Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/CtVoaMBCLdM9BHt25HaZqMyTPK4.roa
File: CtVoaMBCLdM9BHt25HaZqMyTPK4.roa (raw, json)
Hash identifier: 5PXDA9U5fF7S6/XA+XWt3mI39Li4EcITN+bSwQsIUZc=
Subject key identifier: 0A:D5:68:68:C0:42:2D:D3:3D:04:7B:76:E4:76:99:A8:CC:93:3C:AE
Certificate issuer: /CN=98188e169f765ad21582aee89e442baad68c5a70
Certificate serial: 019CCDB3035A1AC280073C7A952DD61A7D81
Authority key identifier: 98:18:8E:16:9F:76:5A:D2:15:82:AE:E8:9E:44:2B:AA:D6:8C:5A:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBiOFp92WtIVgq7onkQrqtaMWnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/CtVoaMBCLdM9BHt25HaZqMyTPK4.roa
Signing time: Sun 08 Mar 2026 13:46:26 +0000
ROA not before: Sun 08 Mar 2026 13:46:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201421
IP address blocks: 2001:678:dc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBiOFp92WtIVgq7onkQrqtaMWnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cd:b3:03:5a:1a:c2:80:07:3c:7a:95:2d:d6:1a:7d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98188e169f765ad21582aee89e442baad68c5a70
Validity
Not Before: Mar 8 13:46:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ad56868c0422dd33d047b76e47699a8cc933cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e3:c4:ae:97:d2:c8:29:0d:58:62:ea:c9:7c:
c3:df:44:30:89:2d:c8:e2:7b:a6:13:f5:39:69:ba:
75:dd:24:2c:71:b6:81:01:cd:ac:26:84:fb:3f:b6:
9e:a4:ef:f8:25:e6:0e:dd:06:da:40:82:e6:2c:08:
eb:9e:e2:6a:b5:c3:0b:e9:5e:14:bf:66:48:ba:86:
bd:f5:f4:e1:bf:9d:3d:05:2c:40:0c:7b:f2:00:5d:
93:85:66:c7:e5:ed:50:82:c9:1f:74:e4:4d:5b:3a:
9c:df:e0:ae:a4:41:4b:f9:b5:ed:25:7c:0f:3f:70:
ce:c0:5d:c8:62:7e:a8:45:37:17:fd:cf:5f:59:d8:
14:c1:48:06:4c:b2:7a:39:f5:ab:57:12:32:8d:52:
64:2a:46:dd:67:84:c4:10:ad:3f:6c:bc:f3:14:55:
78:77:6e:f0:22:ea:60:c4:a1:d8:74:ff:7c:a0:f3:
87:f0:88:31:94:1c:6a:c1:32:5a:40:47:59:1f:6b:
77:22:5b:67:88:5e:9e:16:66:59:9c:b0:2c:4e:a4:
a9:e3:a4:cd:52:0e:80:a2:a5:3e:f4:7b:f7:b3:3a:
e2:09:fd:95:d2:29:f4:1f:d3:a9:53:9b:34:0b:46:
86:bf:21:5b:ae:8b:1c:52:5f:16:be:f9:47:f1:a6:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D5:68:68:C0:42:2D:D3:3D:04:7B:76:E4:76:99:A8:CC:93:3C:AE
X509v3 Authority Key Identifier:
keyid:98:18:8E:16:9F:76:5A:D2:15:82:AE:E8:9E:44:2B:AA:D6:8C:5A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBiOFp92WtIVgq7onkQrqtaMWnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/CtVoaMBCLdM9BHt25HaZqMyTPK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/175220-3916-48d4-a651-86d98df7f947/1/mBiOFp92WtIVgq7onkQrqtaMWnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:dc0::/48
Signature Algorithm: sha256WithRSAEncryption
21:5b:15:fe:a2:d1:fc:3a:e4:a8:16:bd:c2:0c:68:b5:5b:92:
7c:08:5f:4d:54:4d:dd:13:8d:92:f7:8b:39:dc:d3:ef:d9:50:
c6:a8:92:dd:b5:c2:da:68:1e:62:69:04:30:19:56:3c:f5:aa:
ff:6d:c2:f7:aa:ae:90:2d:0b:92:14:b0:ce:d8:fa:b9:e1:94:
74:8e:44:cd:05:fc:51:57:a1:11:f1:42:06:9e:dc:d0:80:47:
66:c4:aa:c1:ca:1e:0d:98:5a:63:95:d8:37:2d:f6:84:aa:91:
de:d3:6a:37:17:43:73:81:4c:1c:88:de:21:00:79:16:1d:ec:
43:70:ed:18:f9:45:ed:e5:09:8d:95:01:44:bc:2b:ab:02:6c:
60:32:74:ce:ed:27:41:e2:5b:64:8d:2e:7c:74:a5:b2:0a:f8:
60:1e:b7:ea:62:44:a1:6f:92:9f:24:84:30:f1:0e:bf:6c:7f:
12:9f:ee:0e:43:98:62:b0:b1:0d:f3:fd:73:d5:2b:af:b9:31:
70:36:53:cc:3e:f0:38:44:d8:ec:0f:46:36:f2:6b:a9:c8:e2:
e8:9c:19:95:0b:31:c9:a9:56:f5:f1:2a:45:cb:59:33:73:b0:
b7:db:c3:7d:8e:e7:a3:b4:e4:03:78:fa:33:bd:fa:7f:1d:12:
8c:dd:58:47
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZzNswNaGsKABzx6lS3WGn2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTg4ZTE2OWY3NjVhZDIxNTgyYWVlODllNDQyYmFhZDY4
YzVhNzAwHhcNMjYwMzA4MTM0NjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWQ1Njg2OGMwNDIyZGQzM2QwNDdiNzZlNDc2OTlhOGNjOTMzY2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+PErpfSyCkNWGLqyXzD30QwiS3I
4numE/U5abp13SQscbaBAc2sJoT7P7aepO/4JeYO3QbaQILmLAjrnuJqtcML6V4U
v2ZIuoa99fThv509BSxADHvyAF2ThWbH5e1QgskfdORNWzqc3+CupEFL+bXtJXwP
P3DOwF3IYn6oRTcX/c9fWdgUwUgGTLJ6OfWrVxIyjVJkKkbdZ4TEEK0/bLzzFFV4
d27wIupgxKHYdP98oPOH8IgxlBxqwTJaQEdZH2t3IltniF6eFmZZnLAsTqSp46TN
Ug6AoqU+9Hv3szriCf2V0in0H9OpU5s0C0aGvyFbroscUl8WvvlH8aa/1QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFArVaGjAQi3TPQR7duR2majMkzyuMB8GA1UdIwQY
MBaAFJgYjhafdlrSFYKu6J5EK6rWjFpwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJpT0ZwOTJXdElWZ3E3b25rUXJxdGFNV25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xNzUyMjAtMzkxNi00OGQ0LWE2NTEt
ODZkOThkZjdmOTQ3LzEvQ3RWb2FNQkNMZE05Qkh0MjVIYVpxTXlUUEs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xNzUyMjAtMzkxNi00OGQ0LWE2NTEtODZkOThkZjdmOTQ3
LzEvbUJpT0ZwOTJXdElWZ3E3b25rUXJxdGFNV25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA3A
MA0GCSqGSIb3DQEBCwUAA4IBAQAhWxX+otH8OuSoFr3CDGi1W5J8CF9NVE3dE42S
94s53NPv2VDGqJLdtcLaaB5iaQQwGVY89ar/bcL3qq6QLQuSFLDO2Pq54ZR0jkTN
BfxRV6ER8UIGntzQgEdmxKrByh4NmFpjldg3LfaEqpHe02o3F0NzgUwciN4hAHkW
HexDcO0Y+UXt5QmNlQFEvCurAmxgMnTO7SdB4ltkjS58dKWyCvhgHrfqYkShb5Kf
JIQw8Q6/bH8Sn+4OQ5hisLEN8/1z1SuvuTFwNlPMPvA4RNjsD0Y28mupyOLonBmV
CzHJqVb18SpFy1kzc7C328N9juejtOQDePozvfp/HRKM3VhH
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:55 2026 by rpki-client