Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/MEw9vJlmK8tPtfpgWCFGXg0MRC0.roa
File: MEw9vJlmK8tPtfpgWCFGXg0MRC0.roa (raw, json)
Hash identifier: MUGq2YVJo0nJKeFlRKa8DNIyZJcjs6il92Ycne4TRGA=
Subject key identifier: 30:4C:3D:BC:99:66:2B:CB:4F:B5:FA:60:58:21:46:5E:0D:0C:44:2D
Certificate issuer: /CN=5754bad239d85a9fccafbe84352d3cad8e5d9900
Certificate serial: 01A08FAB76112E65F8087675506D1929083C
Authority key identifier: 57:54:BA:D2:39:D8:5A:9F:CC:AF:BE:84:35:2D:3C:AD:8E:5D:99:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1S60jnYWp_Mr76ENS08rY5dmQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/MEw9vJlmK8tPtfpgWCFGXg0MRC0.roa
Signing time: Fri 11 Sep 2026 08:52:53 +0000
ROA not before: Fri 11 Sep 2026 08:52:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31424
IP address blocks: 194.126.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/V1S60jnYWp_Mr76ENS08rY5dmQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/V1S60jnYWp_Mr76ENS08rY5dmQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1S60jnYWp_Mr76ENS08rY5dmQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:ab:76:11:2e:65:f8:08:76:75:50:6d:19:29:08:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5754bad239d85a9fccafbe84352d3cad8e5d9900
Validity
Not Before: Sep 11 08:52:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=304c3dbc99662bcb4fb5fa605821465e0d0c442d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:2d:3a:2a:b2:79:56:60:f9:d0:b7:4d:fd:
73:af:da:74:9f:5f:a0:dc:0d:97:7d:83:aa:47:c3:
2c:fd:1f:86:0e:58:8c:c1:2b:30:76:f2:b1:29:90:
45:69:ee:b1:46:b4:68:88:2f:d8:a5:1e:17:b1:f6:
b8:55:39:33:8d:2b:8f:52:f7:92:f4:88:10:1f:f4:
81:2a:ae:18:80:22:d5:d7:b0:69:58:d0:f8:7c:13:
0e:fc:df:cd:1e:7d:2b:ae:a5:9f:21:24:55:4b:19:
81:81:31:5a:a3:23:1b:60:81:c8:24:91:35:89:79:
2d:38:02:e7:d1:32:1e:af:76:23:75:89:34:d8:dc:
77:e2:87:96:63:95:1c:32:0b:26:09:04:3c:44:6e:
4b:b7:bf:27:44:78:25:98:96:f0:2f:31:f2:5b:e0:
44:68:d1:df:f3:3d:fb:99:11:37:4e:e8:3a:0e:3e:
47:ef:41:d2:15:64:6d:ee:51:7c:6b:f8:81:1a:15:
39:09:5d:c9:aa:ba:d3:21:1f:9a:f9:44:bf:56:dc:
bd:48:13:11:fa:7a:84:95:0c:83:a4:f5:63:bb:0a:
9e:5f:a5:02:f4:88:8f:b0:9c:ac:f3:62:be:6c:e8:
06:4c:b9:3a:9c:d2:89:a4:87:c3:88:c7:da:3a:24:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4C:3D:BC:99:66:2B:CB:4F:B5:FA:60:58:21:46:5E:0D:0C:44:2D
X509v3 Authority Key Identifier:
keyid:57:54:BA:D2:39:D8:5A:9F:CC:AF:BE:84:35:2D:3C:AD:8E:5D:99:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1S60jnYWp_Mr76ENS08rY5dmQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/MEw9vJlmK8tPtfpgWCFGXg0MRC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/V1S60jnYWp_Mr76ENS08rY5dmQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.201.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8f:df:a5:3d:f3:66:24:5a:fc:ae:7a:3b:24:52:c1:7d:bc:
eb:2c:68:e8:1b:b0:21:74:0f:bf:aa:97:30:b3:a4:aa:48:98:
50:6d:fb:e1:a1:bb:6f:fa:f8:d4:8d:40:55:46:46:ff:ea:fc:
1a:cb:ec:e6:29:6d:11:9a:d0:e5:fd:70:20:e0:e6:70:d5:63:
b3:ae:bf:2f:d4:c8:aa:5c:bd:d3:62:20:42:f2:0f:b6:ed:42:
c4:fe:d5:15:5c:51:86:34:ae:9c:a9:36:8a:fa:53:24:b5:84:
5c:ad:dc:eb:26:70:40:36:e0:d8:45:6e:23:fc:e6:66:0a:2c:
07:2d:0a:2c:3a:16:8a:94:07:1b:ec:f8:8e:56:07:c0:74:20:
f4:3f:73:5c:f1:4e:dd:2e:5b:9f:89:56:59:96:a2:68:d2:48:
6a:4b:5e:c7:5f:2b:ce:ba:96:03:f6:3b:0e:08:ba:1f:96:fd:
35:7b:29:12:3f:5f:1a:3c:e8:21:02:37:6c:8c:3f:d7:dd:18:
06:f9:af:8e:62:72:8e:0b:39:50:6b:3d:ef:74:19:e3:00:40:
6f:c7:ae:88:b2:2c:1d:f1:8e:3f:2b:97:c7:43:5e:86:67:b0:
f0:8b:be:99:05:8e:70:61:22:c3:c1:14:06:a7:18:a9:13:29:
6c:82:57:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:03:05 2026 by rpki-client