Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/mj2AEXc07CGbDP72ke63D3tI8q0.roa
File: mj2AEXc07CGbDP72ke63D3tI8q0.roa (raw, json)
Hash identifier: B78FbgpmBx7AK4HDfrbIleN6rL3/h3TLtArTrp9LyzU=
Subject key identifier: 9A:3D:80:11:77:34:EC:21:9B:0C:FE:F6:91:EE:B7:0F:7B:48:F2:AD
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A15619923141FDF10F25D9246E5C0D5134
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/mj2AEXc07CGbDP72ke63D3tI8q0.roa
Signing time: Mon 19 Oct 2026 21:37:58 +0000
ROA not before: Mon 19 Oct 2026 21:37:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 812
IP address blocks: 9.232.0.0/20 maxlen: 20
9.233.112.0/21 maxlen: 21
9.249.96.0/22 maxlen: 22
9.249.108.0/22 maxlen: 22
9.249.168.0/22 maxlen: 22
9.249.200.0/22 maxlen: 22
9.249.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:19:92:31:41:fd:f1:0f:25:d9:24:6e:5c:0d:51:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Oct 19 21:37:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a3d80117734ec219b0cfef691eeb70f7b48f2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:ce:ab:86:bd:f1:d5:94:47:6b:4d:8e:6c:
c2:79:77:6c:57:c3:2a:be:75:d9:03:86:66:73:68:
5d:dd:f9:b5:9e:db:9d:63:d6:f7:1b:0e:d8:9c:55:
e6:47:bf:03:64:0c:ba:4f:e6:a2:f9:13:5d:3f:0d:
1a:7d:8d:c5:77:26:d9:11:fe:41:1a:23:0f:21:fd:
b2:66:09:95:84:e5:ae:23:c8:7b:fb:f7:25:06:fe:
b9:03:38:fe:8c:71:0f:48:77:d2:ff:a7:4d:a5:eb:
c6:a2:47:3d:0b:41:92:d4:b6:1f:75:ee:5c:c5:c6:
42:04:80:26:78:2a:18:5c:e4:d2:57:aa:b2:46:97:
f6:ab:1d:d6:ca:52:ac:cc:53:0f:ba:97:d8:d8:70:
50:be:9c:75:11:f4:d2:0d:5e:a8:f6:1e:dc:48:39:
ad:45:6e:ef:19:6c:bf:5c:b5:c8:85:a9:9c:11:84:
1e:de:89:ff:de:c6:67:b9:a7:1e:4f:0b:1b:65:e8:
69:e9:0f:a3:1e:62:5c:db:25:d6:79:dd:4d:1d:55:
3c:39:cd:38:2c:81:fe:32:ef:f6:04:5c:a2:5e:17:
c0:8a:b3:50:42:15:10:c5:77:46:5d:9d:c8:b8:2f:
95:d4:0f:99:88:6c:e9:04:d8:7d:08:6c:d7:58:0a:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3D:80:11:77:34:EC:21:9B:0C:FE:F6:91:EE:B7:0F:7B:48:F2:AD
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/mj2AEXc07CGbDP72ke63D3tI8q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.232.0.0/20
9.233.112.0/21
9.249.96.0/22
9.249.108.0/22
9.249.168.0/22
9.249.200.0/22
9.249.216.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:ca:79:67:66:16:a3:e0:f5:e2:54:0d:4f:97:c6:71:b4:a5:
72:f2:46:a7:d1:74:0d:89:00:ea:f8:78:7a:7f:2c:3d:70:2d:
35:12:69:24:9e:74:c7:c9:c8:77:82:b0:d6:de:b2:6a:70:f6:
1b:6d:de:25:25:17:0a:07:58:90:91:15:d4:9e:b2:78:34:3f:
ef:eb:a1:cd:30:eb:37:8c:b0:ad:78:8f:b3:b9:56:39:c1:16:
1b:e3:e7:3d:e0:27:ed:cb:b9:8d:8f:fd:e4:98:53:58:ad:03:
48:4d:90:67:75:45:13:4e:15:3a:1a:38:53:3a:7e:66:d0:6a:
93:b6:d6:ed:ed:1e:2b:81:f1:ba:34:69:19:81:46:fd:f0:44:
ac:a6:d3:db:85:cd:f7:7f:1d:9c:39:b4:4e:c1:c9:3b:c6:30:
a1:de:9d:8a:1c:07:93:7b:78:bf:14:72:8a:21:4b:e7:f5:07:
e3:16:17:74:fb:28:81:2d:77:0d:21:6a:35:35:a7:e5:50:6b:
59:d0:71:02:da:af:62:63:a2:38:ab:c5:3f:d6:4d:fc:16:67:
2b:9c:69:4e:65:d6:1f:e4:ed:03:cd:ca:18:2f:ca:be:36:89:
83:1a:27:6e:22:a9:c5:12:f7:3d:3e:78:f6:be:31:f7:e3:d1:
75:02:41:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:46 2026 by rpki-client