Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4kZl5CsLuywSGT12s0uLaso-mgc.roa
File: 4kZl5CsLuywSGT12s0uLaso-mgc.roa (raw, json)
Hash identifier: 4jdXuAnTun86bJR14ejC89w+QIJNDzj38hqoR0spk+A=
Subject key identifier: E2:46:65:E4:2B:0B:BB:2C:12:19:3D:76:B3:4B:8B:6A:CA:3E:9A:07
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A0C979090CB4E4CE63D90CEDE200EE0330
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4kZl5CsLuywSGT12s0uLaso-mgc.roa
Signing time: Tue 22 Sep 2026 14:15:47 +0000
ROA not before: Tue 22 Sep 2026 14:15:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7203
IP address blocks: 2a09:30c0::/29 maxlen: 29
2a11:2240::/29 maxlen: 29
2a11:3740::/29 maxlen: 29
2a11:5140::/29 maxlen: 29
2a11:6b40::/29 maxlen: 29
2a11:8fc0::/29 maxlen: 29
2a11:b540::/29 maxlen: 29
2a11:cd80::/29 maxlen: 29
2a11:d740::/29 maxlen: 29
2a12:c000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:79:09:0c:b4:e4:ce:63:d9:0c:ed:e2:00:ee:03:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 22 14:15:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e24665e42b0bbb2c12193d76b34b8b6aca3e9a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:13:de:cd:db:30:09:af:c0:b7:a5:b0:7e:a4:
23:73:c0:a2:e8:7a:00:95:56:3b:d8:59:8c:30:0e:
98:b9:64:28:f8:d1:9f:48:2b:7b:68:e2:82:11:aa:
69:ca:d4:e1:14:eb:4f:3a:2e:07:e1:42:73:55:4d:
c8:a9:ec:bd:31:28:3f:8f:9c:8b:61:05:eb:43:42:
81:06:d1:1b:62:2b:3c:c1:b5:5b:db:16:18:39:3a:
01:95:e1:9a:65:7c:1b:f3:50:ea:58:f7:99:c4:00:
f3:5b:0f:34:e2:85:fc:0d:e6:33:78:52:0e:2c:d3:
74:f9:24:6d:fa:0f:b1:a8:e8:5f:1c:a6:2e:5a:bf:
a7:a6:78:19:9d:5e:aa:a0:75:e3:47:5f:5c:cc:f9:
83:28:45:d9:42:d0:94:83:34:9f:bb:fb:42:50:81:
db:6f:72:93:a8:3d:87:b4:76:de:ec:95:d6:e7:4b:
61:17:a2:9c:a2:fa:53:e5:ac:80:f7:f0:8f:fc:4d:
51:26:73:cf:68:48:33:1e:fa:fc:05:5d:6a:90:b6:
75:e4:c0:ec:70:c1:e3:dc:4d:dd:08:1e:1f:19:6c:
59:80:65:5c:86:a0:94:88:aa:9e:b9:1f:55:39:26:
3d:f4:55:16:a1:7a:0b:50:88:ec:90:38:2f:f2:60:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:46:65:E4:2B:0B:BB:2C:12:19:3D:76:B3:4B:8B:6A:CA:3E:9A:07
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4kZl5CsLuywSGT12s0uLaso-mgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:30c0::/29
2a11:2240::/29
2a11:3740::/29
2a11:5140::/29
2a11:6b40::/29
2a11:8fc0::/29
2a11:b540::/29
2a11:cd80::/29
2a11:d740::/29
2a12:c000::/29
Signature Algorithm: sha256WithRSAEncryption
10:22:4a:91:6c:e3:3f:6f:e4:59:8f:8d:6a:10:42:7d:24:03:
79:c2:a8:e0:92:eb:43:25:5f:14:2e:38:95:c9:54:6f:1d:3b:
d1:11:30:a7:14:bd:83:fb:fb:a5:e2:78:46:78:45:c5:18:b9:
49:13:b8:4a:9b:b9:d4:cc:13:87:dc:79:1f:6d:ce:30:a6:30:
b9:a3:91:e1:fc:e2:39:7b:ba:15:44:63:2a:86:d4:25:fa:ca:
5d:2a:e1:5b:3f:3f:21:17:4c:db:23:9d:7b:e5:50:ab:fe:e5:
0a:fc:c0:ec:02:29:df:f5:61:52:ae:c1:eb:77:df:d5:8e:fa:
58:40:bb:bb:cb:0e:06:71:6e:e8:21:df:d6:67:f4:19:38:07:
b7:5a:e8:3e:d8:b5:86:18:e8:ba:8d:7f:ac:15:44:e1:00:94:
1a:ab:83:3a:1b:fd:50:ec:c2:21:82:27:c2:7a:a7:07:3c:38:
f1:72:c2:3c:ad:70:ff:3d:41:ac:d8:cb:46:89:bd:ae:7c:16:
f3:ca:d8:b5:d5:17:0e:d2:c0:14:ad:ad:25:36:2c:4c:1f:73:
e7:8a:e7:2e:da:d3:32:3b:a0:91:8f:25:c7:33:59:0b:67:e5:
1b:e2:d3:01:2a:01:2e:4a:0a:fa:d4:9e:af:73:69:aa:2b:5f:
e6:f0:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:19:34 2026 by rpki-client