Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/mojgojG2fUmUNr6AoobrPz3Orxo.roa
File: mojgojG2fUmUNr6AoobrPz3Orxo.roa (raw, json)
Hash identifier: moY2zU8wsD2X98MGIhQvmb/eCgnx1fygo8u6oqFIgQ0=
Subject key identifier: 9A:88:E0:A2:31:B6:7D:49:94:36:BE:80:A2:86:EB:3F:3D:CE:AF:1A
Certificate issuer: /CN=663c7e368d18110a9287fd77a90e89c6736a78ca
Certificate serial: 019F2368CAC8B93C7FD029B2BF2ED0392862
Authority key identifier: 66:3C:7E:36:8D:18:11:0A:92:87:FD:77:A9:0E:89:C6:73:6A:78:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zjx-No0YEQqSh_13qQ6JxnNqeMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/mojgojG2fUmUNr6AoobrPz3Orxo.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 185.181.12.0/24 maxlen: 24
2a0a:bb80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Zjx-No0YEQqSh_13qQ6JxnNqeMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Zjx-No0YEQqSh_13qQ6JxnNqeMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zjx-No0YEQqSh_13qQ6JxnNqeMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 18:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ca:c8:b9:3c:7f:d0:29:b2:bf:2e:d0:39:28:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=663c7e368d18110a9287fd77a90e89c6736a78ca
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a88e0a231b67d499436be80a286eb3f3dceaf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:3c:16:4a:89:82:ed:85:5e:0d:59:31:be:
67:d2:cc:c9:94:c7:7d:8e:3e:e3:3b:d6:e7:b8:35:
36:83:8a:64:f9:68:00:1f:f9:eb:6c:15:f8:3d:08:
b9:32:37:48:d7:3c:0a:d7:99:7e:88:8c:4d:b1:fd:
20:f1:f0:ba:29:20:21:af:6f:fd:ae:41:ba:a2:20:
93:96:36:f5:00:9d:93:73:c5:6e:53:ff:40:4d:97:
06:1f:b3:62:0b:e4:8e:fb:4c:e9:1a:7a:2c:6e:a6:
a1:0e:9f:41:77:30:d4:6d:1f:f2:2a:89:78:20:4c:
7b:53:e6:49:54:1f:5a:20:a1:64:83:2e:b1:ba:30:
19:7b:8d:95:11:14:0f:f7:de:30:ac:8f:2b:68:68:
7f:a1:5c:9b:c8:67:1d:d0:d0:13:03:ae:ce:e3:22:
3f:68:4f:87:50:ae:6c:46:99:9c:bb:93:65:d1:7a:
9c:af:54:f0:4c:ea:ae:ce:6d:5e:c6:33:40:e1:03:
58:7b:6c:83:65:e3:c4:46:33:b3:1d:92:43:b3:97:
fd:26:9a:c0:74:59:63:99:98:12:e5:b5:8b:a7:c5:
10:b7:e0:6a:9b:7c:f0:53:ce:3e:39:14:8c:77:16:
f9:9d:79:3d:2b:a5:c0:a6:c7:f2:8d:fc:c0:cf:95:
04:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:88:E0:A2:31:B6:7D:49:94:36:BE:80:A2:86:EB:3F:3D:CE:AF:1A
X509v3 Authority Key Identifier:
keyid:66:3C:7E:36:8D:18:11:0A:92:87:FD:77:A9:0E:89:C6:73:6A:78:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zjx-No0YEQqSh_13qQ6JxnNqeMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/mojgojG2fUmUNr6AoobrPz3Orxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Zjx-No0YEQqSh_13qQ6JxnNqeMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.12.0/24
IPv6:
2a0a:bb80::/48
Signature Algorithm: sha256WithRSAEncryption
78:d5:8e:06:d4:d6:de:84:36:07:f7:65:41:c4:78:b1:7c:ef:
55:66:96:9b:1d:3e:34:9e:41:76:1f:00:93:24:43:61:b4:e5:
f8:0c:5f:9a:e7:3b:62:9d:76:1f:d1:85:72:3b:d9:45:38:94:
3e:93:a8:7a:9e:ef:a9:f0:fb:b8:53:22:23:9d:b4:fd:f6:5c:
34:0d:31:83:31:ba:77:1f:18:1c:81:83:9c:4b:54:13:f3:cc:
83:64:b8:d5:07:fd:f6:ea:71:e9:62:27:2a:d7:46:2a:6c:b7:
d7:a7:cc:1c:de:43:17:f2:15:1f:d5:26:c9:0f:58:5c:2c:5d:
dc:6a:8e:2b:fa:70:e5:9a:94:77:b3:94:50:06:a8:ae:e9:9f:
bb:03:1b:50:10:b0:c4:ee:f1:fa:25:1a:0e:f5:47:fc:32:d3:
10:79:43:7f:f0:56:d8:66:1f:8a:cf:65:de:57:47:cc:20:28:
a8:e1:6f:d2:34:b9:3a:bf:dc:d6:73:1d:e1:53:05:b9:f4:1b:
55:47:52:11:8d:bb:ba:39:df:25:1d:45:31:14:15:62:bf:46:
69:d4:c5:6a:ed:3d:49:69:9e:fa:84:73:b5:29:38:30:b4:9a:
35:a0:d8:15:79:d9:e0:c6:00:7f:6f:48:a4:83:1a:fb:1a:5f:
9d:3c:db:4e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ8jaMrIuTx/0Cmyvy7QOShiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2M2M3ZTM2OGQxODExMGE5Mjg3ZmQ3N2E5MGU4OWM2NzM2
YTc4Y2EwHhcNMjYwNzAyMTUxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTg4ZTBhMjMxYjY3ZDQ5OTQzNmJlODBhMjg2ZWIzZjNkY2VhZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaQ8FkqJgu2FXg1ZMb5n0szJlMd9
jj7jO9bnuDU2g4pk+WgAH/nrbBX4PQi5MjdI1zwK15l+iIxNsf0g8fC6KSAhr2/9
rkG6oiCTljb1AJ2Tc8VuU/9ATZcGH7NiC+SO+0zpGnosbqahDp9BdzDUbR/yKol4
IEx7U+ZJVB9aIKFkgy6xujAZe42VERQP994wrI8raGh/oVybyGcd0NATA67O4yI/
aE+HUK5sRpmcu5Nl0Xqcr1TwTOquzm1exjNA4QNYe2yDZePERjOzHZJDs5f9JprA
dFljmZgS5bWLp8UQt+Bqm3zwU84+ORSMdxb5nXk9K6XApsfyjfzAz5UELwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJqI4KIxtn1JlDa+gKKG6z89zq8aMB8GA1UdIwQY
MBaAFGY8fjaNGBEKkof9d6kOicZzanjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmp4LU5vMFlFUXFTaF8xM3FRNkp4bk5xZU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAt
ZTBmNWQ4NmUzN2EzLzEvbW9qZ29qRzJmVW1VTnI2QW9vYnJQejNPcnhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAtZTBmNWQ4NmUzN2Ez
LzEvWmp4LU5vMFlFUXFTaF8xM3FRNkp4bk5xZU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAubUMMA8E
AgACMAkDBwAqCruAAAAwDQYJKoZIhvcNAQELBQADggEBAHjVjgbU1t6ENgf3ZUHE
eLF871VmlpsdPjSeQXYfAJMkQ2G05fgMX5rnO2Kddh/RhXI72UU4lD6TqHqe76nw
+7hTIiOdtP32XDQNMYMxuncfGByBg5xLVBPzzINkuNUH/fbqceliJyrXRipst9en
zBzeQxfyFR/VJskPWFwsXdxqjiv6cOWalHezlFAGqK7pn7sDG1AQsMTu8folGg71
R/wy0xB5Q3/wVthmH4rPZd5XR8wgKKjhb9I0uTq/3NZzHeFTBbn0G1VHUhGNu7o5
3yUdRTEUFWK/RmnUxWrtPUlpnvqEc7UpODC0mjWg2BV52eDGAH9vSKSDGvsaX508
204=
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:44:43 2026 by rpki-client