Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/MrG05cfa2pZr2zhr-bMhdkPbMok.roa
File: MrG05cfa2pZr2zhr-bMhdkPbMok.roa (raw, json)
Hash identifier: mAbctiHiSv1i1ujSELikLaUezfCdkm8CN6QX2uXsCg4=
Subject key identifier: 32:B1:B4:E5:C7:DA:DA:96:6B:DB:38:6B:F9:B3:21:76:43:DB:32:89
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A0E808520062DF97899A760A55F1148C48
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/MrG05cfa2pZr2zhr-bMhdkPbMok.roa
Signing time: Mon 28 Sep 2026 12:40:54 +0000
ROA not before: Mon 28 Sep 2026 12:40:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218569
IP address blocks: 2a0d:d940:60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:08:52:00:62:df:97:89:9a:76:0a:55:f1:14:8c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Sep 28 12:40:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32b1b4e5c7dada966bdb386bf9b3217643db3289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:79:11:99:ff:f1:2f:d0:e3:42:06:80:24:
db:0e:f2:76:50:29:de:54:99:e9:6e:b7:71:8d:03:
93:71:eb:b3:53:02:94:32:64:27:69:1f:0d:77:dc:
46:dc:77:1f:e8:0c:a4:79:d0:31:4b:2e:b6:f7:90:
24:91:cf:9e:ae:dd:06:26:98:0e:85:c4:4c:ae:da:
4d:64:fe:3a:ff:7e:38:53:45:4f:f4:98:db:ee:64:
9c:a3:28:8d:d4:75:45:63:7b:62:cc:91:b3:7c:a0:
2a:fa:05:b2:15:a9:1b:ce:c1:a2:b8:97:9e:bd:5d:
59:d2:6d:bc:30:22:82:12:bf:a9:4f:c0:71:5b:b6:
bf:bc:db:7d:ab:d1:fe:2a:ed:bc:ea:20:53:b8:50:
95:1d:11:a9:ce:fd:ad:1d:bd:69:73:99:ca:a1:1b:
e7:f8:75:91:52:1a:94:5f:d8:66:ac:86:a7:94:58:
0f:01:dd:ce:2f:c3:b5:4d:4c:2c:d2:de:bd:c0:00:
95:95:28:7a:3c:61:3c:23:36:22:65:11:0b:ac:ba:
99:e5:e7:3a:76:ff:61:34:14:29:c2:ac:3c:3c:10:
4e:38:0e:b1:ab:77:3b:71:b7:00:41:6a:22:46:81:
ee:2d:1d:ef:19:23:db:33:a9:26:84:45:42:6b:06:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B1:B4:E5:C7:DA:DA:96:6B:DB:38:6B:F9:B3:21:76:43:DB:32:89
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/MrG05cfa2pZr2zhr-bMhdkPbMok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:60::/44
Signature Algorithm: sha256WithRSAEncryption
66:b8:6d:2d:14:c0:4e:90:f4:6d:b0:d3:8f:af:a1:c0:37:d3:
46:49:63:02:83:73:ce:ba:72:0d:b1:bc:25:3a:c3:a6:95:a1:
5a:bd:78:b1:40:90:7b:75:5e:86:b3:f5:5b:e8:b9:c7:97:a1:
0e:70:52:72:2a:b0:46:bd:30:be:4b:2c:5d:ba:fc:75:8e:74:
d2:2f:23:9f:1b:08:50:80:8f:22:9c:16:ea:fe:2d:af:d9:ef:
cc:99:06:3b:12:c1:d9:36:f5:fd:1e:01:bf:41:ca:b8:2d:83:
d1:4f:49:88:a5:e2:b0:e6:95:69:1d:8b:b4:5c:54:f2:db:d3:
6a:c2:57:2f:40:09:7f:4d:6b:71:4d:5f:dc:8c:31:d6:f7:62:
71:8b:45:9a:8a:c3:b3:03:7e:55:c1:cc:53:2b:cd:a0:91:db:
72:ef:ab:93:e6:c9:56:b9:e4:c0:68:60:4e:85:1d:04:33:ad:
92:32:b9:75:f8:b0:a9:4a:72:98:9f:43:c2:38:d6:2c:ae:44:
ae:8b:30:23:4e:21:43:79:d4:f8:22:19:74:30:c3:1d:79:ef:
63:a3:c2:9d:02:b1:62:92:01:ae:31:a7:16:2a:bf:e4:43:a7:
61:03:92:ae:ce:3b:00:e8:4c:88:78:b7:a1:6c:58:ad:96:81:
ea:85:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:41:30 2026 by rpki-client