Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/MweqnWcA2yFYU126C2NzK8MfpVM.roa
File: MweqnWcA2yFYU126C2NzK8MfpVM.roa (raw, json)
Hash identifier: lOoGXRi1l7hSEa78DSoLWrZ/PrH8pGpY2Gx3IYuFj4g=
Subject key identifier: 33:07:AA:9D:67:00:DB:21:58:53:5D:BA:0B:63:73:2B:C3:1F:A5:53
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019FAAB14DDDC17A6E3F4246FAF7E360767C
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/MweqnWcA2yFYU126C2NzK8MfpVM.roa
Signing time: Tue 28 Jul 2026 21:46:14 +0000
ROA not before: Tue 28 Jul 2026 21:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 109.122.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:b1:4d:dd:c1:7a:6e:3f:42:46:fa:f7:e3:60:76:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jul 28 21:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3307aa9d6700db2158535dba0b63732bc31fa553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:49:d6:03:18:49:b7:bd:8f:35:c1:db:04:
c6:68:c9:ab:45:96:01:58:b0:5e:36:8c:e6:8c:30:
af:d3:da:84:f2:8f:d5:31:d3:85:20:5d:1c:7d:f5:
ea:aa:80:c1:bc:1d:ec:0d:2b:e8:5f:5f:7e:05:34:
27:67:84:94:59:2d:b7:9d:32:f4:60:68:dd:73:0b:
06:99:17:75:72:d0:d9:e9:68:44:80:fb:83:a8:13:
51:31:74:22:59:ca:2c:04:22:06:b3:89:d4:c9:b1:
b0:49:b0:a3:d0:96:48:2c:7f:61:7e:54:45:54:69:
8b:9d:2c:57:c5:54:3a:41:37:c0:58:63:84:a4:bf:
c9:2c:3f:3d:9f:e8:da:5f:b1:62:c5:c5:0e:b4:6c:
9a:94:a6:f6:db:f5:b3:61:b5:a4:53:3d:f0:7f:8b:
96:eb:23:6f:f6:52:24:f8:06:0c:43:c4:1b:8e:5c:
de:6a:43:09:c8:8a:1b:e9:26:7b:b6:ca:1f:da:30:
a9:19:61:19:98:5c:cf:a0:d1:c0:92:8f:35:ff:07:
66:f0:f4:20:aa:54:dc:37:cc:c5:ae:2a:a5:c5:f6:
63:30:6d:ae:ab:8b:46:a8:ff:74:2d:71:05:b7:14:
a7:35:5e:21:6c:18:75:7a:df:f1:7d:88:ee:32:e8:
bd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:07:AA:9D:67:00:DB:21:58:53:5D:BA:0B:63:73:2B:C3:1F:A5:53
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/MweqnWcA2yFYU126C2NzK8MfpVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.59.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c0:6b:9a:75:e9:21:88:a1:44:c7:f2:73:4d:fa:c6:ee:54:
91:2c:6a:ff:af:9f:ec:97:eb:8a:82:96:b8:76:ea:0e:5f:2f:
2c:1b:01:42:26:2b:bc:bf:12:0e:d8:52:a6:10:38:5b:ce:a4:
9f:89:6b:93:07:cb:f2:3c:8f:2a:fd:5c:41:fe:b2:23:61:f8:
70:b9:4b:24:47:13:f3:74:30:a4:79:d6:ce:c9:0c:af:7e:92:
eb:73:76:a5:d3:9b:e6:f1:ed:cf:30:88:44:28:9f:03:7d:ca:
78:b3:ad:b9:0e:5d:67:0b:9c:32:22:ba:e0:c8:47:3a:86:39:
4f:d0:6a:c6:b5:82:5f:fb:78:ea:08:09:d1:0d:03:33:9c:75:
40:5c:cc:33:aa:e6:f6:9e:3f:1b:32:09:19:3d:b1:9a:0e:75:
21:bb:30:dd:30:ef:df:5e:0a:71:95:5d:0e:12:1e:d9:29:5f:
1b:95:7d:e6:a5:fb:f4:67:4f:6d:56:4c:5a:20:21:e5:4f:2d:
68:e1:01:7b:74:76:0f:9a:c7:c9:4c:84:ea:fc:c4:36:c2:53:
fb:bf:6f:53:b9:94:48:09:3d:1a:0d:a8:57:95:2d:94:d8:c8:
7a:b9:78:3e:f4:ad:e4:29:f8:c4:6e:ca:c0:68:45:20:81:d1:
64:6f:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:21:35 2026 by rpki-client