Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/mXt4HKXSE7Bpfjr3LnWguxRE1no.roa
File: mXt4HKXSE7Bpfjr3LnWguxRE1no.roa (raw, json)
Hash identifier: /SPJRgzd6O92Kkh/u5O2WPpiB2yK2TIw2DDutRsMCgA=
Subject key identifier: 99:7B:78:1C:A5:D2:13:B0:69:7E:3A:F7:2E:75:A0:BB:14:44:D6:7A
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019FD11C879FEAF3B0BC64B5FDC48C41D14B
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/mXt4HKXSE7Bpfjr3LnWguxRE1no.roa
Signing time: Wed 05 Aug 2026 08:48:55 +0000
ROA not before: Wed 05 Aug 2026 08:48:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219094
IP address blocks: 2a0a:79c0:1500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:1c:87:9f:ea:f3:b0:bc:64:b5:fd:c4:8c:41:d1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Aug 5 08:48:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=997b781ca5d213b0697e3af72e75a0bb1444d67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:53:8b:a0:7f:41:a4:eb:eb:8e:5f:5d:35:
cf:57:48:bc:c5:1a:a2:dc:00:a6:38:e8:66:4f:27:
45:88:c0:df:c2:6d:34:05:ea:00:34:d2:ba:3d:ab:
31:70:93:1b:d7:f8:c6:5f:dd:e9:71:98:83:a2:15:
78:95:9d:f5:07:cb:83:62:4e:8a:96:45:34:75:38:
7f:83:ec:e2:75:e5:7c:5f:0b:b3:b7:5c:2a:b0:1c:
2a:1a:7a:23:40:19:70:85:97:06:26:78:cf:d0:3a:
79:45:f8:ee:c2:f3:74:21:4f:08:59:69:d7:00:b8:
65:31:30:e2:d7:2e:6a:ef:46:e1:cc:e7:17:cc:4d:
3a:ed:f4:a2:1f:42:d2:fb:fa:ee:a6:c4:6a:25:c6:
1b:6c:fb:0d:25:ce:eb:b8:d0:8a:7b:af:8e:b7:a5:
e7:42:50:be:b0:d5:36:23:8e:c7:aa:8f:87:68:20:
a7:f7:64:9b:a9:a5:97:00:30:c9:94:c2:87:f3:98:
08:fc:1e:bd:bb:e3:fd:41:61:7b:93:50:1d:28:9f:
79:b2:1c:95:cb:85:59:02:c4:37:59:b9:03:a6:51:
f4:cf:92:04:ce:67:52:bb:26:a1:fa:b7:45:81:f9:
d9:ff:cc:46:3b:7f:2e:d5:73:9f:2e:6c:cd:31:15:
3d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7B:78:1C:A5:D2:13:B0:69:7E:3A:F7:2E:75:A0:BB:14:44:D6:7A
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/mXt4HKXSE7Bpfjr3LnWguxRE1no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:1500::/48
Signature Algorithm: sha256WithRSAEncryption
c4:69:56:a8:da:53:61:28:f1:8d:c6:bb:5d:52:8c:00:0e:50:
f2:7e:b8:3c:f1:e6:e5:97:cf:74:84:a4:56:96:43:16:27:6f:
fa:67:df:af:a3:f0:c8:89:bf:a4:d2:19:0f:1b:a7:54:21:a1:
2f:eb:cb:c6:22:17:81:cf:ec:70:c6:28:3e:b7:f4:74:e3:2f:
e4:02:ab:61:1b:d4:f2:1e:dc:2c:1f:8f:79:45:d5:15:60:6b:
0f:04:62:6c:3f:36:91:c9:ec:dc:d7:bf:7d:b0:4e:1a:da:95:
74:73:7d:95:43:1c:dc:ee:2e:88:f0:67:3a:99:07:6a:d9:47:
bb:44:83:ee:21:5c:de:b8:29:f5:66:9e:f3:e9:86:ae:80:80:
e5:ad:4c:14:b5:f5:87:95:c7:8f:b3:67:a0:dc:92:e5:6a:cb:
3e:e6:5a:c4:8c:3a:64:b5:13:c7:f2:41:63:26:0e:6d:be:be:
50:f0:18:19:33:e4:98:01:2a:75:59:73:70:e7:a9:b9:a4:9f:
ab:47:4a:02:0e:a8:c5:05:b6:24:b0:9c:cd:dd:45:3a:b1:96:
1a:af:35:0d:d1:1a:04:42:54:e5:c0:eb:0e:8d:51:78:13:11:
ab:67:bf:a0:01:5b:f2:39:78:ae:7e:78:9c:9c:4b:52:4e:df:
8a:66:57:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:48:09 2026 by rpki-client