Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/moI9DeBg2QtdD9wbIRCAeujYiCY.roa
File: moI9DeBg2QtdD9wbIRCAeujYiCY.roa (raw, json)
Hash identifier: xrfXx1gOpxEvA3MW11AUhiF0Qid/L5JA+RuF8pfxLv0=
Subject key identifier: 9A:82:3D:0D:E0:60:D9:0B:5D:0F:DC:1B:21:10:80:7A:E8:D8:88:26
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019E8E1C27B70E03C5E6811C755C2B40CE7A
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/moI9DeBg2QtdD9wbIRCAeujYiCY.roa
Signing time: Wed 03 Jun 2026 15:31:10 +0000
ROA not before: Wed 03 Jun 2026 15:31:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 103.17.201.0/24 maxlen: 24
192.144.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:1c:27:b7:0e:03:c5:e6:81:1c:75:5c:2b:40:ce:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jun 3 15:31:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a823d0de060d90b5d0fdc1b2110807ae8d88826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:40:43:a7:17:3d:8a:5e:64:40:bb:d9:69:30:
42:11:9f:90:7e:10:eb:c3:0e:50:68:c1:ba:63:7b:
3d:70:99:9f:cf:18:f5:2b:c6:b5:24:04:74:5f:3f:
a9:2f:52:9c:c7:bb:63:31:84:8b:4b:23:76:ac:56:
53:00:f8:0c:89:b9:9d:b1:18:03:70:7e:a8:94:d0:
6a:d6:be:49:ec:d8:15:f3:2b:3f:49:79:d0:5a:82:
2d:6f:53:bb:1f:35:5a:16:69:3f:de:4e:6e:36:f8:
b4:e9:85:49:86:81:c9:a1:3e:db:7e:10:bf:c2:8b:
dc:37:77:4c:83:3f:64:aa:bd:52:e8:4c:17:0a:3c:
1b:a9:74:ae:6e:94:d9:fb:d5:61:a9:81:8a:d9:d3:
7c:ee:fb:96:51:94:63:ae:fd:54:9e:1d:72:40:6a:
73:20:d6:6f:70:e2:12:92:62:81:db:88:5e:4f:3c:
80:0c:6d:ab:8a:2d:dd:83:08:74:7c:42:08:7f:ca:
61:d1:22:1c:ff:cf:8c:61:fb:d2:7b:26:2e:db:08:
5e:a1:5d:e2:54:de:74:29:26:c1:f9:81:ec:3d:df:
15:7c:e6:4e:cd:44:79:61:ad:79:42:9f:e0:c4:44:
b1:41:7a:41:0b:df:c1:37:93:f7:a6:88:57:4a:79:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:82:3D:0D:E0:60:D9:0B:5D:0F:DC:1B:21:10:80:7A:E8:D8:88:26
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/moI9DeBg2QtdD9wbIRCAeujYiCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.201.0/24
192.144.79.0/24
Signature Algorithm: sha256WithRSAEncryption
af:41:e9:23:3d:02:f6:b3:2a:29:8c:1b:52:45:34:80:4e:05:
52:1d:da:6e:ba:b4:d2:41:95:ed:44:13:75:19:09:d9:1c:ca:
9c:d4:2d:69:ad:70:03:12:f6:ef:52:01:02:d4:3c:3d:1c:e5:
58:dc:94:73:f7:ae:30:80:9e:f3:e7:ef:fb:dd:e4:64:33:9f:
ea:43:2f:17:a6:0e:8c:67:e3:00:84:71:fc:c2:f0:50:74:df:
fc:df:b9:0d:ce:04:3c:6d:1f:03:c3:c3:ae:8b:23:17:28:a5:
9a:63:1c:65:03:fa:ff:81:82:1e:e9:59:dd:24:45:d1:58:ae:
ea:bb:7d:6c:65:93:9d:df:d9:f3:59:b9:68:38:8f:da:38:d1:
99:a4:e3:e4:ed:c0:e5:ba:0f:6a:ce:eb:ab:2d:50:d1:98:b9:
dd:f5:20:d6:e1:6b:ea:59:d5:20:02:31:5f:a4:0d:c0:a3:ec:
37:49:3c:72:3e:7e:04:3e:4a:57:23:69:55:03:e8:07:fb:95:
88:88:d2:cf:4b:c3:56:9f:d3:22:54:4b:ff:fe:30:55:e8:55:
a1:24:01:49:7c:88:f7:fd:c2:0a:67:50:2d:63:c9:72:aa:12:
a6:ac:18:8b:76:44:90:63:f1:a8:a8:b9:cb:32:f0:cc:ab:cc:
4f:99:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:57:42 2026 by rpki-client