Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/mUEZC5H3MXyyt4-uWFxfqv4yr6I.roa
File: mUEZC5H3MXyyt4-uWFxfqv4yr6I.roa (raw, json)
Hash identifier: ehbqUlgHCAgiiNwnrseaW6CbvaWEzIK/L5oagGqgDYw=
Subject key identifier: 99:41:19:0B:91:F7:31:7C:B2:B7:8F:AE:58:5C:5F:AA:FE:32:AF:A2
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019F47D22B87221F3B042F216CFEB5DEF9EB
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/mUEZC5H3MXyyt4-uWFxfqv4yr6I.roa
Signing time: Thu 09 Jul 2026 16:59:43 +0000
ROA not before: Thu 09 Jul 2026 16:59:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60262
IP address blocks: 2a0f:a40::/29 maxlen: 29
2a0f:fc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:d2:2b:87:22:1f:3b:04:2f:21:6c:fe:b5:de:f9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 9 16:59:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9941190b91f7317cb2b78fae585c5faafe32afa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:4d:38:8a:85:a9:5b:e4:8a:ff:3d:cc:97:
4f:03:ee:98:a2:47:3c:b2:a3:c4:45:e4:0a:85:f7:
9a:c4:35:17:0b:76:4a:06:d8:a7:33:0a:a5:02:59:
f8:de:06:46:ed:f9:66:39:58:46:05:4a:76:ad:95:
5e:53:93:28:96:5c:cc:5f:46:57:50:70:c8:6c:e4:
47:c8:15:d1:b2:3c:8a:8e:1e:d0:1e:ba:2e:d5:0a:
5b:52:bd:a6:38:53:4a:dd:06:53:d7:a8:bf:48:38:
4b:ae:05:fd:60:f2:96:2f:ce:72:1f:21:c5:68:c2:
e5:6e:e8:b7:a8:d9:4f:54:c1:e8:19:55:78:d0:8f:
e8:50:b6:39:0b:95:68:be:e5:2b:7e:0f:99:00:93:
de:07:87:73:22:b0:77:ad:81:13:89:e1:7a:e6:4d:
fd:c3:74:37:be:d4:55:10:fd:a9:a0:2d:b7:49:81:
0e:69:3e:30:81:53:86:e6:74:90:b2:eb:fd:ed:c4:
55:29:f4:77:ff:b7:be:2c:9a:ea:43:ff:9c:0e:05:
d2:87:23:4f:55:4b:7b:dc:25:b5:ff:f3:4a:6c:38:
14:91:8a:78:22:8d:96:ca:5f:d9:f0:f7:2b:d3:43:
8f:4d:58:21:86:9b:a2:37:53:2b:f1:50:f9:dd:29:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:41:19:0B:91:F7:31:7C:B2:B7:8F:AE:58:5C:5F:AA:FE:32:AF:A2
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/mUEZC5H3MXyyt4-uWFxfqv4yr6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:a40::/29
2a0f:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
5c:34:a3:ec:f8:49:05:fc:0f:59:52:dd:b9:7a:39:2e:3a:fd:
b5:81:44:40:78:6b:24:17:d0:34:97:66:7c:47:5e:e7:74:91:
63:e8:7a:b2:b3:b9:48:e8:7f:b7:23:fb:2b:14:fc:d7:ae:48:
45:0d:1c:14:17:51:79:72:5f:b3:79:f3:7c:ad:e2:55:f5:b5:
fd:63:7c:b1:2b:3a:18:32:30:98:e3:91:84:56:a2:e1:e6:89:
12:ce:bb:29:e3:0b:0f:22:b6:08:4b:20:e3:a3:40:68:45:c3:
04:fc:c0:6f:ba:de:e8:a4:ab:bf:7e:78:a1:4b:7c:c0:ed:09:
94:2e:8b:f1:de:ee:28:de:77:a3:f4:07:b7:55:15:79:49:bc:
2c:b0:58:12:90:6c:72:c4:24:68:28:c5:ee:e2:91:d1:b1:09:
c2:64:50:1c:06:d4:d5:5d:28:32:61:41:2d:4c:9c:d4:43:2f:
62:9e:9c:73:b3:4e:31:11:88:90:f9:dd:4c:b9:f6:26:22:9f:
91:b5:80:9c:34:57:a0:98:fe:f7:cd:e8:8d:e9:cd:05:c1:86:
13:fa:01:08:8a:54:fb:35:31:0e:83:29:74:32:8f:ad:c7:e8:
1b:98:e5:f0:ac:ab:8c:a7:bc:ce:8a:63:80:2c:27:c1:d2:bf:
95:ea:c4:7d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ9H0iuHIh87BC8hbP613vnrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjYwNzA5MTY1OTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTQxMTkwYjkxZjczMTdjYjJiNzhmYWU1ODVjNWZhYWZlMzJhZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCxNOIqFqVvkiv89zJdPA+6Yokc8
sqPEReQKhfeaxDUXC3ZKBtinMwqlAln43gZG7flmOVhGBUp2rZVeU5MollzMX0ZX
UHDIbORHyBXRsjyKjh7QHrou1QpbUr2mOFNK3QZT16i/SDhLrgX9YPKWL85yHyHF
aMLlbui3qNlPVMHoGVV40I/oULY5C5VovuUrfg+ZAJPeB4dzIrB3rYETieF65k39
w3Q3vtRVEP2poC23SYEOaT4wgVOG5nSQsuv97cRVKfR3/7e+LJrqQ/+cDgXShyNP
VUt73CW1//NKbDgUkYp4Io2Wyl/Z8Pcr00OPTVghhpuiN1Mr8VD53Snb4QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJlBGQuR9zF8srePrlhcX6r+Mq+iMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvbVVFWkM1SDNNWHl5dDQtdVdGeGZxdjR5cjZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKg8KQAMF
AyoPD8AwDQYJKoZIhvcNAQELBQADggEBAFw0o+z4SQX8D1lS3bl6OS46/bWBREB4
ayQX0DSXZnxHXud0kWPoerKzuUjof7cj+ysU/NeuSEUNHBQXUXlyX7N583yt4lX1
tf1jfLErOhgyMJjjkYRWouHmiRLOuynjCw8itghLIOOjQGhFwwT8wG+63uikq79+
eKFLfMDtCZQui/He7ijed6P0B7dVFXlJvCywWBKQbHLEJGgoxe7ikdGxCcJkUBwG
1NVdKDJhQS1MnNRDL2KenHOzTjERiJD53Uy59iYin5G1gJw0V6CY/vfN6I3pzQXB
hhP6AQiKVPs1MQ6DKXQyj63H6BuY5fCsq4ynvM6KY4AsJ8HSv5XqxH0=
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:48 2026 by rpki-client