Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/MOJaIJywd4otTZyKbZejB0v6ay4.roa
File: MOJaIJywd4otTZyKbZejB0v6ay4.roa (raw, json)
Hash identifier: rNI1pa9edpkFYBr17tGN9Tys1Z0tTlj1MmWq7ZO4iao=
Subject key identifier: 30:E2:5A:20:9C:B0:77:8A:2D:4D:9C:8A:6D:97:A3:07:4B:FA:6B:2E
Certificate issuer: /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial: 019B7AC811349C95753DA62E54B0A06599CE
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/MOJaIJywd4otTZyKbZejB0v6ay4.roa
Signing time: Thu 01 Jan 2026 18:18:10 +0000
ROA not before: Thu 01 Jan 2026 18:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49752
IP address blocks: 2001:67c:dcc::/48 maxlen: 48
2001:67c:dd0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:11:34:9c:95:75:3d:a6:2e:54:b0:a0:65:99:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Validity
Not Before: Jan 1 18:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30e25a209cb0778a2d4d9c8a6d97a3074bfa6b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:47:b8:72:95:76:73:74:54:68:3b:bc:c1:
85:6d:bb:eb:42:6b:a5:d4:cc:3d:50:c2:f1:fb:bb:
ba:8b:ad:00:34:d8:0d:31:5d:4f:c0:19:49:3d:3b:
fb:22:84:d6:4e:64:c2:1b:e5:8f:68:bd:bb:7f:29:
8d:4f:b3:cc:c7:1e:65:88:cb:04:9b:89:56:cf:66:
33:29:55:da:15:1f:d4:1f:dc:59:b9:4a:68:2f:8d:
42:75:0d:91:64:9d:f4:92:95:db:71:05:da:27:40:
2b:03:26:bc:7e:52:cf:d3:16:98:31:4c:b6:e4:b4:
a7:4d:e0:7d:70:61:d8:4d:24:2e:bd:f8:27:c3:78:
0b:29:d8:51:ea:4c:2f:9f:60:75:cf:0f:4f:9a:5f:
8e:f6:ea:1a:64:dd:92:6a:8f:8a:e4:8f:17:e0:5f:
f1:e5:23:78:90:ed:45:f4:e6:0b:23:1c:b6:f8:15:
af:d8:18:6e:f8:bf:04:5c:1e:a5:96:bc:da:26:d3:
e1:31:0f:55:be:b3:d1:f7:88:db:c8:9e:9b:ed:66:
07:80:ec:ee:c3:c8:ae:1f:7a:6d:10:44:7c:87:54:
37:f0:98:df:05:aa:38:69:ea:a9:66:a0:5f:e6:c0:
e8:49:c7:53:5b:59:a3:3b:df:4d:ad:ea:7c:37:c7:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E2:5A:20:9C:B0:77:8A:2D:4D:9C:8A:6D:97:A3:07:4B:FA:6B:2E
X509v3 Authority Key Identifier:
keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/MOJaIJywd4otTZyKbZejB0v6ay4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:dcc::/48
2001:67c:dd0::/48
Signature Algorithm: sha256WithRSAEncryption
29:7d:61:63:a1:31:57:cc:0b:1a:bd:9c:a1:04:a1:78:cd:c0:
35:eb:7a:a7:7a:4f:ab:31:67:ea:34:b4:4a:cf:fc:77:34:7d:
ea:09:79:cd:1c:80:f1:b0:4c:83:72:11:1a:65:f7:33:63:7f:
ec:e2:7b:12:b8:84:8c:f8:a6:2c:ad:f2:31:75:41:f7:7a:b6:
0d:66:b5:dd:d0:fb:40:98:23:5b:bf:66:9b:3e:48:1c:7e:41:
09:44:27:3a:05:21:9b:4a:83:19:08:67:50:cd:49:27:4f:51:
54:f6:40:95:60:90:88:b4:12:0e:90:8c:d3:4e:e8:6e:95:b6:
a0:c9:1d:c8:f7:81:0e:f2:dd:76:ee:a7:d6:f6:e3:62:2e:e5:
bb:4f:cd:6d:0e:01:bf:0d:ca:db:f6:73:ec:21:ee:c3:f4:5f:
61:0e:bd:f3:5c:b0:88:4a:2c:c2:9e:1a:5e:a9:d8:31:22:2e:
df:e3:d4:d7:79:d6:db:70:0c:4a:bc:7a:2c:38:6b:52:0b:16:
3c:53:97:cc:00:5e:b8:d6:86:6a:d5:7f:60:ee:31:50:d0:82:
2b:5e:b8:91:1f:4b:87:ee:0e:f3:45:c1:10:42:6b:9f:e0:24:
d3:37:00:1b:7f:0c:04:cf:76:8e:77:f9:9b:fe:32:6b:59:5a:
a0:43:ad:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 21:04:23 2026 by rpki-client