Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/mNpdXKWJkISb2lRdTODfubt1kNs.roa
File: mNpdXKWJkISb2lRdTODfubt1kNs.roa (raw, json)
Hash identifier: ySSUuCm7wtMq5dX67A2of7qfSBu2XTsgfJ1fOTuaKd8=
Subject key identifier: 98:DA:5D:5C:A5:89:90:84:9B:DA:54:5D:4C:E0:DF:B9:BB:75:90:DB
Certificate issuer: /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial: 019F1DE5706D3ABD5EA8128E0A085E530C8C
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/mNpdXKWJkISb2lRdTODfubt1kNs.roa
Signing time: Wed 01 Jul 2026 13:36:43 +0000
ROA not before: Wed 01 Jul 2026 13:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44066
IP address blocks: 109.232.120.0/22 maxlen: 22
2a0e:57c0:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:e5:70:6d:3a:bd:5e:a8:12:8e:0a:08:5e:53:0c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Validity
Not Before: Jul 1 13:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98da5d5ca58990849bda545d4ce0dfb9bb7590db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:16:c8:54:c6:98:f0:c1:fc:28:72:e3:94:9b:
41:4c:5a:57:f2:b3:f0:07:bb:e3:55:86:10:e0:7f:
86:e3:28:87:31:21:b9:cd:46:8b:27:31:74:a6:20:
43:b3:04:ed:a4:0d:e3:ef:90:02:ea:f9:31:99:f1:
a5:81:45:c7:ab:e3:d2:1e:6d:80:78:a6:fb:fe:e6:
36:42:ab:92:4e:11:d9:07:9d:20:e6:52:6c:62:af:
ba:d8:e1:e2:8c:1c:de:be:a7:7a:c0:42:03:0a:ac:
9c:26:7f:1d:3e:76:4c:de:81:c1:6b:05:60:10:23:
8a:9c:fc:1b:87:69:75:5e:ea:69:71:1f:21:ae:b2:
e1:47:eb:36:35:ef:dd:49:88:d9:78:ad:18:5b:94:
dc:62:d4:6d:83:a4:a0:44:82:45:c9:27:88:ec:b3:
c5:41:16:17:6f:1b:bf:35:94:30:ed:f7:11:67:ca:
d1:27:c9:88:7a:9a:87:de:fe:71:ef:f2:58:25:fc:
8c:92:56:c2:87:1b:2d:4a:7a:38:79:37:4b:66:f3:
1a:3a:6c:72:80:cb:3e:92:72:6b:a5:4d:2c:6d:93:
97:77:a9:ff:db:b7:2c:1c:08:a1:ce:65:5d:84:44:
1c:9b:59:60:8c:5a:02:b0:b2:f0:cc:c6:11:5d:c5:
4a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:5D:5C:A5:89:90:84:9B:DA:54:5D:4C:E0:DF:B9:BB:75:90:DB
X509v3 Authority Key Identifier:
keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/mNpdXKWJkISb2lRdTODfubt1kNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.120.0/22
IPv6:
2a0e:57c0:400::/38
Signature Algorithm: sha256WithRSAEncryption
cd:b9:96:71:f1:25:a6:51:20:f3:b4:2e:ea:19:e9:b0:43:12:
4f:1c:ec:00:9b:de:59:fe:9c:4a:6c:44:dc:33:e8:e7:fb:d0:
70:8d:7f:82:f0:5a:78:05:6f:6b:fb:96:9f:f5:8c:af:49:55:
fc:96:05:73:60:9a:f5:14:49:b1:fd:cd:4d:04:ed:2e:f0:58:
44:6d:16:4d:c0:c6:ca:69:9a:07:72:cb:5e:40:6b:93:1a:f7:
9a:7b:82:05:95:c5:15:bf:c9:e9:eb:40:cb:d7:9b:13:9f:dc:
5d:53:0d:b2:70:8c:11:6f:77:4a:24:c2:c5:84:49:38:b3:43:
fd:c9:2a:9f:68:ff:47:ea:cd:32:0a:04:58:54:1d:3b:39:43:
c2:97:87:1c:8c:81:5a:13:ec:cd:fc:39:67:69:74:4e:26:ec:
9e:5a:6f:a6:fc:c7:f0:7c:a0:cc:3d:4b:70:4f:f3:0c:11:91:
e6:a2:eb:8e:67:5b:15:6f:62:e0:c6:bf:1e:a6:2c:11:e8:7f:
58:3e:c6:52:5b:c1:d7:10:82:5c:36:55:4d:36:7a:cb:46:97:
08:ae:27:e6:9e:26:b6:05:93:ef:6b:96:6a:da:14:db:3b:26:
65:06:42:9b:28:08:88:48:68:02:1c:8e:7a:03:0f:92:eb:a3:
8c:f7:62:f1
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZ8d5XBtOr1eqBKOCgheUwyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODNmNjg1ZWI3YjZhMmY4NDY0Yjk5NzEyOTMzOGQ2M2Y3
ZWVkNmEwHhcNMjYwNzAxMTMzNjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGRhNWQ1Y2E1ODk5MDg0OWJkYTU0NWQ0Y2UwZGZiOWJiNzU5MGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hbIVMaY8MH8KHLjlJtBTFpX8rPw
B7vjVYYQ4H+G4yiHMSG5zUaLJzF0piBDswTtpA3j75AC6vkxmfGlgUXHq+PSHm2A
eKb7/uY2QquSThHZB50g5lJsYq+62OHijBzevqd6wEIDCqycJn8dPnZM3oHBawVg
ECOKnPwbh2l1XuppcR8hrrLhR+s2Ne/dSYjZeK0YW5TcYtRtg6SgRIJFySeI7LPF
QRYXbxu/NZQw7fcRZ8rRJ8mIepqH3v5x7/JYJfyMklbChxstSno4eTdLZvMaOmxy
gMs+knJrpU0sbZOXd6n/27csHAihzmVdhEQcm1lgjFoCsLLwzMYRXcVKCwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFJjaXVyliZCEm9pUXUzg37m7dZDbMB8GA1UdIwQY
MBaAFG6D9oXre2ovhGS5lxKTONY/fu1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80YWViOGEtYjk2Zi00ZWM0LThkOGUt
ZWFiZTM0ZTgwMmI0LzEvbU5wZFhLV0prSVNiMmxSZFRPRGZ1YnQxa05zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80YWViOGEtYjk2Zi00ZWM0LThkOGUtZWFiZTM0ZTgwMmI0
LzEvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCbeh4MA4E
AgACMAgDBgIqDlfABDANBgkqhkiG9w0BAQsFAAOCAQEAzbmWcfElplEg87Qu6hnp
sEMSTxzsAJveWf6cSmxE3DPo5/vQcI1/gvBaeAVva/uWn/WMr0lV/JYFc2Ca9RRJ
sf3NTQTtLvBYRG0WTcDGymmaB3LLXkBrkxr3mnuCBZXFFb/J6etAy9ebE5/cXVMN
snCMEW93SiTCxYRJOLND/ckqn2j/R+rNMgoEWFQdOzlDwpeHHIyBWhPszfw5Z2l0
TibsnlpvpvzH8HygzD1LcE/zDBGR5qLrjmdbFW9i4Ma/HqYsEeh/WD7GUlvB1xCC
XDZVTTZ6y0aXCK4n5p4mtgWT72uWatoU2zsmZQZCmygIiEhoAhyOegMPkuujjPdi
8Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:10 2026 by rpki-client