Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/Md-o3lGIoXUo9ynVTwQnDQUNyzM.roa
File: Md-o3lGIoXUo9ynVTwQnDQUNyzM.roa (raw, json)
Hash identifier: AWCf1DkAv4fQq3K+BQw40VyMuDn4MGmNjixx31UPhmA=
Subject key identifier: 31:DF:A8:DE:51:88:A1:75:28:F7:29:D5:4F:04:27:0D:05:0D:CB:33
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 019FD6ADFB99C7FA5F16464384B4E42ED051
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/Md-o3lGIoXUo9ynVTwQnDQUNyzM.roa
Signing time: Thu 06 Aug 2026 10:45:54 +0000
ROA not before: Thu 06 Aug 2026 10:45:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219064
IP address blocks: 2a10:ab80:400::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:ad:fb:99:c7:fa:5f:16:46:43:84:b4:e4:2e:d0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: Aug 6 10:45:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31dfa8de5188a17528f729d54f04270d050dcb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:16:56:55:48:19:5c:d2:f1:36:0a:ee:6b:2b:
da:65:69:70:c7:9a:bb:47:06:7e:15:44:ef:ed:51:
57:0a:5d:80:35:8e:88:fb:35:02:07:5a:27:6f:68:
9b:0b:23:dc:8e:f1:e6:d1:1b:b8:3f:53:d1:73:f8:
a7:26:83:0a:2e:2e:22:c8:08:ab:d0:45:c7:0f:dd:
b6:db:60:26:69:03:5b:5e:9d:14:6a:4d:ef:b2:66:
78:44:9c:b1:55:15:b4:27:d3:0d:0d:b6:ad:81:1b:
83:f5:ae:55:7a:d9:de:77:2e:bd:e7:40:30:15:86:
83:dd:85:34:67:37:78:dc:34:dd:25:26:ae:31:ca:
30:f0:86:ac:a6:74:2d:e6:95:ba:3b:3a:42:11:89:
cf:52:b3:21:a0:df:64:d5:e1:8c:de:12:c4:1d:da:
1d:84:28:2f:72:4b:1f:53:41:20:87:4d:be:e3:cb:
ad:f4:b6:71:dd:dd:87:84:d9:1e:2e:9b:ac:fb:c5:
3e:17:ea:69:ae:91:5c:a4:5f:a6:15:7c:0c:5b:91:
3c:82:3a:ea:f1:91:37:c0:ce:1b:a6:49:f9:2e:17:
36:ec:22:5e:a3:87:d5:10:45:bb:f4:db:e1:d4:a3:
3c:cb:0f:fe:be:de:20:63:f5:59:c0:68:46:03:c4:
67:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DF:A8:DE:51:88:A1:75:28:F7:29:D5:4F:04:27:0D:05:0D:CB:33
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/Md-o3lGIoXUo9ynVTwQnDQUNyzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ab80:400::/42
Signature Algorithm: sha256WithRSAEncryption
3a:0e:2f:a7:c1:85:c1:d2:8d:d9:ce:d8:66:04:0a:38:40:ed:
41:66:1c:4f:ca:52:fc:34:14:88:2a:55:1d:8e:c6:a5:6b:d0:
c9:44:ae:37:47:61:55:4b:1e:c2:7d:63:47:1d:63:ff:04:88:
8b:a3:a8:b6:4b:2d:99:2a:82:18:1e:70:c6:7c:6c:a9:be:01:
3e:7b:8d:eb:1a:52:d1:72:4d:4f:52:2d:a2:95:8b:5f:a2:06:
fc:88:a2:5d:74:d4:99:34:5b:a2:e9:4a:d0:17:52:98:4d:74:
da:c4:a7:ba:13:3b:81:0b:74:3c:c8:4f:86:7c:cb:8a:35:b7:
33:a9:b5:7a:91:5a:4e:4d:ef:95:47:11:97:aa:a5:1d:53:aa:
a4:ce:e1:3d:e2:01:c2:20:f3:1e:32:21:93:85:18:d9:93:8a:
da:b6:c9:47:e2:fc:1a:16:9e:78:f0:04:92:1d:e0:15:0f:6a:
84:7c:61:1f:fc:db:0b:20:5a:65:97:0d:d9:84:a4:9c:dc:2c:
c4:b8:a0:5f:f8:c2:ed:dd:80:1d:13:0a:0d:bd:f9:26:60:31:
63:93:16:d7:ca:10:6d:62:86:f8:cb:b6:d8:09:f8:02:e3:57:
7c:31:70:71:01:09:4a:ca:d1:c7:96:78:0c:5f:de:85:5d:0e:
62:a0:10:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:51 2026 by rpki-client