Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/mbuoW1TNtMQxPU71jn5qWeeOAt0.roa
File: mbuoW1TNtMQxPU71jn5qWeeOAt0.roa (raw, json)
Hash identifier: y2BvDDRbU+x02YpMBI2/TS4g3CygiCcRE2KGIs/Seh4=
Subject key identifier: 99:BB:A8:5B:54:CD:B4:C4:31:3D:4E:F5:8E:7E:6A:59:E7:8E:02:DD
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 01A0117E58CC42A7052C48FDF9B69F608CD2
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/mbuoW1TNtMQxPU71jn5qWeeOAt0.roa
Signing time: Mon 17 Aug 2026 20:51:27 +0000
ROA not before: Mon 17 Aug 2026 20:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200775
IP address blocks: 2a01:ecc0:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:7e:58:cc:42:a7:05:2c:48:fd:f9:b6:9f:60:8c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Aug 17 20:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99bba85b54cdb4c4313d4ef58e7e6a59e78e02dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2b:67:6f:d0:1e:df:57:a3:99:61:f6:14:b7:
34:c6:9d:c5:46:9a:ce:83:88:d8:c4:ae:16:a7:d7:
19:03:3b:15:df:20:83:ec:b1:0c:3b:e7:a6:61:57:
d3:7c:e2:b8:48:9d:82:d5:dd:a5:fb:00:c2:8a:3e:
2f:d6:f5:ea:28:21:c9:d4:cf:4f:92:1e:ab:64:e4:
76:d7:bf:82:80:e6:9b:4d:47:90:7c:bf:34:6e:d0:
b0:9b:ac:bc:94:01:2f:eb:d4:fa:2c:35:14:81:e5:
65:51:fc:ff:1c:98:84:19:52:01:50:5b:8b:54:50:
a2:78:8b:66:a4:b9:32:f7:2f:b3:71:14:85:fc:27:
87:f0:e5:df:d6:78:05:65:26:08:ad:5f:39:ed:49:
c8:bb:ea:c1:b7:70:c3:15:6b:3d:da:c1:33:7b:c1:
02:64:81:e9:f0:59:e3:b7:83:61:f9:04:f3:06:7e:
74:55:57:b4:ee:bc:34:29:56:25:b2:43:77:a7:fc:
6d:ba:2c:9d:c6:20:35:ac:60:65:4a:8e:0f:cd:a6:
12:13:47:32:fe:b2:11:53:76:3b:d3:0b:24:e5:3f:
7b:d7:33:1f:4a:9c:5e:ae:a6:37:cd:24:52:3f:85:
3a:3f:66:26:04:63:fa:e1:94:4f:de:6e:f5:b8:40:
b5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BB:A8:5B:54:CD:B4:C4:31:3D:4E:F5:8E:7E:6A:59:E7:8E:02:DD
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/mbuoW1TNtMQxPU71jn5qWeeOAt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ecc0:20::/44
Signature Algorithm: sha256WithRSAEncryption
6a:dc:c3:7a:b8:e4:c4:5e:f0:91:5d:22:66:74:bc:75:0c:9b:
5b:81:f8:03:e2:aa:c4:45:65:21:bf:81:e7:9f:61:4e:58:c7:
0f:b0:aa:ee:d3:d8:05:7c:a0:2c:13:9d:b5:31:bb:ad:29:cc:
57:fb:77:3d:b3:29:81:bc:14:7b:25:8e:fd:e3:34:42:7f:b4:
ff:64:14:15:1c:e7:3f:4f:ab:67:dc:c0:43:eb:fc:d5:03:34:
2d:0c:99:0c:a6:91:07:49:ae:79:ff:bb:8c:b4:64:d0:6e:fb:
20:10:ec:c9:c3:44:ad:47:0c:6c:ee:4f:f2:6c:77:f5:e1:07:
e5:da:63:d9:d0:a6:ef:8f:6d:8d:4a:60:a1:eb:ec:3c:55:37:
49:50:53:ec:ad:01:69:31:bf:4c:b7:70:51:1b:9c:57:2c:b1:
09:7c:59:b5:4f:75:39:c6:02:75:77:35:af:e3:54:32:48:de:
e9:03:df:1e:20:75:4c:a6:84:4a:2e:d8:22:36:ff:7e:1e:a5:
7f:09:71:8b:ac:2d:92:b0:ea:b5:43:96:df:5f:d6:f1:7b:a9:
75:13:4b:18:5e:2e:02:03:50:d8:ea:71:29:a9:e4:7a:91:dc:
0b:17:4b:4f:c9:4e:b7:ff:8d:43:e8:2a:5f:8b:43:0c:b4:ea:
92:e6:cb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:15 2026 by rpki-client