Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/MgiccJNk6u1_Rmu2sbPimYV-tWE.roa
File: MgiccJNk6u1_Rmu2sbPimYV-tWE.roa (raw, json)
Hash identifier: nBDesQRMFVXGb7U9e7IUdgTS3U1PUapSB27usUsx9nM=
Subject key identifier: 32:08:9C:70:93:64:EA:ED:7F:46:6B:B6:B1:B3:E2:99:85:7E:B5:61
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019F47F5E1E773C201EBC46EC0833B7F5B84
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/MgiccJNk6u1_Rmu2sbPimYV-tWE.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 2a0e:6c40::/29 maxlen: 29
2a0f:33c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e1:e7:73:c2:01:eb:c4:6e:c0:83:3b:7f:5b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32089c709364eaed7f466bb6b1b3e299857eb561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:33:ab:f0:fa:33:25:cd:54:bb:ad:50:d2:d3:
cc:39:81:5f:0a:a0:d4:64:77:ae:e2:0e:19:8b:1d:
eb:67:2b:f5:5b:fc:ae:19:04:0f:54:7c:94:8c:1b:
43:75:c3:9c:e4:25:b1:b7:fe:0e:40:8f:96:41:48:
67:42:f1:a3:e1:96:7e:44:d6:18:08:f7:67:ed:02:
0c:57:db:a1:4b:0c:60:9b:ce:a7:55:2a:68:c8:98:
72:13:5c:1c:85:ba:62:b8:73:d4:18:fb:23:1c:1a:
6b:16:fa:0c:85:f3:38:d1:1d:42:96:49:a2:1c:6f:
ee:0d:dd:ab:ce:6d:56:2e:3b:4d:59:00:a4:8c:05:
65:7b:e8:3b:d9:3c:c2:bd:ac:e9:c9:9a:6b:fc:58:
f3:89:84:90:ea:59:d2:bf:5c:73:36:ef:58:58:a1:
4b:a2:bf:98:3a:03:08:76:0c:9d:0e:fa:1e:52:47:
95:b6:26:bb:b9:ec:29:b0:2d:b3:22:6e:02:cb:14:
8c:fe:27:16:b0:b0:59:6a:c7:40:17:c2:f1:ec:55:
92:75:79:69:ee:4b:5e:61:ec:94:88:87:20:c6:47:
94:7b:36:ad:7b:17:57:db:dd:5d:26:72:f8:be:24:
9e:11:09:42:65:34:bd:cb:23:92:fb:93:64:c3:3f:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:08:9C:70:93:64:EA:ED:7F:46:6B:B6:B1:B3:E2:99:85:7E:B5:61
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/MgiccJNk6u1_Rmu2sbPimYV-tWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:6c40::/29
2a0f:33c0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:93:b7:6f:28:c5:0e:c8:2d:ac:5d:fc:51:5f:1d:5b:1f:ab:
33:d8:f6:12:bc:d3:10:7b:04:7d:2c:2c:20:de:5f:bd:b6:09:
3d:26:c0:eb:63:2d:e7:8e:fa:bf:59:c2:d8:dd:5a:b6:80:26:
9b:41:53:ca:2d:47:be:bb:53:00:42:d3:6f:13:f2:a8:69:fd:
d9:c6:ff:45:10:c1:66:a1:43:09:0c:cd:b2:81:57:7c:67:97:
a3:ea:03:e6:a1:b8:54:82:7b:18:eb:b4:fd:5c:7e:64:0d:4d:
b8:29:1c:1c:b3:8d:a3:df:2a:8f:63:e8:bb:0b:b1:7f:ee:95:
35:f4:fe:ca:82:12:f6:88:c5:16:c1:ea:bc:ec:e3:4b:02:7e:
39:52:29:a9:5a:31:f2:7d:ed:02:3d:f7:b8:df:a6:7d:0d:e3:
91:9d:45:27:98:52:99:5b:c0:77:da:74:bf:2a:94:8d:3e:0c:
b0:e5:b4:d1:37:fe:63:7d:76:e5:bc:64:31:32:18:d1:a9:96:
65:40:df:60:ef:0d:3a:18:84:e5:4d:30:b2:4b:59:04:92:2e:
ff:6e:1f:63:74:e7:a7:b0:3f:64:53:5a:2e:4f:0f:8a:fa:b9:
78:d6:53:e4:b9:9a:2d:ba:7d:f0:9f:67:cf:91:05:79:a3:bd:
af:e8:1a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:47 2026 by rpki-client