Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/mREkMg5h2CoIwruTXu13t8R24-k.roa
File: mREkMg5h2CoIwruTXu13t8R24-k.roa (raw, json)
Hash identifier: Vo8UtPNjAwIl81SeOEZNnSFyr/XEVmp6uyc99whKu80=
Subject key identifier: 99:11:24:32:0E:61:D8:2A:08:C2:BB:93:5E:ED:77:B7:C4:76:E3:E9
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019C934436F9325FF394FDD6241C902361E3
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/mREkMg5h2CoIwruTXu13t8R24-k.roa
Signing time: Wed 25 Feb 2026 05:27:27 +0000
ROA not before: Wed 25 Feb 2026 05:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216127
IP address blocks: 62.60.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:44:36:f9:32:5f:f3:94:fd:d6:24:1c:90:23:61:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 25 05:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=991124320e61d82a08c2bb935eed77b7c476e3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:ac:2f:5f:cc:41:63:f5:29:06:c0:d3:bf:
10:24:00:79:8c:7e:40:a6:32:22:27:78:ce:d3:ce:
0a:f7:2c:e2:98:8a:af:5a:ca:74:bf:1b:2a:39:66:
1b:e5:7b:f1:be:a4:13:f4:66:de:fe:9b:89:71:39:
07:1c:b3:96:04:f5:42:f8:84:12:cb:db:2a:3d:45:
54:8c:71:7e:31:02:b7:f3:cb:42:49:e1:f0:dc:bb:
a4:d7:36:8a:5f:7b:bd:f0:c0:e2:1e:5c:bc:6a:ef:
5e:52:e9:bd:ab:0f:e5:2e:f3:3a:e2:bc:4d:11:4e:
72:6e:3b:50:0b:c2:28:8f:ad:08:4d:37:77:13:6d:
25:be:61:f1:53:30:59:1e:33:73:76:81:0b:e5:8f:
23:3c:4a:f6:ec:d2:56:c6:36:6f:bc:c6:0c:20:1f:
3a:5e:b5:65:01:36:40:33:ff:46:a0:7c:56:4e:f6:
e2:60:ca:fb:67:17:db:59:c7:23:f3:e4:b4:82:63:
ff:21:67:d7:cc:5e:fb:c1:ac:31:df:b3:6c:eb:2e:
f0:f9:1e:3c:82:9b:c7:97:90:94:94:f6:93:f4:57:
43:45:cc:00:03:7a:f4:f9:7b:ca:20:7e:39:cd:1d:
10:8f:a6:4e:de:52:82:be:4b:c5:29:b0:06:64:7e:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:11:24:32:0E:61:D8:2A:08:C2:BB:93:5E:ED:77:B7:C4:76:E3:E9
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/mREkMg5h2CoIwruTXu13t8R24-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.252.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:98:05:95:47:76:14:89:59:de:29:94:2c:cd:9f:2c:ad:e1:
45:a2:ec:8a:17:bf:6a:6d:1f:00:20:a4:b4:8d:90:d7:27:58:
41:fa:4c:ac:c3:e7:1c:0d:db:a3:57:fe:ed:1d:a3:ae:1a:cf:
24:9e:b6:b3:22:c1:39:25:04:4e:2f:29:10:4c:cf:28:d6:61:
04:6a:1c:4e:56:d2:13:c0:9c:d1:97:cf:3b:d1:b0:0c:2b:03:
ae:ed:77:10:15:68:1f:68:c8:6e:93:88:2d:e4:cf:51:60:aa:
e5:14:d5:6e:d0:a2:a5:af:39:fa:77:91:dc:51:d4:b6:c4:28:
1b:3a:4e:08:3f:66:85:0f:4f:da:47:f8:20:a8:68:d1:c6:ba:
90:5a:85:f5:43:4e:ab:38:00:d8:c7:dc:e9:d0:0f:ea:36:90:
8a:c6:b9:67:83:d4:79:c2:af:e7:cd:e5:a2:cb:fc:2f:d8:9f:
bf:7c:35:6f:6d:1b:46:62:32:78:e1:8f:2f:3a:ef:13:9e:5e:
16:3f:ad:1c:af:43:bc:7d:be:27:74:f5:86:8f:ec:b8:23:44:
db:82:9a:e4:b1:6e:6e:da:15:69:7a:ac:b2:4a:02:45:f3:aa:
d5:fa:04:8e:2d:3b:a8:a3:87:63:5d:9a:0c:66:1f:67:1d:1f:
d6:11:8e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:32:05 2026 by rpki-client