Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/mQrlc71lUlis4f5xw4JjHHVtHkM.roa
File: mQrlc71lUlis4f5xw4JjHHVtHkM.roa (raw, json)
Hash identifier: W/aAt9iNNDyh6wXzL1e35GCmhBrNe27Plwtn7ZH8CXk=
Subject key identifier: 99:0A:E5:73:BD:65:52:58:AC:E1:FE:71:C3:82:63:1C:75:6D:1E:43
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019F47F5E0D4A1ED1B420BF848B23005091A
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/mQrlc71lUlis4f5xw4JjHHVtHkM.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48274
IP address blocks: 2a0f:3440::/29 maxlen: 29
2a0f:34c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e0:d4:a1:ed:1b:42:0b:f8:48:b2:30:05:09:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=990ae573bd655258ace1fe71c382631c756d1e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:e4:ed:65:40:26:49:c4:e7:b0:01:01:25:
cd:fb:44:34:b8:c3:80:2e:06:b2:fa:43:d9:44:f0:
e0:e3:c3:e7:c3:db:b2:a3:c5:08:d2:08:69:77:6e:
94:16:b1:45:b6:df:4d:a6:82:5a:01:96:12:b3:3d:
63:27:ad:e0:c9:bb:cc:95:f8:21:20:5a:40:01:0e:
28:1f:9f:8a:4b:2b:c8:18:34:2a:ac:89:b9:56:8b:
9e:4d:0e:95:f6:ab:d3:94:7b:25:6d:b0:c3:dd:cc:
a4:16:b3:49:13:ac:f5:99:b2:d4:bd:0d:17:79:32:
ac:f5:35:e3:21:a2:7f:a3:f3:9f:c6:f6:15:71:12:
87:f3:f9:53:b5:91:5c:61:f4:bf:65:59:e5:75:36:
d8:cc:03:6e:c4:50:f5:8f:1b:21:21:eb:bb:d9:8a:
76:93:2f:5e:60:d8:32:2b:d2:6a:5b:72:1c:94:03:
20:6f:9d:7e:48:e1:57:d3:0e:e2:99:15:1d:00:c6:
4c:4f:1a:3d:66:46:14:a4:1a:2f:8b:7d:16:4f:a7:
65:5a:29:57:32:3b:e2:e5:80:d2:a3:a0:d5:4e:ad:
73:5d:7b:30:c5:dc:dd:2b:4e:ea:16:cf:9c:f4:05:
b3:b8:98:4c:35:de:9f:2f:e6:c4:4c:94:1a:e5:c9:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0A:E5:73:BD:65:52:58:AC:E1:FE:71:C3:82:63:1C:75:6D:1E:43
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/mQrlc71lUlis4f5xw4JjHHVtHkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3440::/29
2a0f:34c0::/29
Signature Algorithm: sha256WithRSAEncryption
91:7d:2e:b0:46:63:38:4e:8b:11:51:9d:96:05:33:2a:99:ee:
71:9f:5d:a0:9b:de:af:3a:b8:5b:7e:08:a2:cd:92:2d:55:48:
02:b4:50:33:08:19:a9:37:19:c3:e8:9d:bb:45:c0:dd:8c:9f:
d1:cd:01:ab:af:00:02:76:91:5a:33:a7:38:94:ae:e7:aa:b5:
47:47:e8:36:d4:ad:a7:a7:79:20:fa:18:fe:ce:50:6a:4e:4e:
cc:81:cb:d8:d1:eb:ad:2d:2e:02:73:85:24:0d:18:4e:ba:a1:
c2:e1:b2:a6:88:21:5b:8d:86:0c:a4:9e:dd:82:10:56:c1:bc:
04:93:ce:f0:bc:68:a8:6e:12:44:ec:53:f6:7b:65:90:4a:d6:
9a:8e:6f:7e:1d:f2:1e:cb:87:96:86:b2:06:1b:7b:9f:25:38:
b8:e3:f8:55:7e:77:13:6b:db:3c:dc:d6:da:1a:42:47:b9:ab:
11:9d:4f:30:e7:0d:dc:29:3c:fd:10:8f:6b:e6:96:c3:53:18:
ab:14:1f:6a:f6:6d:06:bf:3b:f6:ec:b6:51:29:a4:7e:96:9a:
a0:34:c6:1d:e8:8f:ce:62:7e:ec:fc:bd:3c:1f:cf:ae:b1:d1:
1f:ae:2b:7c:c5:01:1d:4e:09:a3:1f:bd:7c:66:0b:de:d0:06:
5c:eb:b6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:48 2026 by rpki-client