Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/meqA3EJ2dk40MOFtOn3KY_3JqZc.roa
File: meqA3EJ2dk40MOFtOn3KY_3JqZc.roa (raw, json)
Hash identifier: PMvWvyZeQ/F56OIn+Hm8HW0sQqsC8sTM1/3A775LAFo=
Subject key identifier: 99:EA:80:DC:42:76:76:4E:34:30:E1:6D:3A:7D:CA:63:FD:C9:A9:97
Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial: 019D8CDAC22F37DAF47BC18B585FDF6F217C
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/meqA3EJ2dk40MOFtOn3KY_3JqZc.roa
Signing time: Tue 14 Apr 2026 16:37:19 +0000
ROA not before: Tue 14 Apr 2026 16:37:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197075
IP address blocks: 5.152.144.0/24 maxlen: 24
5.152.154.0/24 maxlen: 24
5.152.156.0/24 maxlen: 24
109.107.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:da:c2:2f:37:da:f4:7b:c1:8b:58:5f:df:6f:21:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Validity
Not Before: Apr 14 16:37:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99ea80dc4276764e3430e16d3a7dca63fdc9a997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:17:d6:f0:e7:45:13:8c:89:23:03:12:67:
86:dc:de:82:5a:67:3d:0f:b7:88:d8:e5:4f:bd:a9:
ee:cc:5d:1b:94:90:fe:79:b8:e2:7f:14:0f:a1:30:
97:c9:8d:e6:1d:a7:b7:2f:56:d8:90:7d:11:2d:78:
59:a1:56:08:e9:c9:a2:ef:58:c4:93:04:bd:0d:89:
20:d1:46:f8:21:a4:11:b6:16:02:b6:fa:cc:db:1f:
7c:3c:c1:74:7b:6e:b6:be:1b:34:1c:10:6b:c3:ce:
5d:32:58:44:c9:bc:71:a6:0f:71:af:f6:45:e4:75:
b4:78:fd:cd:00:9b:c1:7a:a9:18:74:9a:6a:11:cc:
7f:3e:77:79:26:44:e0:c2:7a:ab:9d:3d:b3:90:b9:
23:30:f4:ca:b3:dd:e7:08:a4:15:f1:24:ee:7e:90:
3f:63:bd:6e:0b:b8:97:06:a2:33:12:6b:93:7b:45:
81:b8:42:a3:42:fd:05:2e:9f:69:18:27:0d:c7:27:
1e:2b:66:8f:ba:6c:79:7f:c9:56:c0:68:f0:aa:32:
87:71:c2:27:c0:84:e3:48:09:19:c0:8d:f1:73:f8:
6a:30:77:f3:9c:3f:9a:96:25:e6:5b:f6:15:79:9b:
d2:24:0b:4f:e4:c5:3e:ef:47:82:2a:7b:a7:5d:59:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EA:80:DC:42:76:76:4E:34:30:E1:6D:3A:7D:CA:63:FD:C9:A9:97
X509v3 Authority Key Identifier:
keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/meqA3EJ2dk40MOFtOn3KY_3JqZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.144.0/24
5.152.154.0/24
5.152.156.0/24
109.107.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5d:33:31:22:3a:eb:ca:f1:f7:78:c8:f6:28:00:38:a8:be:
49:b3:e7:98:65:f5:48:4e:9d:2b:91:40:03:41:f6:c1:c5:35:
61:15:d9:f6:49:50:06:14:d2:84:3d:ff:f5:bf:1a:7b:c6:c1:
dc:ec:1e:6c:9b:11:5b:6a:d8:7c:d7:bd:26:22:bd:c1:8d:3b:
8f:ed:42:a2:81:f5:86:d4:51:ab:a5:44:99:52:12:93:54:52:
87:7a:4c:dd:c1:a1:41:df:67:37:89:2d:f6:a0:cd:f4:1a:cc:
69:8a:a6:1d:ac:62:2a:81:6d:48:76:04:42:b9:76:f4:b9:13:
4c:2f:a9:3c:32:cf:44:4d:f2:45:f5:8b:a0:a1:58:e9:c8:0c:
7b:02:0d:1f:f7:42:95:aa:d9:7a:aa:78:be:9e:31:51:24:d6:
0e:c6:c7:25:c7:a6:ec:7b:ac:01:42:fc:9b:cf:b5:41:60:b7:
33:c7:3c:eb:10:04:f1:b2:af:e7:3b:10:1d:54:2d:23:b7:64:
f9:c3:f0:3d:1b:e3:06:6a:a7:87:1f:7b:e7:f0:2b:9f:2e:f5:
ca:84:61:79:07:c8:10:9a:5d:fa:db:4a:3d:af:f4:aa:2f:d0:
a8:fa:a1:a2:23:1b:f9:7c:cc:5c:1a:fb:53:3d:e4:d5:07:65:
26:fd:56:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:29 2026 by rpki-client