Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mwl9l-U7m-5o1iMM1UIUeQ3znxg.roa
File: mwl9l-U7m-5o1iMM1UIUeQ3znxg.roa (raw, json)
Hash identifier: E0ufVMfLqrVHcpqc67vuuBC6fPosqUFKoxsh/lmGqcE=
Subject key identifier: 9B:09:7D:97:E5:3B:9B:EE:68:D6:23:0C:D5:42:14:79:0D:F3:9F:18
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01A02D29E6D9EC9A5BC2E7060EA2AECD44CE
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mwl9l-U7m-5o1iMM1UIUeQ3znxg.roa
Signing time: Sun 23 Aug 2026 05:48:35 +0000
ROA not before: Sun 23 Aug 2026 05:48:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 46.37.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2d:29:e6:d9:ec:9a:5b:c2:e7:06:0e:a2:ae:cd:44:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 23 05:48:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b097d97e53b9bee68d6230cd54214790df39f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:7e:84:ff:69:c7:10:5d:8c:6a:42:97:d3:
c3:7a:c1:64:52:3d:82:03:e7:11:7d:23:b8:77:f1:
fd:59:06:cd:21:78:da:3c:53:fe:93:e6:e9:61:51:
63:6c:70:7f:ea:2e:ab:36:b7:14:83:67:23:60:13:
ca:1c:f8:40:f9:40:b9:f8:86:3c:07:dd:98:d3:e3:
3c:b5:42:2d:b6:14:e1:7b:af:7e:ce:ec:42:15:df:
13:3f:18:d5:55:48:ad:53:aa:df:6c:bd:70:ba:7e:
e6:a2:24:53:8a:7b:64:8a:a3:b1:1a:c5:cc:25:96:
88:e1:ad:18:85:a9:cd:18:9a:5e:40:a7:50:8c:9a:
84:95:68:ce:7d:a9:d7:76:8f:dd:e4:b3:2a:af:b2:
67:f0:d2:d9:de:e2:b7:9a:97:8e:ef:0e:34:8f:5d:
9b:58:94:cc:05:af:c2:8c:d4:1a:20:b8:fb:d2:28:
0b:03:ba:af:6a:aa:e7:4f:63:2f:36:03:c1:c1:6b:
50:ce:d0:54:50:b3:76:be:ab:5a:d4:e7:4c:f3:e2:
24:df:2d:33:0e:5b:30:60:14:7b:82:30:6e:47:c2:
1a:9b:aa:8e:fd:8e:44:20:aa:2f:cb:99:b5:5b:0d:
b3:78:c5:84:34:e6:bc:66:e9:0b:38:80:06:52:dd:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:09:7D:97:E5:3B:9B:EE:68:D6:23:0C:D5:42:14:79:0D:F3:9F:18
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mwl9l-U7m-5o1iMM1UIUeQ3znxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.121.0/24
Signature Algorithm: sha256WithRSAEncryption
84:40:a4:4a:0b:d0:c7:05:b7:b6:4c:9d:20:30:71:64:f7:b7:
fc:a8:40:91:94:c5:00:fd:13:51:d1:37:24:59:1a:c8:a0:35:
cd:5a:2a:10:91:f2:17:61:37:45:77:47:58:04:e9:ab:0b:41:
c3:22:d0:90:ae:b3:b1:09:66:3c:b6:8c:a7:7f:18:5e:c6:61:
88:80:04:f1:91:d6:83:2c:1c:00:fa:12:52:ee:25:b9:c6:e5:
55:48:ac:c0:32:c7:4e:f4:a7:98:c4:44:f0:fc:c2:d8:a8:97:
1c:61:06:84:27:07:75:61:ee:0b:9b:00:d6:d0:e4:5f:28:1e:
29:65:88:8c:78:75:a0:be:6e:fa:56:b5:fe:a5:59:72:c5:d5:
b8:98:7d:44:7b:e0:26:31:6f:4e:f9:3a:26:c3:28:56:a4:10:
1e:8e:4d:c4:7f:a8:2c:35:03:ac:8f:6f:64:70:af:71:77:31:
10:d8:14:6d:cd:7d:2c:d5:02:72:33:db:65:ed:3f:0c:7d:fa:
44:b2:49:e4:8d:e5:97:c7:e9:78:3d:78:aa:93:fc:4b:4b:dc:
7d:e7:e2:2a:16:c4:c9:aa:a9:93:af:c8:75:cb:22:03:79:c1:
1d:8d:5f:4d:36:54:8e:20:ec:31:43:2c:1a:0d:e1:45:ec:18:
1b:bd:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:36 2026 by rpki-client