Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/mmRnUDgJif5y_a_hZTVTKWR2Qkg.roa
File: mmRnUDgJif5y_a_hZTVTKWR2Qkg.roa (raw, json)
Hash identifier: EtzHGzRB735PcuPD11By0pvX5hTI631WnvjQhiFIEZ0=
Subject key identifier: 9A:64:67:50:38:09:89:FE:72:FD:AF:E1:65:35:53:29:64:76:42:48
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019DF45C65B8BED150EB006186CDB3C822F3
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/mmRnUDgJif5y_a_hZTVTKWR2Qkg.roa
Signing time: Mon 04 May 2026 18:59:49 +0000
ROA not before: Mon 04 May 2026 18:59:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213832
IP address blocks: 2a0f:e3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f4:5c:65:b8:be:d1:50:eb:00:61:86:cd:b3:c8:22:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: May 4 18:59:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a646750380989fe72fdafe16535532964764248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:e0:8c:08:4d:eb:3a:33:f2:26:5c:01:bb:
27:b7:bc:bc:20:3c:66:dd:8c:c0:7e:e5:34:84:3e:
e8:e6:36:2a:4c:6f:6d:fb:0f:b0:ff:25:5c:e5:9d:
b8:4d:2a:9c:3b:6e:4f:a5:aa:bb:1c:c7:82:6c:8d:
16:25:44:07:7c:2c:29:ef:37:1e:26:57:1e:51:13:
0c:39:00:be:4e:15:25:16:49:74:61:e4:03:42:e9:
c6:5a:25:e7:8e:c1:6b:5f:58:13:5f:a1:15:e9:49:
92:46:e7:c7:a1:ea:18:99:73:1c:64:f3:ad:71:a2:
96:c0:fd:aa:e6:6f:6e:3e:21:a5:29:66:13:f2:33:
bc:c6:d7:ea:a8:10:76:2e:cc:a6:3c:6a:4c:4e:8b:
3a:0f:e9:ce:fc:14:b4:d3:53:2c:64:4a:f5:64:29:
e1:16:9a:9e:74:54:73:6d:29:d3:b8:4c:41:68:ca:
a6:16:64:46:2f:74:7a:76:f6:16:e4:85:41:8d:78:
59:36:c6:65:5a:c4:15:75:bc:0a:d8:e7:be:48:07:
e9:2a:a1:18:eb:03:19:f9:72:49:00:b4:cf:60:b6:
3a:15:1f:54:20:4e:e0:0a:f8:16:40:6c:a4:58:12:
49:50:46:51:7a:87:68:37:18:44:a5:9e:a1:6b:1b:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:64:67:50:38:09:89:FE:72:FD:AF:E1:65:35:53:29:64:76:42:48
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/mmRnUDgJif5y_a_hZTVTKWR2Qkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e3c0::/29
Signature Algorithm: sha256WithRSAEncryption
3e:c8:72:10:84:e1:8a:47:1c:48:45:93:d7:e4:30:0b:95:64:
71:58:4e:d3:ff:5f:71:d4:7e:58:ad:9d:56:57:54:77:5b:a4:
01:d9:e9:2e:8c:97:ec:86:fe:cd:a2:9f:ce:8d:86:a3:6d:4d:
60:31:cc:0f:ad:aa:08:68:01:84:14:14:cd:60:ab:d2:92:8d:
70:9e:7f:03:78:ef:e8:8b:bf:84:0f:69:bd:ef:84:60:91:64:
6e:a4:32:e1:4c:0f:4c:95:a1:bc:15:01:63:0d:89:23:3b:f9:
c1:0b:26:52:59:e4:8b:0c:db:c7:96:f5:33:51:29:9d:33:ec:
92:21:c8:48:c1:da:cf:35:bf:61:13:f3:c8:42:b9:d0:b3:ee:
ed:00:f6:11:68:ea:e1:b9:89:12:9c:2a:d1:bd:77:a5:27:8a:
d9:57:0a:32:bd:65:9e:f3:91:2a:eb:84:2c:56:f2:0f:ee:e3:
00:29:6c:0a:ad:46:55:01:0c:81:93:a0:19:d2:fa:35:30:61:
8f:06:c9:69:79:77:96:18:aa:c4:c6:f4:d5:d3:4c:ea:6b:30:
e0:b5:d0:b4:a3:c8:24:66:d0:59:c1:d9:f6:ce:d0:47:e4:f0:
b4:e4:95:c4:dd:fa:4f:c9:36:c6:1b:5c:9a:08:0f:9f:ee:b0:
3e:5b:f6:53
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ30XGW4vtFQ6wBhhs2zyCLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjYwNTA0MTg1OTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTY0Njc1MDM4MDk4OWZlNzJmZGFmZTE2NTM1NTMyOTY0NzY0MjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0LgjAhN6zoz8iZcAbsnt7y8IDxm
3YzAfuU0hD7o5jYqTG9t+w+w/yVc5Z24TSqcO25Ppaq7HMeCbI0WJUQHfCwp7zce
JlceURMMOQC+ThUlFkl0YeQDQunGWiXnjsFrX1gTX6EV6UmSRufHoeoYmXMcZPOt
caKWwP2q5m9uPiGlKWYT8jO8xtfqqBB2LsymPGpMTos6D+nO/BS001MsZEr1ZCnh
FpqedFRzbSnTuExBaMqmFmRGL3R6dvYW5IVBjXhZNsZlWsQVdbwK2Oe+SAfpKqEY
6wMZ+XJJALTPYLY6FR9UIE7gCvgWQGykWBJJUEZReodoNxhEpZ6haxuhgQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJpkZ1A4CYn+cv2v4WU1UylkdkJIMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvbW1SblVEZ0ppZjV5X2FfaFpUVlRLV1IyUWtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg/jwDAN
BgkqhkiG9w0BAQsFAAOCAQEAPshyEIThikccSEWT1+QwC5VkcVhO0/9fcdR+WK2d
VldUd1ukAdnpLoyX7Ib+zaKfzo2Go21NYDHMD62qCGgBhBQUzWCr0pKNcJ5/A3jv
6Iu/hA9pve+EYJFkbqQy4UwPTJWhvBUBYw2JIzv5wQsmUlnkiwzbx5b1M1EpnTPs
kiHISMHazzW/YRPzyEK50LPu7QD2EWjq4bmJEpwq0b13pSeK2VcKMr1lnvORKuuE
LFbyD+7jAClsCq1GVQEMgZOgGdL6NTBhjwbJaXl3lhiqxMb01dNM6msw4LXQtKPI
JGbQWcHZ9s7QR+TwtOSVxN36T8k2xhtcmggPn+6wPlv2Uw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:19:38 2026 by rpki-client