Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/mSLcPcPlbCaKloucUE197Adzr1c.roa
File: mSLcPcPlbCaKloucUE197Adzr1c.roa (raw, json)
Hash identifier: gW1hk3WhDt/+PalHQ3CRB51/zaP5eafiQ6SCna2I/+k=
Subject key identifier: 99:22:DC:3D:C3:E5:6C:26:8A:96:8B:9C:50:4D:7D:EC:07:73:AF:57
Certificate issuer: /CN=4a54efe02abe70fc832206d4ebf99d724e8b1f5a
Certificate serial: 019CE238FA4DB082E12E1B42F8619A6D9148
Authority key identifier: 4A:54:EF:E0:2A:BE:70:FC:83:22:06:D4:EB:F9:9D:72:4E:8B:1F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/mSLcPcPlbCaKloucUE197Adzr1c.roa
Signing time: Thu 12 Mar 2026 13:25:10 +0000
ROA not before: Thu 12 Mar 2026 13:25:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 208.122.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:38:fa:4d:b0:82:e1:2e:1b:42:f8:61:9a:6d:91:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a54efe02abe70fc832206d4ebf99d724e8b1f5a
Validity
Not Before: Mar 12 13:25:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9922dc3dc3e56c268a968b9c504d7dec0773af57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:46:5b:c6:03:26:eb:78:50:c6:8f:0c:1d:
74:e0:fe:46:90:a5:24:fb:6b:ec:4a:6f:3a:d6:4b:
1c:cd:cb:92:0d:95:6f:3a:d4:4d:51:21:55:74:96:
ec:4f:66:ab:db:19:d5:4d:0b:f7:ca:13:67:f2:a4:
5c:af:b0:e1:56:d2:0d:fd:0f:6c:96:d2:c7:41:6c:
36:58:7e:cb:4d:48:84:16:e6:39:d0:2e:8b:64:b1:
03:f5:1d:d4:cc:79:02:56:70:42:2b:c5:e3:09:a2:
db:27:18:8c:d6:f7:5f:66:9e:4f:e1:bf:c6:5e:02:
9f:16:3b:00:0a:50:6f:ed:9a:f8:55:48:6e:0d:96:
c3:bc:f0:05:b3:a9:49:44:f4:3f:76:1d:90:d7:fc:
41:96:e8:89:78:c3:f7:ae:72:c8:5d:44:97:a2:98:
31:6e:c2:44:82:ad:22:6e:38:7e:0f:aa:85:7b:85:
c3:2f:84:5e:05:8a:99:87:14:d2:56:a3:fd:72:c6:
2d:4d:35:c3:19:49:e6:17:51:b1:f3:b8:41:d4:70:
fd:03:04:4a:65:b5:30:de:94:e7:16:3e:ce:63:46:
52:75:5a:d7:73:c3:1f:53:bf:f6:a7:92:2e:c8:9b:
4a:1c:c1:9e:3d:8a:90:02:7f:31:4c:8e:e0:be:ae:
87:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:DC:3D:C3:E5:6C:26:8A:96:8B:9C:50:4D:7D:EC:07:73:AF:57
X509v3 Authority Key Identifier:
keyid:4A:54:EF:E0:2A:BE:70:FC:83:22:06:D4:EB:F9:9D:72:4E:8B:1F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/mSLcPcPlbCaKloucUE197Adzr1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.122.0.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:20:e5:22:06:7e:8f:4b:ff:98:02:70:ae:41:c6:78:7f:0c:
68:90:c7:60:4c:72:96:cd:3a:e5:0b:df:21:6b:18:ff:c5:65:
11:a3:10:ea:5b:8f:d9:d6:2c:45:af:4e:01:28:ac:a0:a8:96:
ba:bc:15:9e:f4:b6:9a:72:95:cc:c5:78:96:a3:55:d1:e3:d2:
f8:b3:08:39:45:44:0e:8f:15:7b:7e:f1:27:f0:ca:83:07:6d:
83:b9:78:e5:fd:fd:97:aa:96:a9:bb:c4:5a:9c:50:d6:ce:49:
a0:14:f9:94:73:8b:46:1d:ed:1c:93:e5:38:57:98:c2:55:cb:
c1:26:92:5b:57:6d:0f:a3:8b:a2:e9:91:85:3e:d9:4c:78:77:
bf:fb:53:33:b7:a9:13:24:1a:92:f6:8e:0f:10:67:f4:79:53:
39:d5:fc:29:cd:13:51:3f:31:ff:af:70:00:a9:e3:d7:f8:46:
bd:df:45:1e:7d:5f:04:0c:df:ce:82:81:4b:7e:65:e8:39:d7:
98:2c:9a:75:bb:2d:f1:fa:14:2c:9e:93:99:a3:05:e9:9a:7d:
39:4d:b4:71:65:7b:80:52:52:28:1c:2c:34:a4:d7:ac:5e:6a:
32:a3:cb:81:5c:5d:03:7b:7a:6d:05:36:09:bd:09:5a:90:64:
d5:be:99:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:29:54 2026 by rpki-client