Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/804-MeEO0g-_MizlWu-me_Bi1go.roa
File: 804-MeEO0g-_MizlWu-me_Bi1go.roa (raw, json)
Hash identifier: I8bLYT3lWkCNyOX1go70Y+6k5QxztylCSL/uClW7eek=
Subject key identifier: F3:4E:3E:31:E1:0E:D2:0F:BF:32:2C:E5:5A:EF:A6:7B:F0:62:D6:0A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019EDEB4259A4F547FED717F8AE1A3D81938
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/804-MeEO0g-_MizlWu-me_Bi1go.roa
Signing time: Fri 19 Jun 2026 07:06:48 +0000
ROA not before: Fri 19 Jun 2026 07:06:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a10:7403::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 00:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:de:b4:25:9a:4f:54:7f:ed:71:7f:8a:e1:a3:d8:19:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 19 07:06:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f34e3e31e10ed20fbf322ce55aefa67bf062d60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:24:a0:82:ec:61:02:19:12:64:8d:73:8f:
0d:bc:02:47:ba:7c:90:43:81:e3:95:b9:c4:8d:d2:
ae:a0:66:3d:09:18:00:c3:bc:d4:24:79:96:fb:58:
ec:cd:58:3d:cd:37:80:4d:45:c7:e8:24:ae:fa:96:
1c:82:30:ab:22:c6:ae:07:16:3f:80:d4:4f:20:c6:
ec:b3:45:2a:f1:1b:28:09:7e:88:48:00:62:ae:14:
56:71:db:d2:9f:1e:57:bf:f5:9d:51:41:a1:a0:c6:
85:c2:43:d1:07:c5:5a:c5:2a:70:c2:9a:5c:47:62:
b1:b6:0d:fe:65:84:56:27:2c:ee:7c:b2:c0:44:fb:
d9:dd:42:e9:02:64:6a:c1:9b:e8:04:ee:8f:0a:0d:
72:fd:b1:e4:68:b1:8f:5a:ca:89:fe:c8:dc:ba:2c:
e7:f3:8e:90:1c:22:2a:ac:bf:0d:98:96:b2:89:b1:
2a:02:83:1d:93:e9:e6:73:0c:b2:f1:bd:ee:b4:1a:
43:32:5e:9e:e4:8a:99:6e:23:b2:39:da:85:d1:53:
7f:83:40:dd:62:86:b5:df:b6:68:9c:d5:c3:b0:8d:
19:41:78:ae:f9:06:c9:e3:0d:c3:51:b9:c4:60:6e:
06:5f:00:a4:ac:e4:c6:4f:05:9d:c2:bc:8b:88:a1:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4E:3E:31:E1:0E:D2:0F:BF:32:2C:E5:5A:EF:A6:7B:F0:62:D6:0A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/804-MeEO0g-_MizlWu-me_Bi1go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:7403::/32
Signature Algorithm: sha256WithRSAEncryption
42:f0:0a:ff:eb:f3:af:b9:4a:0f:d4:07:a1:1e:b3:ee:07:97:
9d:45:1b:d0:36:a1:22:2c:56:32:0e:2e:7d:b7:d1:34:95:f9:
89:84:b4:19:31:ae:9e:63:36:24:78:f4:78:c0:5a:19:d1:d5:
7c:b6:fd:df:7e:b8:ce:de:2a:d6:b4:e0:44:90:80:21:0c:f8:
80:3b:a7:cf:f2:cc:7e:cd:03:a6:4a:82:77:b1:79:3b:bd:3d:
1b:ba:6d:4c:79:0b:03:00:65:60:2c:24:92:2e:a8:b7:ca:5e:
13:3e:cf:8a:ca:23:33:26:bf:e7:76:f4:d7:1f:1a:0b:7d:0c:
ad:47:90:6a:0a:11:f0:32:bc:49:9a:ca:2e:70:9b:64:34:e8:
c2:e3:c1:80:16:fb:c8:e7:64:22:7a:70:2b:eb:7f:4f:01:7e:
65:f4:27:b8:fd:7e:49:85:4b:54:d9:48:44:50:5a:04:67:58:
9a:e8:72:d1:c5:ed:f5:52:1b:55:86:f6:98:e3:21:b3:a3:f5:
09:d2:c5:d1:16:50:dd:9a:e5:e4:76:9b:3b:42:39:ee:4d:b9:
8f:1f:ad:bf:46:64:9d:3c:58:5d:16:3b:e7:d0:40:99:c4:f8:
05:f8:01:f4:23:1f:d3:f7:06:cf:ec:44:0b:74:5d:15:32:bf:
b5:98:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:10 2026 by rpki-client