Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/MoHCEJtT1xBOm7gVhJmI5Prbw3E.roa
File: MoHCEJtT1xBOm7gVhJmI5Prbw3E.roa (raw, json)
Hash identifier: dr9Y4CPPNxDI1DdhIlx+imOECRhQA9dnFASgP9A+ij4=
Subject key identifier: 32:81:C2:10:9B:53:D7:10:4E:9B:B8:15:84:99:88:E4:FA:DB:C3:71
Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Certificate serial: 019F27BEEDF910684B7A72AFC53B8E3EA240
Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/MoHCEJtT1xBOm7gVhJmI5Prbw3E.roa
Signing time: Fri 03 Jul 2026 11:30:51 +0000
ROA not before: Fri 03 Jul 2026 11:30:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 329272
IP address blocks: 153.80.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:be:ed:f9:10:68:4b:7a:72:af:c5:3b:8e:3e:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Validity
Not Before: Jul 3 11:30:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3281c2109b53d7104e9bb815849988e4fadbc371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:ee:d2:05:d9:7e:6e:19:f9:84:e5:2b:7f:
cf:40:50:8d:e1:27:e9:fd:ca:bc:93:67:80:e2:9c:
67:bc:96:a1:b3:22:e6:aa:d7:2e:02:10:05:29:e1:
94:a8:17:2a:0c:a3:53:04:79:5f:f2:dc:29:1e:98:
1a:e5:76:e0:39:b0:35:ca:79:a7:cb:49:92:68:72:
f0:75:02:82:b1:a2:00:c9:86:e5:46:79:15:73:a3:
a7:1f:9f:2d:6c:cb:7b:a4:eb:47:02:2e:77:69:73:
a0:b8:8d:5d:53:d2:3e:d5:4d:ad:a8:9f:8d:dc:1f:
a9:37:8f:24:d4:cc:5b:67:4d:62:a6:7d:76:ce:0e:
e0:00:48:b5:ef:95:c9:b8:5d:6f:6b:8d:5d:42:55:
ce:fb:f9:48:5a:f6:8d:2e:36:4f:b1:7b:10:f5:93:
3a:f0:6d:62:52:17:fa:94:0e:23:81:9e:1f:d7:8b:
7a:83:8c:95:fd:c5:70:87:53:e4:0c:f7:a4:c8:04:
70:f8:66:ca:0f:a0:c7:1d:60:29:42:8b:9b:90:5f:
8d:aa:d6:66:45:05:a2:eb:d2:44:68:6c:31:b9:d0:
40:de:74:ae:19:e4:ca:49:4b:3a:a9:02:d1:50:00:
48:61:61:88:89:19:c8:b5:f7:72:7d:7c:66:24:75:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:81:C2:10:9B:53:D7:10:4E:9B:B8:15:84:99:88:E4:FA:DB:C3:71
X509v3 Authority Key Identifier:
keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/MoHCEJtT1xBOm7gVhJmI5Prbw3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.80.208.0/22
Signature Algorithm: sha256WithRSAEncryption
08:84:8b:34:64:af:4e:a2:bf:18:5e:d5:ca:58:20:b6:24:5a:
e0:78:c5:7a:d6:ba:ee:bf:73:1d:b7:d5:56:00:7a:1c:e4:3a:
d0:f7:8f:3b:c9:1d:de:47:6e:9f:2a:2b:84:07:78:23:09:4e:
7f:7f:37:7c:74:5b:0a:9c:23:6b:0f:f8:f2:6d:93:4c:33:88:
49:7d:71:9d:e0:77:a3:d4:54:64:a6:68:61:9c:80:2d:5d:e3:
57:15:2c:7c:97:1b:18:b3:73:51:58:6a:aa:a5:a5:ff:77:8b:
8a:7f:b3:34:9d:27:fd:9c:9c:a5:73:ea:c5:74:cf:ab:39:01:
5e:6c:32:1e:30:d3:3a:de:9b:da:24:5f:77:92:36:bf:7c:2b:
1f:45:68:35:b6:a6:76:70:08:a6:60:57:7e:bb:eb:98:9c:53:
07:59:e4:61:2d:b6:cd:9d:66:ca:79:98:06:ef:54:c4:c8:7c:
d7:c7:45:4a:e4:27:1a:15:2d:a4:bd:a3:90:c5:bf:23:44:10:
92:55:44:65:c0:da:74:f7:ac:2f:3f:f4:45:07:c9:8b:88:1f:
62:f5:66:90:61:2c:ea:61:09:fc:c4:76:80:18:d3:4f:9f:75:
53:b0:5a:6b:30:b2:55:8f:03:98:d7:60:16:6a:ce:37:12:5d:
3f:47:d4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:00 2026 by rpki-client