Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MvOdlP-P1LHcVdCiY1LnehIFGYI.roa
File: MvOdlP-P1LHcVdCiY1LnehIFGYI.roa (raw, json)
Hash identifier: UxKv0xmznilB6FV3bgyNXLLGm7hTH9EWi/qq2ZdCfG4=
Subject key identifier: 32:F3:9D:94:FF:8F:D4:B1:DC:55:D0:A2:63:52:E7:7A:12:05:19:82
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C6D1ECC49E67C41AB56CFCA95FF551579
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MvOdlP-P1LHcVdCiY1LnehIFGYI.roa
Signing time: Tue 17 Feb 2026 19:41:00 +0000
ROA not before: Tue 17 Feb 2026 19:41:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 2a0e:f600:55::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 12:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6d:1e:cc:49:e6:7c:41:ab:56:cf:ca:95:ff:55:15:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 17 19:41:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32f39d94ff8fd4b1dc55d0a26352e77a12051982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:c9:18:b4:06:2e:81:eb:68:6d:94:0b:c9:
7f:47:ad:8d:f7:31:b7:b0:a0:51:b5:6f:2a:7d:67:
4d:f8:d2:34:d0:69:8a:07:7e:93:4b:3a:d5:d1:b1:
7a:d9:5a:3f:25:3e:6a:87:13:37:04:f2:f1:64:56:
6a:0a:e3:c0:7e:78:f8:ad:95:aa:57:2f:36:35:2b:
b7:35:63:18:a1:65:a0:a0:9d:da:cb:85:b9:39:fb:
81:5c:31:58:62:a1:ed:19:e0:c0:8b:e8:29:46:1d:
4a:86:e1:ac:7e:2a:a0:e3:80:0f:83:8d:b5:ae:3e:
b0:c4:2d:88:81:8a:5e:68:7a:64:24:3b:b1:25:d6:
06:42:10:e0:3b:c9:a5:b0:a8:81:eb:4f:ca:7d:14:
9a:dd:cf:30:0b:e6:6c:3d:48:56:e9:89:a8:d0:42:
ed:b5:72:94:10:d5:de:37:d8:7d:03:4f:a0:bf:a0:
c9:be:fd:b2:40:ea:2f:c0:a0:94:ff:61:6d:9a:d7:
77:1b:85:87:9e:fb:d3:22:2f:b1:34:0d:19:ba:2a:
b6:69:15:f9:4c:ff:11:2a:ac:42:10:bc:10:92:83:
f2:99:8a:20:ca:80:b1:ac:c0:f0:99:98:52:f2:f1:
a0:4a:18:d3:6e:78:30:c6:dd:ef:b0:11:ed:42:86:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F3:9D:94:FF:8F:D4:B1:DC:55:D0:A2:63:52:E7:7A:12:05:19:82
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MvOdlP-P1LHcVdCiY1LnehIFGYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f600:55::/48
Signature Algorithm: sha256WithRSAEncryption
8c:ca:1c:52:57:5b:50:df:75:8e:fb:85:ae:5f:5d:f1:47:11:
15:2f:46:0b:2c:a9:32:dd:ee:72:01:93:bc:49:7c:d3:2d:f5:
3e:09:a4:87:d2:f5:c4:8a:6c:03:ac:6b:cb:28:f3:50:f7:d6:
c5:d2:23:7c:3d:72:98:e0:19:f4:45:46:bd:65:30:c5:1f:d6:
90:4d:c5:ec:b8:a8:a0:25:68:95:62:1b:e5:f2:7b:f5:a7:d6:
a9:b0:7e:8e:e7:d7:19:54:21:e9:68:5f:56:34:8f:81:07:4b:
aa:89:27:a2:1f:9f:b3:d8:a9:37:0a:2d:46:9a:ac:9c:9d:1a:
6f:50:25:39:86:fa:1b:05:46:32:5b:fe:6c:34:27:23:2a:ae:
93:7d:98:34:90:4e:38:c6:b8:b9:bc:b3:0b:d0:d8:b8:e9:9a:
eb:d2:aa:1e:51:c6:98:cd:d0:a0:ad:37:b7:f3:9a:6c:96:5e:
8f:a4:ca:ec:b8:e5:2e:13:05:88:68:10:a0:f4:af:39:70:43:
36:5d:21:e5:73:19:e6:e5:67:d8:c8:d4:42:71:2e:c3:20:6f:
64:ef:54:b7:e4:68:7d:20:8f:bb:5f:58:eb:dd:6d:3b:8b:6d:
b6:ce:84:ff:c1:f6:b0:07:54:27:bf:4b:76:01:c5:6a:58:75:
ab:3e:ff:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:00:52 2026 by rpki-client