Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/M6YDzlZVr545-NRDZbfv7XkNikA.roa
File: M6YDzlZVr545-NRDZbfv7XkNikA.roa (raw, json)
Hash identifier: vga3ADtyJ30uY+qd7xLsXyiEJYmB+7pvZRn567PTxOw=
Subject key identifier: 33:A6:03:CE:56:55:AF:9E:39:F8:D4:43:65:B7:EF:ED:79:0D:8A:40
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 019C91B421269DDFFC6673E5FE197C9B8FE6
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/M6YDzlZVr545-NRDZbfv7XkNikA.roa
Signing time: Tue 24 Feb 2026 22:10:27 +0000
ROA not before: Tue 24 Feb 2026 22:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49915
IP address blocks: 152.236.0.0/16 maxlen: 24
2a0a:1800::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:91:b4:21:26:9d:df:fc:66:73:e5:fe:19:7c:9b:8f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Feb 24 22:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33a603ce5655af9e39f8d44365b7efed790d8a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:24:87:ce:f8:4a:d0:69:24:fe:2e:a8:f9:b3:
13:2b:98:5b:f5:84:4c:0b:cc:bc:13:19:d0:e3:14:
5e:d4:26:6a:ad:ea:26:54:2c:3e:de:88:c1:19:69:
aa:04:0e:a7:6d:20:23:77:ca:10:77:af:4e:b5:67:
94:40:e7:df:8a:0b:a6:e4:e9:76:9e:c5:99:ca:f7:
e1:d4:7f:2e:30:2c:fb:fa:b5:fa:c5:4f:23:88:d2:
a4:99:60:72:6a:0b:67:18:1b:05:f0:f1:ec:f5:20:
96:4f:26:b1:f9:31:60:1a:3f:2b:d4:71:35:67:45:
6b:32:4a:25:5b:7d:88:6c:94:df:72:72:74:20:f3:
96:37:94:63:ec:71:5b:31:73:96:99:73:79:7e:3d:
77:49:72:2c:25:1a:2b:74:2e:84:7f:86:cd:8a:f7:
99:36:29:38:f0:0c:6b:84:0f:2d:04:e2:2b:d8:62:
cd:7a:c1:1a:19:f3:be:27:c4:66:50:b9:3a:ab:db:
35:d8:9c:fb:6d:f3:a0:d6:9f:fc:3f:66:fc:af:97:
42:74:05:29:d8:ce:ba:43:b9:84:ea:8f:91:99:43:
87:63:b5:49:24:14:15:16:bb:16:7b:67:22:b1:a2:
65:85:17:54:93:63:d4:3f:fe:98:d2:d1:45:5f:d4:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A6:03:CE:56:55:AF:9E:39:F8:D4:43:65:B7:EF:ED:79:0D:8A:40
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/M6YDzlZVr545-NRDZbfv7XkNikA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.236.0.0/16
IPv6:
2a0a:1800::/32
Signature Algorithm: sha256WithRSAEncryption
04:74:e8:f3:28:ce:0c:3b:4d:40:42:5d:57:02:ff:e0:21:ea:
3d:fc:63:82:a8:ae:69:b0:fe:01:1b:77:4c:c2:57:03:8c:ec:
36:62:85:21:f5:aa:29:31:26:12:3e:7c:03:03:7f:ea:5e:29:
32:0a:f3:b4:d9:c1:40:10:75:55:fb:cb:ac:07:a5:62:62:6f:
fc:44:57:0d:f6:87:04:59:d0:8a:2a:70:3e:ec:2e:57:62:49:
6d:cf:8a:4e:c7:7b:4b:49:7f:ac:85:9e:1f:e4:e9:76:6a:f9:
09:c9:ca:ea:55:eb:e5:44:cc:f9:2c:aa:82:b5:a7:63:ce:fa:
79:5d:3b:1c:75:1f:57:d5:1e:ea:e8:6f:bb:9e:91:be:e3:bd:
f7:2c:a6:4d:07:85:80:3c:a1:f1:a4:b3:a3:0d:59:f0:94:e0:
64:30:c6:61:f2:b9:5f:55:98:75:8e:a8:21:a0:7f:32:91:5b:
51:fe:3f:b4:7e:76:59:1a:fc:aa:32:ed:f8:3b:f6:cb:47:ae:
6f:43:91:be:7b:77:20:fb:89:54:73:61:66:40:f2:26:09:6e:
6e:75:68:e0:6a:1a:27:52:fb:12:62:f5:fe:45:20:a0:71:3a:
49:f4:77:41:7c:ba:df:6b:d5:ad:62:e6:05:4c:7f:ee:a6:7e:
e4:7f:f8:bf
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZyRtCEmnd/8ZnPl/hl8m4/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzODgzYTc5Nzg5ZDlmNjU4MTUyOTJmMThkNDk4MGJhOWM1
ZWQyMjEwHhcNMjYwMjI0MjIxMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2E2MDNjZTU2NTVhZjllMzlmOGQ0NDM2NWI3ZWZlZDc5MGQ4YTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSSHzvhK0Gkk/i6o+bMTK5hb9YRM
C8y8ExnQ4xRe1CZqreomVCw+3ojBGWmqBA6nbSAjd8oQd69OtWeUQOffigum5Ol2
nsWZyvfh1H8uMCz7+rX6xU8jiNKkmWByagtnGBsF8PHs9SCWTyax+TFgGj8r1HE1
Z0VrMkolW32IbJTfcnJ0IPOWN5Rj7HFbMXOWmXN5fj13SXIsJRordC6Ef4bNiveZ
Nik48AxrhA8tBOIr2GLNesEaGfO+J8RmULk6q9s12Jz7bfOg1p/8P2b8r5dCdAUp
2M66Q7mE6o+RmUOHY7VJJBQVFrsWe2cisaJlhRdUk2PUP/6Y0tFFX9QfnwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFDOmA85WVa+eOfjUQ2W37+15DYpAMB8GA1UdIwQY
MBaAFGOIOnl4nZ9lgVKS8Y1JgLqcXtIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYt
MzVkMDU5NWUxMmYwLzEvTTZZRHpsWlZyNTQ1LU5SRFpiZnY3WGtOaWtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYtMzVkMDU5NWUxMmYw
LzEvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDALBAIAATAFAwMAmOwwDQQC
AAIwBwMFACoKGAAwDQYJKoZIhvcNAQELBQADggEBAAR06PMozgw7TUBCXVcC/+Ah
6j38Y4Kormmw/gEbd0zCVwOM7DZihSH1qikxJhI+fAMDf+peKTIK87TZwUAQdVX7
y6wHpWJib/xEVw32hwRZ0IoqcD7sLldiSW3Pik7He0tJf6yFnh/k6XZq+QnJyupV
6+VEzPksqoK1p2PO+nldOxx1H1fVHurob7uekb7jvfcspk0HhYA8ofGks6MNWfCU
4GQwxmHyuV9VmHWOqCGgfzKRW1H+P7R+dlka/Koy7fg79stHrm9Dkb57dyD7iVRz
YWZA8iYJbm51aOBqGidS+xJi9f5FIKBxOkn0d0F8ut9r1a1i5gVMf+6mfuR/+L8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:53:47 2026 by rpki-client