Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/MmdMYdnFGKAQaaW-EpV_KukZOwg.roa
File: MmdMYdnFGKAQaaW-EpV_KukZOwg.roa (raw, json)
Hash identifier: Jeo+yHcPo3neOn3MMjFI/0H7ghQVonj3u6f1BlhM4RE=
Subject key identifier: 32:67:4C:61:D9:C5:18:A0:10:69:A5:BE:12:95:7F:2A:E9:19:3B:08
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 01A0620E9EAEB3ADDEC749D8B9944D4E8E52
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/MmdMYdnFGKAQaaW-EpV_KukZOwg.roa
Signing time: Wed 02 Sep 2026 12:18:40 +0000
ROA not before: Wed 02 Sep 2026 12:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213291
IP address blocks: 195.242.0.0/23 maxlen: 24
195.242.7.0/24 maxlen: 24
195.242.8.0/21 maxlen: 24
195.242.16.0/20 maxlen: 24
195.242.23.0/24 maxlen: 24
2a13:5940::/32 maxlen: 32
2a13:5945:7::/48 maxlen: 48
2a13:5945:c::/48 maxlen: 48
2a13:5945:22::/48 maxlen: 48
2a13:5945:43::/48 maxlen: 48
2a13:5947::/40 maxlen: 48
2a13:5947:102::/48 maxlen: 48
2a13:5947:103::/48 maxlen: 48
2a13:5947:130::/48 maxlen: 48
2a13:5947:131::/48 maxlen: 48
2a13:5947:150::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:0e:9e:ae:b3:ad:de:c7:49:d8:b9:94:4d:4e:8e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Sep 2 12:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32674c61d9c518a01069a5be12957f2ae9193b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:fa:65:3a:50:0f:be:c6:6a:36:6b:19:bd:
da:91:76:8d:41:0f:18:ca:06:cc:01:ca:c6:8a:bf:
ea:26:6e:a2:f9:bd:93:5e:22:04:62:d3:b9:d5:ee:
70:6e:90:b7:ff:da:41:f2:e7:61:5d:7e:2e:27:ac:
23:c6:40:9c:67:0a:b2:0d:85:45:40:5a:d7:f1:de:
3d:f6:55:9a:c8:c6:e6:20:e9:24:aa:91:84:05:02:
53:db:2a:54:a7:49:99:be:d2:62:54:0a:4e:50:95:
62:5d:81:22:73:7f:1a:99:2f:07:7f:84:7d:6d:2e:
c5:6f:17:b7:f3:13:e1:f3:8b:61:31:4a:3c:6e:80:
54:39:34:47:dd:32:16:39:52:e9:84:f2:e9:f0:08:
17:ef:92:8e:18:6a:10:7e:6d:70:e9:17:32:bd:6a:
df:81:4c:7c:9e:18:ed:c6:ab:d5:e9:61:8b:a0:ab:
02:09:fc:3a:ac:d9:25:9b:fe:1b:6c:90:d0:10:3d:
3d:ef:10:fe:05:ff:7d:d6:16:57:25:31:81:7e:ab:
10:fe:67:47:fc:e0:88:96:84:03:5e:76:8e:a1:9b:
99:8b:2f:f3:79:a0:35:29:93:bb:86:40:ce:5b:68:
89:9c:3a:c3:df:9e:a9:6c:5e:35:59:6d:92:32:26:
00:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:67:4C:61:D9:C5:18:A0:10:69:A5:BE:12:95:7F:2A:E9:19:3B:08
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/MmdMYdnFGKAQaaW-EpV_KukZOwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.0.0/23
195.242.7.0-195.242.31.255
IPv6:
2a13:5940::/32
2a13:5945:7::/48
2a13:5945:c::/48
2a13:5945:22::/48
2a13:5945:43::/48
2a13:5947::/40
2a13:5947:102::/47
2a13:5947:130::/47
2a13:5947:150::/48
Signature Algorithm: sha256WithRSAEncryption
74:8c:6a:73:85:d6:3a:03:b4:53:b0:97:b9:c5:61:3c:21:bd:
63:58:82:e7:24:81:a9:ed:e5:d0:53:34:c9:16:91:07:1e:28:
10:a8:70:af:4a:78:bc:d6:5e:ef:d8:9e:25:ae:6e:b7:35:94:
dc:8f:7f:a8:97:6a:16:a7:cf:ca:3b:a2:29:43:71:8d:bc:cc:
3b:03:f7:5e:43:e1:15:d3:5b:f7:b4:57:1e:58:c6:2e:89:ce:
8f:e9:57:6a:f8:2c:c1:41:6b:b6:39:fb:c7:b3:08:e0:81:a8:
63:55:e1:35:19:49:2e:e1:04:21:0d:4c:b8:2d:ea:45:10:05:
0e:1a:c7:c6:de:d5:53:a0:12:19:ce:05:45:d7:c8:d7:8c:4d:
9f:cb:7a:63:59:8b:89:26:d5:3f:b6:a9:36:88:f5:8d:a6:c6:
c0:2f:ba:18:0d:26:b7:2b:20:fc:be:6c:22:a8:49:83:8a:17:
7b:a6:18:11:a6:20:67:c5:9b:be:74:2b:5b:ce:c1:a1:8d:c9:
0c:6e:d5:ea:d2:68:cd:3a:39:4f:2b:9d:fa:8d:04:07:6b:78:
4e:36:69:5d:03:d2:f7:bd:d5:c7:77:16:d5:e6:48:47:dd:f4:
a6:11:ab:91:4c:b6:50:fa:4b:fa:4d:8c:5d:77:dd:20:95:79:
45:61:c4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:37:13 2026 by rpki-client