Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/ma3U6J5zAC0xActYjVFSjzUtrk4.roa
File: ma3U6J5zAC0xActYjVFSjzUtrk4.roa (raw, json)
Hash identifier: MdgK+a8CkJPKt1il9YTirtB1gQs3bYmvym1oYFAiI98=
Subject key identifier: 99:AD:D4:E8:9E:73:00:2D:31:01:CB:58:8D:51:52:8F:35:2D:AE:4E
Certificate issuer: /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial: 019F0AD0FD26EF27C855516D2918CFD32CE2
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/ma3U6J5zAC0xActYjVFSjzUtrk4.roa
Signing time: Sat 27 Jun 2026 20:41:36 +0000
ROA not before: Sat 27 Jun 2026 20:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219331
IP address blocks: 2a14:f705:c875::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:d0:fd:26:ef:27:c8:55:51:6d:29:18:cf:d3:2c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Validity
Not Before: Jun 27 20:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99add4e89e73002d3101cb588d51528f352dae4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e6:85:9c:af:73:ef:bf:e2:26:9b:55:46:1e:
47:aa:18:0d:ae:14:ed:9f:91:27:0b:7d:18:e0:c6:
9a:da:34:0c:54:49:56:8e:d9:f0:e6:8b:1b:12:ac:
83:2f:cd:78:af:2b:2e:83:e5:1c:15:06:71:c9:a6:
15:d9:ed:ba:ba:bb:f2:0f:42:f3:00:65:24:0a:96:
89:9a:80:ae:8a:a5:c5:02:59:4a:11:7b:20:f3:3f:
34:bb:c5:02:75:c3:da:f7:5b:3a:b1:e8:b8:e0:a8:
5f:cf:de:50:14:7e:19:5b:8b:2d:ff:ac:ff:51:46:
0f:e3:54:f8:f5:53:66:8d:2b:a9:39:41:5b:e2:0d:
b3:4a:14:cb:92:41:4a:cb:84:24:21:42:3d:33:58:
04:f7:41:1e:53:e4:fc:14:7e:5d:bd:af:76:dc:55:
69:eb:d2:4b:3a:94:83:8a:d9:a1:82:7f:6b:cd:5e:
d7:4a:4e:84:eb:b0:8c:c1:ab:59:14:82:1d:2c:24:
57:ed:bf:80:2b:d1:86:16:c7:34:9b:82:1e:b9:25:
db:2c:62:8f:7a:2e:17:5a:2a:00:2a:12:46:9a:2f:
e1:a6:f3:75:d2:57:1e:47:f9:7b:da:03:35:81:3d:
e5:27:9e:1b:0c:47:a1:a2:9e:ab:97:1b:ba:57:20:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AD:D4:E8:9E:73:00:2D:31:01:CB:58:8D:51:52:8F:35:2D:AE:4E
X509v3 Authority Key Identifier:
keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/ma3U6J5zAC0xActYjVFSjzUtrk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:f705:c875::/48
Signature Algorithm: sha256WithRSAEncryption
45:d4:16:3b:0a:eb:1b:3e:6e:25:b6:46:58:fc:a4:ca:3c:8a:
77:66:6d:30:ab:a0:cd:f3:42:b2:3a:b2:e0:15:94:b4:e1:5a:
fa:dd:bf:b9:c8:7d:6c:d7:fb:58:c5:7b:95:db:f1:f4:fd:b7:
fb:f1:c9:03:6e:08:04:41:2c:20:e4:8e:28:95:6e:38:23:4b:
21:b3:e3:0a:6e:bd:ea:bf:be:b6:09:5e:15:d0:2e:25:96:df:
e7:44:54:53:0e:27:51:1b:da:6c:f5:27:cc:f9:6b:56:5a:09:
07:c6:42:b0:08:78:f4:42:24:10:d1:6b:11:e6:3e:94:2e:77:
0f:74:dc:9a:0d:4b:09:1c:79:d1:7c:c0:c3:9f:bb:30:a7:fe:
9d:b1:9e:4d:d8:00:16:02:ea:53:9a:c8:50:38:63:68:a8:ee:
0e:c1:d4:10:97:71:aa:ca:50:a0:2b:59:08:44:5d:d7:fe:76:
d2:18:ce:dd:28:2e:81:05:1c:27:b1:3e:77:db:30:c3:cd:af:
05:eb:40:1a:1b:80:8c:41:96:50:13:b5:a1:48:f3:35:34:f7:
33:f3:e8:9d:00:b6:a8:b1:04:5b:3a:5a:5d:e3:fd:44:fe:cd:
3b:21:b3:6c:be:69:67:e3:ca:8c:ca:3a:c6:2a:df:d5:15:ae:
e1:84:fb:84
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8K0P0m7yfIVVFtKRjP0yziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NjA2NWI2MTY2YWVmOTZmY2ZmM2EyZWE1NmZkZmZkMzkw
ZjMxNjYwHhcNMjYwNjI3MjA0MTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWFkZDRlODllNzMwMDJkMzEwMWNiNTg4ZDUxNTI4ZjM1MmRhZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeaFnK9z77/iJptVRh5HqhgNrhTt
n5EnC30Y4Maa2jQMVElWjtnw5osbEqyDL814rysug+UcFQZxyaYV2e26urvyD0Lz
AGUkCpaJmoCuiqXFAllKEXsg8z80u8UCdcPa91s6sei44Khfz95QFH4ZW4st/6z/
UUYP41T49VNmjSupOUFb4g2zShTLkkFKy4QkIUI9M1gE90EeU+T8FH5dva923FVp
69JLOpSDitmhgn9rzV7XSk6E67CMwatZFIIdLCRX7b+AK9GGFsc0m4IeuSXbLGKP
ei4XWioAKhJGmi/hpvN10lceR/l72gM1gT3lJ54bDEehop6rlxu6VyDcwQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJmt1OiecwAtMQHLWI1RUo81La5OMB8GA1UdIwQY
MBaAFCVgZbYWau+W/P86LqVv3/05DzFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjkt
OGM0NTZhZjZiNmJiLzEvbWEzVTZKNXpBQzB4QWN0WWpWRlNqelV0cms0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84Y2RjNDgtMjgyMi00NTk5LWJiNjktOGM0NTZhZjZiNmJi
LzEvSldCbHRoWnE3NWI4X3pvdXBXX2ZfVGtQTVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhT3Bch1
MA0GCSqGSIb3DQEBCwUAA4IBAQBF1BY7CusbPm4ltkZY/KTKPIp3Zm0wq6DN80Ky
OrLgFZS04Vr63b+5yH1s1/tYxXuV2/H0/bf78ckDbggEQSwg5I4olW44I0shs+MK
br3qv762CV4V0C4llt/nRFRTDidRG9ps9SfM+WtWWgkHxkKwCHj0QiQQ0WsR5j6U
LncPdNyaDUsJHHnRfMDDn7swp/6dsZ5N2AAWAupTmshQOGNoqO4OwdQQl3GqylCg
K1kIRF3X/nbSGM7dKC6BBRwnsT532zDDza8F60AaG4CMQZZQE7WhSPM1NPcz8+id
ALaosQRbOlpd4/1E/s07IbNsvmln48qMyjrGKt/VFa7hhPuE
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:05 2026 by rpki-client