b6:6f:c0:5d:9e:53:1f:41:3c:15:
39:8a:b3:27:a8:be:11:0a:9a:ad:fa:e7:54:56:7a:
d8:28:71:76:9f:27:45:6e:ee:9f:b1:f7:06:c5:27:
63:d1:68:b8:8c:20:89:32:b9:aa:4b:9b:01:25:22:
e1:e9:56:d3:10:eb:f6:8f:07:fd:cc:bb:01:65:ee:
23:fc:e8:02:89:10:35:f5:d1:9e:12:83:7a:14:79:
bf:94:fb:85:10:59:86:d4:42:60:08:90:1d:a9:38:
0b:0f:9d:fc:f7:79:fa:e0:99:49:5f:82:02:94:a5:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:47:29:EC:3F:3B:AB:0F:9B:6B:E8:F3:DE:37:05:78:D4:6D:CD:66
X509v3 Authority Key Identifier:
keyid:F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/MEcp7D87qw-ba-jz3jcFeNRtzWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
b1:58:ae:d3:20:d8:bd:0f:5f:60:a0:ad:83:90:ed:f4:ad:e6:
c5:2b:3d:6e:0d:42:b7:2d:0f:7c:38:be:d9:28:2d:98:74:06:
67:28:d5:d2:2d:13:60:37:3f:f3:7c:3b:39:1f:bf:e9:67:45:
53:6b:2c:d2:2b:2a:40:0a:bd:77:92:e2:c7:23:ae:ec:42:33:
c3:bd:99:87:30:07:63:89:27:67:fd:64:e0:fb:a4:41:90:25:
b4:24:57:23:52:cd:8e:a6:a7:7c:6b:62:b0:20:4b:29:b0:9d:
d2:f8:ba:7c:03:f5:45:51:aa:5a:53:bc:4d:31:cb:26:db:74:
3e:12:3a:76:d4:fd:8e:c8:72:43:d4:31:cc:f4:da:eb:0c:41:
e1:12:af:51:28:75:cd:6c:76:7c:1d:c5:0a:8f:c5:46:08:3b:
aa:74:d7:04:5a:1d:e3:64:89:c1:f7:b3:8b:27:37:9b:27:8c:
7c:7d:55:cd:69:cc:11:92:5a:af:4b:f5:1c:80:80:74:05:dd:
ff:c6:22:da:4b:1a:b2:01:fb:7e:5c:14:5e:39:d7:ed:a4:55:
29:ca:c3:42:e9:fa:7f:b6:a2:ea:3c:93:48:f3:e6:b9:48:40:
6f:03:18:56:cd:45:d3:3e:c9:d8:e8:e5:26:32:82:31:b7:b9:
fc:f9:36:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 09:52:19 2026 by rpki-client