Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/mqWwX3c1BOwgAKEJ3FuyfvO_MKs.roa
File: mqWwX3c1BOwgAKEJ3FuyfvO_MKs.roa (raw, json)
Hash identifier: 05RPu7PASUup4/F6w6O5WKp82l03RTgAZ/jZKw8NCyY=
Subject key identifier: 9A:A5:B0:5F:77:35:04:EC:20:00:A1:09:DC:5B:B2:7E:F3:BF:30:AB
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 019F64E1BEB675C36654F37BDF95A0783BE4
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/mqWwX3c1BOwgAKEJ3FuyfvO_MKs.roa
Signing time: Wed 15 Jul 2026 08:25:43 +0000
ROA not before: Wed 15 Jul 2026 08:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39878
IP address blocks: 45.67.168.0/22 maxlen: 24
91.135.160.0/20 maxlen: 24
91.135.160.30/32 maxlen: 32
185.33.8.0/22 maxlen: 24
185.64.48.0/22 maxlen: 24
185.87.237.0/24 maxlen: 24
185.87.238.0/23 maxlen: 24
185.196.240.0/22 maxlen: 24
2a04:40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:e1:be:b6:75:c3:66:54:f3:7b:df:95:a0:78:3b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Jul 15 08:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9aa5b05f773504ec2000a109dc5bb27ef3bf30ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:5a:3d:a2:9f:b9:fe:1a:a3:fe:e0:91:a9:
6d:fe:6d:9d:cf:57:32:a9:ec:77:8a:f3:3a:3f:40:
48:d2:0a:f8:56:4b:22:a7:f9:b6:60:fb:4b:3c:86:
c1:e6:c0:7e:13:fe:88:15:fb:b2:bb:ba:d7:6b:d9:
3d:ae:23:f3:72:df:e8:4c:ac:93:5c:d4:94:ab:82:
96:a7:58:cd:59:36:d9:2a:08:81:25:96:34:8e:05:
5a:ad:f0:c4:66:a7:f9:0f:db:1b:e5:00:4e:84:92:
73:10:e1:29:07:69:f2:18:2a:16:8d:75:17:42:79:
62:2e:93:1c:ad:e0:7d:04:f7:b4:77:df:27:d3:82:
0b:88:e1:6a:41:50:cc:08:0e:09:0c:cb:79:69:af:
39:83:e3:84:6b:fe:ac:ce:37:ae:16:37:fe:13:0f:
a0:59:6a:50:e8:75:d0:c7:8e:dc:76:d7:f4:d6:3f:
b8:58:d2:3f:d1:6d:a6:a0:b6:95:f2:3f:fe:a4:81:
80:d7:b5:69:57:56:92:df:ee:87:d9:86:00:3d:91:
b4:6c:48:4e:e4:55:be:ed:a5:83:6d:a2:75:32:74:
6d:eb:db:a4:f4:d7:1c:1b:11:07:21:4c:25:51:fa:
05:d8:8c:bf:62:de:85:0c:33:50:01:a3:bd:9a:05:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A5:B0:5F:77:35:04:EC:20:00:A1:09:DC:5B:B2:7E:F3:BF:30:AB
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/mqWwX3c1BOwgAKEJ3FuyfvO_MKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.168.0/22
91.135.160.0/20
185.33.8.0/22
185.64.48.0/22
185.87.237.0-185.87.239.255
185.196.240.0/22
IPv6:
2a04:40::/29
Signature Algorithm: sha256WithRSAEncryption
66:d6:fa:98:b8:1e:7e:70:1b:65:43:c1:e5:f7:44:87:cb:68:
bc:49:f6:3c:08:a6:02:e9:2a:5b:79:d8:0e:84:10:19:69:2f:
f8:9d:12:31:3b:3d:a1:9e:94:f3:7f:e2:f6:60:1e:c6:00:5b:
cb:ad:45:7f:f7:b4:21:ec:a7:58:a3:1c:b8:34:df:81:99:94:
9a:6b:7e:75:e1:cb:99:d6:36:33:cd:ae:04:c2:c2:2f:4b:ec:
cc:58:ad:f5:79:fd:d3:cd:4b:22:e9:18:33:e0:9d:44:5e:d0:
f4:c7:5e:93:be:b6:78:93:2f:86:6b:1d:59:6d:64:89:f4:63:
a1:5c:4d:db:92:f3:5a:4f:83:9a:53:49:30:f4:fa:ea:eb:56:
96:82:18:3f:c5:75:82:d4:7b:b3:6f:47:e7:98:93:88:37:db:
1b:bc:88:0e:17:d0:2e:14:98:5c:3a:79:57:f3:56:60:be:6c:
8d:94:12:5c:12:f2:37:29:9e:28:36:71:17:51:a6:52:d3:be:
45:f6:ec:6b:27:e0:73:bd:a4:fa:81:d7:b0:f4:ea:bb:c4:e5:
80:15:3a:04:8d:3b:36:c1:b4:f4:ed:31:01:2d:37:f8:7e:cb:
a0:52:42:5f:a5:66:0f:6b:05:1c:6b:a5:d1:ba:5c:82:db:e3:
bf:28:5b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:09 2026 by rpki-client