Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/MV0PEtEAVz8oWit9PFrLe1hLSck.roa
File: MV0PEtEAVz8oWit9PFrLe1hLSck.roa (raw, json)
Hash identifier: Di1VZRsfDQtFnrr5bv1XXI0tFLJXBe+C/kKalWG3jf8=
Subject key identifier: 31:5D:0F:12:D1:00:57:3F:28:5A:2B:7D:3C:5A:CB:7B:58:4B:49:C9
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 019F634DFF3A5E7E20A6FC20C3F0F3CD52E9
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/MV0PEtEAVz8oWit9PFrLe1hLSck.roa
Signing time: Wed 15 Jul 2026 01:04:43 +0000
ROA not before: Wed 15 Jul 2026 01:04:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214697
IP address blocks: 212.15.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:63:4d:ff:3a:5e:7e:20:a6:fc:20:c3:f0:f3:cd:52:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Jul 15 01:04:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=315d0f12d100573f285a2b7d3c5acb7b584b49c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:06:d0:42:0d:79:f7:98:dc:b2:ae:b7:f9:
5e:f1:3b:3e:aa:11:91:2f:23:f5:90:89:5e:3b:72:
d8:ab:2f:6d:f2:61:ef:a5:79:68:be:8b:3b:a8:de:
a7:9f:68:f7:c7:cb:26:e5:e9:ee:5b:59:a7:87:a9:
e8:bb:d7:f3:e3:e8:62:75:7a:b4:8e:b4:fa:48:be:
4d:2d:f1:db:bd:bf:37:ab:21:9a:4c:81:bc:7b:47:
65:11:d3:e1:d2:13:62:a9:24:1f:0b:0c:af:7c:9e:
0d:ad:04:66:90:4c:b7:99:27:09:63:91:97:dc:95:
91:a8:d7:26:69:89:d0:e2:e6:6f:9e:e1:67:3f:c9:
e8:da:6e:5a:33:f8:c4:35:f0:a5:8c:3d:2e:0d:18:
0d:e8:d0:5a:e3:84:fd:61:31:ff:a3:e8:47:b2:9b:
72:b7:63:a2:fd:f8:4e:06:bd:6b:87:f1:73:4d:99:
b1:79:f0:7f:b6:ae:ea:e5:db:03:b0:31:04:3c:a3:
20:30:c3:5c:9a:01:56:a3:e9:20:9c:ab:75:58:ed:
47:bb:f5:1f:af:48:f6:a9:eb:ee:0f:b2:05:f9:87:
1a:81:43:22:7b:fc:db:eb:de:02:c4:39:99:b9:22:
dc:f0:18:0e:4f:93:c0:f3:c9:73:1e:85:4e:1a:c1:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5D:0F:12:D1:00:57:3F:28:5A:2B:7D:3C:5A:CB:7B:58:4B:49:C9
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/MV0PEtEAVz8oWit9PFrLe1hLSck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:91:e3:e6:69:3c:43:5e:4c:af:3d:ce:29:f2:b6:52:c5:dd:
30:37:94:83:11:01:dd:c0:ac:82:b8:72:1e:a9:a5:f5:98:dc:
e3:7e:de:4d:2e:c7:eb:28:8e:75:b9:e5:39:3b:0b:35:fc:f1:
16:c4:62:bb:bc:e9:47:06:66:de:e0:bf:14:34:6a:0e:51:ad:
d5:5d:0b:06:ad:09:89:c5:db:2e:1f:18:eb:3c:df:b7:67:b4:
b0:76:b9:0e:b9:37:0d:fd:57:87:01:c2:88:0f:0a:df:09:da:
f5:5e:45:0c:56:1c:44:50:38:cd:51:e6:7d:0f:15:86:78:c7:
63:3a:66:a3:87:63:31:6b:ee:ef:b7:5a:96:52:21:75:dc:61:
ae:4c:ae:85:95:ce:6a:ba:6a:bd:e9:11:da:fe:21:e5:dd:56:
9c:57:14:6c:b4:fa:06:ba:43:49:b8:a4:17:28:53:c5:fb:c3:
da:3a:7e:a1:6a:f1:6d:00:86:c3:bc:b6:2c:a0:4e:aa:79:7c:
89:01:62:1b:29:19:10:98:6b:b9:1b:5e:c8:68:d1:03:a8:cb:
fe:da:41:d6:4b:46:94:2e:18:9b:1b:13:1a:f9:10:eb:26:88:
bb:05:f0:f0:53:c5:63:3b:0a:cb:47:b4:5a:55:17:67:d2:86:
7b:46:24:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:29 2026 by rpki-client