Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/1-muju1NdZo7Yc8JsQEi_Y9DRF7s.roa
File: 1-muju1NdZo7Yc8JsQEi_Y9DRF7s.roa (raw, json)
Hash identifier: iuLlbVe+JPEeIey84sRvj5Y7gApk0UlSqaLt4U2QnZI=
Subject key identifier: FA:6B:A3:BB:53:5D:66:8E:D8:73:C2:6C:40:48:BF:63:D0:D1:17:BB
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019CB246C151389320015D15C8884326EE67
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/1-muju1NdZo7Yc8JsQEi_Y9DRF7s.roa
Signing time: Tue 03 Mar 2026 05:58:27 +0000
ROA not before: Tue 03 Mar 2026 05:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203090
IP address blocks: 216.23.84.0/22 maxlen: 24
216.23.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:46:c1:51:38:93:20:01:5d:15:c8:88:43:26:ee:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Mar 3 05:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa6ba3bb535d668ed873c26c4048bf63d0d117bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:33:2d:4e:2d:28:de:ac:4f:80:de:69:7e:
10:cd:c5:c1:f9:ca:d8:98:a9:27:46:79:c8:46:09:
e5:68:48:9e:11:74:39:d2:27:c1:0f:91:e5:bd:4d:
2e:55:09:19:42:08:5b:2f:e4:d6:0d:05:c5:53:d6:
6f:e6:44:29:ec:db:4d:ea:1f:be:33:c4:e3:d5:6d:
0a:65:94:67:52:bd:af:81:9e:f7:44:8a:96:7b:a0:
83:be:9c:47:d1:e6:7c:fa:30:3e:07:e5:d6:c5:50:
26:94:0c:3d:73:a0:59:c6:e0:0d:9c:ca:e9:a8:ed:
12:00:9b:f2:01:d7:90:65:c7:c6:19:25:3a:72:2a:
0d:38:a3:ba:83:22:be:05:be:cf:de:1f:3a:25:13:
f1:57:cb:2b:c0:ca:36:bb:ca:84:a6:9f:f6:65:19:
74:9e:69:fc:07:17:55:22:56:eb:96:f5:e7:06:fe:
14:58:25:18:4d:21:5f:3e:4c:65:03:b0:19:1f:3a:
cd:7e:b0:55:d7:62:72:3e:ef:bc:f6:8e:d2:87:54:
29:7e:22:86:f6:6e:88:b7:ed:2c:a7:5b:cd:15:9e:
36:db:94:22:42:35:6a:f6:14:41:ba:12:ad:39:af:
02:3d:73:d6:5e:28:b0:c0:eb:c9:8c:e2:c2:6b:40:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6B:A3:BB:53:5D:66:8E:D8:73:C2:6C:40:48:BF:63:D0:D1:17:BB
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/1-muju1NdZo7Yc8JsQEi_Y9DRF7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.23.84.0/22
216.23.92.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:7a:df:50:e9:b5:d6:df:9e:8c:72:64:7e:e1:10:0c:b4:79:
22:5e:f8:57:5d:65:85:0c:e1:82:93:48:4a:db:a0:b4:43:6f:
a1:ca:5e:02:78:93:5b:3e:f5:d4:b4:7f:ad:42:b2:a3:cf:5e:
12:93:25:14:ae:ab:e8:b8:f9:b1:90:7f:ed:42:7b:44:1b:47:
00:79:7c:9d:04:c6:ca:2c:07:2f:c1:2f:04:6a:d2:dc:3f:ba:
b7:72:60:90:af:0d:27:ac:4c:2d:71:9d:34:8d:ac:e3:61:e7:
7c:ff:19:61:ec:ec:1b:26:0f:14:99:eb:8c:e9:56:ff:e5:07:
15:51:f5:a2:27:1a:58:3d:27:6d:4d:ca:3e:37:00:87:6c:0e:
9a:81:3c:93:57:2a:56:2b:ba:df:e1:9b:2d:2c:16:18:1a:8b:
53:12:ea:56:e3:ad:e4:ca:cd:e0:53:fd:fa:f5:83:46:c1:e6:
0f:c7:52:b7:24:09:b3:91:7e:e8:4f:0a:38:b6:e7:38:76:77:
8c:54:2b:b7:30:06:39:95:34:13:5b:44:22:38:07:a9:9b:1b:
a0:07:a0:05:03:27:c7:75:67:9c:a6:38:4b:1e:bb:90:9c:90:
be:94:3e:80:ad:26:8d:99:09:49:93:ba:ac:e1:ae:98:58:94:
2a:26:f0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:14:08 2026 by rpki-client