Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/MCJHMq3DaEcsDlBngovhIGwxerY.roa
File: MCJHMq3DaEcsDlBngovhIGwxerY.roa (raw, json)
Hash identifier: ceSH2iap4Ad4G5FgYSyum63drzQRVImpBZ3iM3Jeasw=
Subject key identifier: 30:22:47:32:AD:C3:68:47:2C:0E:50:67:82:8B:E1:20:6C:31:7A:B6
Certificate issuer: /CN=2b44df4e072e187863e82e4fbe3a7aceaf449663
Certificate serial: 019F2368984349EFC805D513F1795FD51CEE
Authority key identifier: 2B:44:DF:4E:07:2E:18:78:63:E8:2E:4F:BE:3A:7A:CE:AF:44:96:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/MCJHMq3DaEcsDlBngovhIGwxerY.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5524
IP address blocks: 2a14:6ec0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:98:43:49:ef:c8:05:d5:13:f1:79:5f:d5:1c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b44df4e072e187863e82e4fbe3a7aceaf449663
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30224732adc368472c0e5067828be1206c317ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:bc:3c:1e:89:81:ae:bf:c2:45:49:2b:94:
4b:80:8d:af:80:a7:9a:19:cc:9d:b8:0f:7a:55:d8:
8a:27:7d:77:ff:44:2c:25:6d:f4:21:50:d8:57:17:
5e:7b:a1:06:6c:f0:2f:b3:24:bf:85:12:c5:33:8d:
7b:49:b8:3d:7d:77:00:5d:8a:a3:df:75:1c:8d:4e:
86:f2:d8:c0:15:c7:50:4c:20:ea:8e:09:fd:13:81:
dc:03:ee:1a:2d:81:9d:6c:a7:f0:5e:09:a8:11:61:
0b:1e:57:aa:b0:4e:95:d1:73:71:43:88:8e:26:7d:
be:39:99:8a:13:57:e1:6b:83:1b:a8:01:1e:9e:40:
20:08:23:8c:8c:56:65:79:43:5a:4f:2b:3a:2c:a2:
3a:01:8e:20:cb:bb:a8:d2:6e:0e:70:d1:8f:f9:0d:
34:48:ea:48:6b:fa:c9:de:fc:96:dc:c4:bb:93:b7:
b6:af:87:ff:2a:79:7a:e2:76:45:a0:7b:ea:ea:fa:
5c:5f:fc:be:fa:e0:5f:d0:41:c6:7d:03:f9:71:ee:
1f:1e:cb:07:ba:82:a0:30:e6:ab:c0:d3:79:28:94:
f4:14:31:f3:13:95:eb:d6:da:cc:8c:29:a9:cd:8a:
8f:81:4f:69:8e:33:7a:7f:de:43:1a:35:d5:ca:87:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:22:47:32:AD:C3:68:47:2C:0E:50:67:82:8B:E1:20:6C:31:7A:B6
X509v3 Authority Key Identifier:
keyid:2B:44:DF:4E:07:2E:18:78:63:E8:2E:4F:BE:3A:7A:CE:AF:44:96:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/MCJHMq3DaEcsDlBngovhIGwxerY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6ec0::/32
Signature Algorithm: sha256WithRSAEncryption
25:90:b5:21:29:80:7b:da:9b:51:23:9c:da:25:7c:5b:16:77:
0a:70:f6:0b:1b:19:2e:53:2f:d4:ef:89:61:29:0f:a2:d4:25:
f3:e3:c8:94:36:a1:bc:6f:7b:31:72:29:6f:83:8f:2a:28:3a:
2d:00:da:71:a4:94:90:e8:3f:a1:fb:ba:c7:e8:ae:18:7c:00:
cf:d7:94:b8:2e:bf:a4:47:62:e4:3e:80:cd:3d:80:7b:c7:1f:
a3:ea:d2:fc:c7:b1:cb:bb:44:27:44:bd:04:85:12:88:ba:1c:
f8:af:a5:69:e8:5e:44:03:87:d9:94:b6:a8:ca:8a:bd:67:28:
ac:f1:0c:98:ef:28:95:fc:7f:98:42:d1:b3:25:68:9e:6f:21:
2d:c1:33:1e:d5:22:44:e8:9d:58:c6:05:c1:4b:fe:df:30:48:
1a:7c:32:cb:5a:94:ea:fc:10:5c:07:e9:9e:d0:2f:3d:62:14:
fa:b1:f1:33:e0:51:a3:91:f4:49:79:3d:23:08:09:d6:17:9d:
3d:aa:4d:3e:7e:f6:b3:09:74:1d:61:0f:f9:34:0c:32:8e:f0:
c0:b7:6d:68:c6:e4:04:35:cb:26:97:bd:2f:45:2f:dd:2c:f5:
22:37:46:0c:4f:b6:c9:a9:5d:31:bf:38:6e:37:89:89:47:b8:
a5:f9:88:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:07 2026 by rpki-client