Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/MUmfOPxUo1ym27iA9yba4cBrRdQ.roa
File: MUmfOPxUo1ym27iA9yba4cBrRdQ.roa (raw, json)
Hash identifier: E3+bxe+6Z8vivRrWSF3M1TLEwkKZ68GGPJwJrdpmg1k=
Subject key identifier: 31:49:9F:38:FC:54:A3:5C:A6:DB:B8:80:F7:26:DA:E1:C0:6B:45:D4
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 019FC6601CA74660D622D7C88C30E549AFCD
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/MUmfOPxUo1ym27iA9yba4cBrRdQ.roa
Signing time: Mon 03 Aug 2026 06:46:55 +0000
ROA not before: Mon 03 Aug 2026 06:46:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 2a12:dac0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:60:1c:a7:46:60:d6:22:d7:c8:8c:30:e5:49:af:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Aug 3 06:46:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31499f38fc54a35ca6dbb880f726dae1c06b45d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d4:33:25:fc:aa:21:dc:ff:e1:ae:1a:f0:c6:
f6:78:f1:5f:fb:fe:63:22:0f:b5:52:7b:7b:b1:c6:
ff:c0:05:c1:9e:d5:b0:c2:e1:df:98:ca:e8:09:0d:
45:6a:3e:fc:67:fa:fa:5a:1a:be:8b:1a:34:f0:7e:
5c:40:62:b4:85:bf:37:de:7f:0a:f1:8b:51:96:48:
b9:a7:82:e8:fa:ae:41:94:3e:32:d5:07:59:c5:c5:
6a:2d:cf:c1:df:19:0e:cb:c4:97:df:98:f7:47:c4:
bc:31:9d:c6:55:3f:8f:b8:79:8f:df:7b:5a:32:ac:
19:78:4a:cd:00:84:0a:8b:f3:58:ea:77:a1:80:3a:
d8:04:8c:29:62:1a:12:62:d2:bb:73:87:a6:4b:cc:
64:4e:07:fd:c9:b3:e6:2e:bc:26:03:0e:a4:8d:b2:
08:b9:24:13:52:e0:f0:a5:fa:37:f4:69:1f:02:28:
c8:63:c0:76:87:b9:98:29:fa:0f:19:68:0f:74:e4:
aa:3a:89:24:3a:07:bc:14:05:01:35:4e:c5:3d:51:
31:d5:d8:ef:3b:36:ba:bf:1f:01:a9:d1:c8:f1:30:
84:b0:bd:7c:31:d5:18:eb:f1:74:aa:67:0c:d5:cd:
ec:f0:a7:f7:8f:f7:e1:07:54:b0:44:d7:90:80:39:
82:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:49:9F:38:FC:54:A3:5C:A6:DB:B8:80:F7:26:DA:E1:C0:6B:45:D4
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/MUmfOPxUo1ym27iA9yba4cBrRdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dac0:1::/48
Signature Algorithm: sha256WithRSAEncryption
78:ad:bc:cd:fd:12:10:6f:40:4e:17:59:90:fc:d7:4e:ba:5e:
27:a5:be:d4:b8:3d:6b:50:3c:c6:25:2e:85:3c:b3:0c:ad:43:
fe:5e:b7:ca:8d:00:4e:e5:df:da:2a:97:ed:ef:dc:c5:40:62:
67:ed:07:af:da:b7:ca:2f:38:ab:3c:0a:41:88:9c:72:42:29:
fd:c3:15:83:f4:7a:02:d7:aa:09:32:e3:96:0d:25:c3:fa:bc:
05:9d:13:7b:17:35:0a:8a:28:d3:c3:bf:f3:92:05:5b:12:62:
62:ce:76:77:38:e3:90:68:fa:cd:08:0d:93:f9:cc:c4:2d:a9:
00:03:e4:a8:9c:70:ab:de:73:a8:a0:18:0d:c9:ed:bf:4d:7b:
5d:a8:cb:f1:0f:30:5b:75:aa:3e:e4:81:9c:71:3a:a0:72:9e:
69:e0:b1:3a:fb:af:6f:5e:ec:fc:51:d0:e7:69:c5:89:17:56:
24:fb:8c:e0:66:98:65:d7:48:e6:12:3c:40:1e:04:8e:b0:7f:
35:d0:16:ae:7e:6f:6d:bd:10:99:46:3d:6f:84:f3:92:b8:25:
d9:a7:11:0f:df:64:69:79:98:e7:8b:ac:e4:50:2e:0d:5c:3d:
05:26:2f:51:9e:aa:66:f4:42:97:09:fc:98:18:bc:56:a0:0e:
8f:43:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 04:47:26 2026 by rpki-client