Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/mU0gWqVg1HBT44ZXxn8T_KBlAjI.roa
File: mU0gWqVg1HBT44ZXxn8T_KBlAjI.roa (raw, json)
Hash identifier: 7pusZvkMpb7VcSYsj2xehhYrZkhM308klNZu6IksJ6k=
Subject key identifier: 99:4D:20:5A:A5:60:D4:70:53:E3:86:57:C6:7F:13:FC:A0:65:02:32
Certificate issuer: /CN=1a767677a33d3a799f364384296df46a91d3927f
Certificate serial: 01A07A9D8BB2956366244D5C4679E2949EC8
Authority key identifier: 1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/mU0gWqVg1HBT44ZXxn8T_KBlAjI.roa
Signing time: Mon 07 Sep 2026 06:45:40 +0000
ROA not before: Mon 07 Sep 2026 06:45:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214480
IP address blocks: 2a0c:6d87:f285::/48 maxlen: 48
2a0c:6d87:f390::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:9d:8b:b2:95:63:66:24:4d:5c:46:79:e2:94:9e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a767677a33d3a799f364384296df46a91d3927f
Validity
Not Before: Sep 7 06:45:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=994d205aa560d47053e38657c67f13fca0650232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:5d:6d:71:e8:b9:7c:68:70:15:44:6c:15:
df:df:47:2b:39:a8:85:73:63:49:09:d1:f1:5e:71:
c5:65:a8:a4:5e:1f:3c:08:af:49:48:7b:e4:fd:ac:
20:db:c8:4e:ad:32:02:7d:e1:3e:ce:97:d7:9f:d1:
57:05:36:99:22:03:ab:10:32:37:d7:0a:6b:3b:9d:
ad:dd:c0:43:ab:cc:45:cc:e6:1f:45:a5:38:c1:1f:
88:fe:68:76:36:15:c2:e1:7f:42:71:b4:d8:3b:2c:
57:df:78:57:9e:a6:f9:4a:e9:8d:c9:2e:e1:98:ad:
63:fa:33:01:eb:3d:08:5b:f7:40:5b:f9:0c:e1:21:
7a:49:e0:fb:b6:33:ed:7d:0e:ab:c7:0a:33:53:e0:
00:33:ca:6d:ef:66:24:db:b9:e8:4c:64:0b:e9:a7:
0a:8a:38:25:96:1e:92:af:da:c6:04:6d:a1:89:d8:
6d:42:35:aa:f4:04:ed:83:ce:14:d3:af:ef:ce:a4:
eb:99:0f:6a:30:a5:ac:55:a0:20:3e:85:c3:c4:3c:
bc:8e:bf:ee:33:d9:99:b2:e2:ab:0f:17:e1:ec:a4:
6d:da:e2:04:85:19:67:24:46:5c:d9:88:f1:3f:76:
fd:f7:5b:01:6b:b8:25:68:6b:28:ee:74:4b:e4:7b:
8a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4D:20:5A:A5:60:D4:70:53:E3:86:57:C6:7F:13:FC:A0:65:02:32
X509v3 Authority Key Identifier:
keyid:1A:76:76:77:A3:3D:3A:79:9F:36:43:84:29:6D:F4:6A:91:D3:92:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnZ2d6M9OnmfNkOEKW30apHTkn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/mU0gWqVg1HBT44ZXxn8T_KBlAjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec6696-8b87-47e6-a28c-06242936075e/1/GnZ2d6M9OnmfNkOEKW30apHTkn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6d87:f285::/48
2a0c:6d87:f390::/48
Signature Algorithm: sha256WithRSAEncryption
0d:7c:f9:59:c2:06:9e:9f:e1:62:9d:ba:98:74:aa:30:7b:41:
8c:c8:9c:18:88:a6:9e:3d:f4:2b:1a:29:c0:e8:d7:fe:f5:57:
1e:95:0c:8a:1c:95:f0:cc:3e:c7:34:17:06:f6:7a:75:1b:18:
11:d1:db:59:73:45:33:67:a3:5a:19:9f:74:91:c3:6d:73:e7:
a9:85:c8:07:14:34:0e:11:dd:a5:9e:fc:18:c7:7c:12:fb:ed:
60:da:2d:11:5e:e2:eb:33:f0:37:87:c2:c2:d3:da:c4:4f:b6:
a8:e6:23:8f:64:0c:7e:90:d6:08:6f:6f:e5:67:cc:15:20:b5:
fe:a8:fa:d4:d4:cd:fa:a5:79:60:8b:e5:1d:90:19:78:d7:07:
07:78:0e:c6:9c:99:c9:44:fd:7b:8e:5e:4e:f3:cf:8a:86:e2:
87:c5:ca:8c:7f:20:e6:2f:73:7e:03:61:4d:71:58:34:9d:bc:
e6:00:49:16:7c:f7:f3:2f:37:79:7d:ea:a8:b3:03:c6:69:18:
de:74:05:e5:20:58:0a:7c:cb:5d:08:61:b1:f3:04:06:90:8b:
ae:34:e6:d4:83:ec:4a:0d:11:a3:e7:b3:6b:a1:79:3a:5c:6a:
af:65:07:42:0f:f0:02:94:18:e1:26:d0:3c:1d:bd:b9:ad:ef:
7c:cb:2a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:28:14 2026 by rpki-client