Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/0_Mtz0SJn_Q1_qJIY7U2X30pxFc.roa
File: 0_Mtz0SJn_Q1_qJIY7U2X30pxFc.roa (raw, json)
Hash identifier: JhAJBfefubEnCZzBggi2Jk8wcWB1kEHwdaXxGQiW+fE=
Subject key identifier: D3:F3:2D:CF:44:89:9F:F4:35:FE:A2:48:63:B5:36:5F:7D:29:C4:57
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 01A0620E9F65D154018033CCA63CF4A35EFF
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/0_Mtz0SJn_Q1_qJIY7U2X30pxFc.roa
Signing time: Wed 02 Sep 2026 12:18:40 +0000
ROA not before: Wed 02 Sep 2026 12:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214415
IP address blocks: 213.239.160.0/21 maxlen: 21
213.239.168.0/21 maxlen: 21
2a13:5940:120::/44 maxlen: 48
2a13:5944:20::/44 maxlen: 44
2a13:5947:134::/48 maxlen: 48
2a13:5947:137::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:0e:9f:65:d1:54:01:80:33:cc:a6:3c:f4:a3:5e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Sep 2 12:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3f32dcf44899ff435fea24863b5365f7d29c457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:30:47:ac:54:85:16:37:f6:ab:29:d5:bc:
fb:4a:d3:31:ac:68:7c:3f:38:84:7b:07:1c:b5:0b:
c8:25:90:09:80:e1:26:25:43:b1:ad:80:4a:ef:7d:
01:3a:59:a8:d1:2c:19:d9:44:50:4f:e3:c2:81:d9:
39:9c:26:76:df:9b:be:64:48:fd:e2:66:30:11:0b:
33:9f:28:12:c1:e1:40:bf:8a:b7:f1:0d:e8:94:13:
02:03:1f:8c:23:52:72:64:9a:2c:03:21:99:21:66:
81:ca:d8:75:1c:ce:20:65:80:04:3f:b9:bd:54:54:
db:3d:ac:2e:34:ad:dd:05:b7:05:70:36:87:bc:10:
00:ab:0e:35:ea:05:44:0f:2e:b4:4e:cb:4b:4b:06:
33:de:dd:10:3d:04:0a:04:d1:a0:2b:97:59:7c:27:
db:0b:c6:0e:76:46:5e:9d:11:5c:5f:ad:d9:4b:24:
4b:ac:16:35:db:a4:4b:45:1d:b7:b8:f1:c1:ff:96:
0e:d3:09:2f:d7:1b:5b:ba:30:1e:23:e0:23:23:fa:
49:e7:e4:a7:6e:df:d5:ee:30:51:6b:85:e3:a5:8a:
8f:d2:77:92:92:64:81:aa:9c:2c:0a:d8:0e:b5:2e:
01:f1:cc:38:bb:39:1c:5c:2d:c1:67:bd:f0:aa:c9:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F3:2D:CF:44:89:9F:F4:35:FE:A2:48:63:B5:36:5F:7D:29:C4:57
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/0_Mtz0SJn_Q1_qJIY7U2X30pxFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.239.160.0/20
IPv6:
2a13:5940:120::/44
2a13:5944:20::/44
2a13:5947:134::/48
2a13:5947:137::/48
Signature Algorithm: sha256WithRSAEncryption
80:ab:1e:e5:ed:ad:a0:eb:51:e9:07:65:05:74:c6:88:b7:8e:
f9:e0:19:2f:c5:d2:09:1c:8b:34:57:9b:f1:34:1f:37:6a:9b:
30:81:13:52:af:26:2b:10:45:32:0d:91:96:84:ce:11:7e:26:
76:55:f4:ef:9e:cc:59:2d:0b:a4:9d:2e:b6:76:57:4b:63:68:
f5:a6:92:30:ee:41:a1:2e:de:83:0f:50:61:ea:99:33:54:5b:
48:7f:29:47:f6:7b:74:eb:ea:cf:d7:cd:61:74:8c:16:33:96:
3e:7b:c2:9e:c7:f7:26:50:53:78:08:39:a7:fd:c5:28:f2:fe:
e2:d4:b2:21:49:bd:9d:92:9d:16:17:bb:a3:f9:a0:81:63:8e:
ca:24:03:21:8b:8c:6e:9a:52:17:ea:82:16:ea:16:e1:89:b3:
6c:1a:96:53:b2:fe:0d:51:f3:84:31:9b:5e:b8:ef:fb:5e:f0:
b2:fd:d3:1f:5e:dd:b6:8a:76:6b:70:b3:16:af:7c:7f:73:1a:
20:bd:d6:16:88:88:32:91:ef:fc:a6:39:8c:a6:c2:bd:14:50:
fc:4b:c7:4a:7a:d5:d6:54:8e:f3:0a:02:79:3b:85:59:f3:eb:
12:77:14:f4:50:e1:19:3f:f5:bb:16:a5:66:78:a9:be:11:cc:
03:b8:35:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:13:09 2026 by rpki-client