Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e2e249-1ac7-4129-9b03-e937e1a4c9c2/1/MoTJON4zfAAs86dhpRA8DMjBYds.roa
File: MoTJON4zfAAs86dhpRA8DMjBYds.roa (raw, json)
Hash identifier: lRQcvGIsxFIeX7X8wUkxLIMmqy/PrMCPXFkWBmHz8p4=
Subject key identifier: 32:84:C9:38:DE:33:7C:00:2C:F3:A7:61:A5:10:3C:0C:C8:C1:61:DB
Certificate issuer: /CN=e1b743202b51a8f3ece02994c4b2ecca856f9447
Certificate serial: 019ED53F7CA860244C7A03433FC774115CE4
Authority key identifier: E1:B7:43:20:2B:51:A8:F3:EC:E0:29:94:C4:B2:EC:CA:85:6F:94:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bdDICtRqPPs4CmUxLLsyoVvlEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e2e249-1ac7-4129-9b03-e937e1a4c9c2/1/MoTJON4zfAAs86dhpRA8DMjBYds.roa
Signing time: Wed 17 Jun 2026 11:02:48 +0000
ROA not before: Wed 17 Jun 2026 11:02:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 141.99.0.0/16 maxlen: 16
185.58.36.0/22 maxlen: 22
2a04:dfc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e2e249-1ac7-4129-9b03-e937e1a4c9c2/1/4bdDICtRqPPs4CmUxLLsyoVvlEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/e2e249-1ac7-4129-9b03-e937e1a4c9c2/1/4bdDICtRqPPs4CmUxLLsyoVvlEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bdDICtRqPPs4CmUxLLsyoVvlEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:3f:7c:a8:60:24:4c:7a:03:43:3f:c7:74:11:5c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b743202b51a8f3ece02994c4b2ecca856f9447
Validity
Not Before: Jun 17 11:02:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3284c938de337c002cf3a761a5103c0cc8c161db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:59:bf:bf:48:64:88:ed:26:c3:4e:b9:a9:
21:a2:8a:ec:34:a7:7c:2f:a5:71:7c:14:e5:da:59:
01:29:c8:64:80:60:8f:89:78:c9:5b:4f:69:ca:90:
c1:65:cc:76:7b:8d:37:65:c2:d9:14:53:61:bf:83:
82:76:27:aa:ac:b0:23:8f:64:64:c8:cf:ed:fd:b9:
71:3b:ff:b7:3f:ad:05:a6:4b:bc:6e:d9:43:46:fd:
b9:89:a6:f3:78:66:4b:e5:0f:88:90:3e:27:c3:1b:
da:d1:18:76:46:f7:a6:b1:62:98:d4:51:3e:e2:6d:
b8:01:b6:60:24:e8:7d:9a:39:ea:98:62:7f:cd:cd:
9b:18:c6:2f:28:ad:d1:fb:01:02:7c:c6:a4:5f:99:
7f:b9:da:df:4f:8c:4d:50:91:e3:51:ba:cb:24:d7:
84:f2:61:cd:c3:9c:15:e5:ab:2d:66:e9:b7:34:cc:
81:0c:15:75:a4:87:c0:84:2b:00:8a:88:fd:f4:5d:
6c:0c:f9:27:2b:45:7d:b1:9f:85:e0:88:76:d2:ad:
7c:cb:41:bf:88:82:99:91:55:6a:50:9e:48:c2:3c:
3c:5e:f6:d9:fa:9d:4f:61:1e:7a:ea:72:52:33:ca:
78:cb:e8:b8:2d:18:b5:11:6a:02:56:4e:24:72:e4:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:84:C9:38:DE:33:7C:00:2C:F3:A7:61:A5:10:3C:0C:C8:C1:61:DB
X509v3 Authority Key Identifier:
keyid:E1:B7:43:20:2B:51:A8:F3:EC:E0:29:94:C4:B2:EC:CA:85:6F:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bdDICtRqPPs4CmUxLLsyoVvlEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e2e249-1ac7-4129-9b03-e937e1a4c9c2/1/MoTJON4zfAAs86dhpRA8DMjBYds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e2e249-1ac7-4129-9b03-e937e1a4c9c2/1/4bdDICtRqPPs4CmUxLLsyoVvlEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.99.0.0/16
185.58.36.0/22
IPv6:
2a04:dfc0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:98:46:28:c2:90:d9:ce:e1:3c:5a:f3:1b:8b:4d:c7:89:3c:
b3:0f:d8:47:e2:c5:74:09:aa:f4:0c:5d:39:4d:b9:c8:f7:2a:
ec:58:be:92:c8:9f:06:77:4e:a4:ef:15:85:1b:d5:70:62:9b:
1b:6a:be:2f:f2:26:f0:06:f7:71:20:8b:7b:d6:10:08:df:22:
61:7c:df:18:48:08:e5:ff:45:d4:1c:41:4d:da:1e:2b:91:a5:
7c:4d:69:98:ed:dc:c7:02:e6:fe:b0:85:a3:da:63:14:29:da:
fe:04:b4:c5:74:2c:89:19:10:ea:8a:98:d8:5f:24:53:c3:82:
47:6d:04:50:00:aa:ce:21:4a:6e:77:53:9b:51:b6:73:fa:d0:
0f:7a:58:e8:25:38:3a:c0:c4:01:55:30:3d:13:d3:cd:f3:50:
7c:d8:b6:d3:69:3c:bb:6d:96:d6:24:a9:2e:53:09:dd:54:97:
f0:5e:06:fd:f5:f0:a8:6d:ca:33:14:83:4a:8c:06:71:4d:cb:
f8:2e:80:cb:54:69:cb:3b:6a:5f:50:c8:76:b3:4c:1c:75:06:
92:95:5b:aa:77:07:e5:5a:90:ae:6c:6d:d8:d9:ea:3b:04:52:
c6:8c:73:05:25:cb:9b:66:f6:00:15:09:ba:20:36:57:b0:79:
86:c6:c1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:25 2026 by rpki-client