Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/M2Xl3gCxDPl2FoR0ehnDRYa-dGY.roa
File: M2Xl3gCxDPl2FoR0ehnDRYa-dGY.roa (raw, json)
Hash identifier: lU9vzqH6uaYjhvpiDwQOl1OKXNocXUzAF959NsQaJPo=
Subject key identifier: 33:65:E5:DE:00:B1:0C:F9:76:16:84:74:7A:19:C3:45:86:BE:74:66
Certificate issuer: /CN=997c34f16832ced8982cf06fb59a02298401f8da
Certificate serial: 019F2369272A5772264011E255D5727A84EC
Authority key identifier: 99:7C:34:F1:68:32:CE:D8:98:2C:F0:6F:B5:9A:02:29:84:01:F8:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXw08WgyztiYLPBvtZoCKYQB-No.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/M2Xl3gCxDPl2FoR0ehnDRYa-dGY.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3303
IP address blocks: 194.48.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/mXw08WgyztiYLPBvtZoCKYQB-No.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/mXw08WgyztiYLPBvtZoCKYQB-No.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXw08WgyztiYLPBvtZoCKYQB-No.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:27:2a:57:72:26:40:11:e2:55:d5:72:7a:84:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c34f16832ced8982cf06fb59a02298401f8da
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3365e5de00b10cf9761684747a19c34586be7466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7d:ee:62:4f:07:37:70:ba:d3:8b:1c:52:0c:
31:98:51:c7:63:ce:8f:03:b0:86:57:d9:61:f1:52:
d8:ba:df:cf:5f:ae:e2:cb:9d:4b:30:20:52:38:44:
ee:d1:51:84:6c:b2:ac:9b:1c:62:79:45:63:5a:ee:
84:2b:6e:26:25:78:bc:26:1d:a4:0c:6a:fb:4e:39:
a9:57:2e:85:31:0d:e5:05:bb:ed:f0:54:96:12:11:
3f:62:09:d8:c1:49:71:f8:cf:98:fd:47:2d:05:dd:
27:1d:36:4e:16:15:90:2c:2a:76:07:11:3d:70:bc:
1b:de:56:f5:41:bc:b0:cc:f1:9a:43:ed:b2:e8:2f:
36:7d:92:a5:18:18:6a:27:b6:f6:01:58:b6:bd:6b:
23:46:75:e8:ec:eb:cf:7c:68:9d:d9:92:d4:0b:0b:
32:a1:20:2e:c9:27:b9:1f:76:dc:f0:ac:be:b5:94:
e2:15:d9:61:d9:ba:71:60:83:9d:6d:dc:78:01:84:
47:32:a4:26:40:51:11:d5:0d:9d:ef:5d:6a:00:d0:
c6:27:92:ca:af:14:22:98:aa:73:84:12:6b:4c:48:
3e:1d:f6:bc:af:f5:5a:0f:33:de:c7:fd:a6:e8:fb:
88:0e:8c:c8:50:77:80:62:51:c0:10:57:74:98:cd:
1b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:65:E5:DE:00:B1:0C:F9:76:16:84:74:7A:19:C3:45:86:BE:74:66
X509v3 Authority Key Identifier:
keyid:99:7C:34:F1:68:32:CE:D8:98:2C:F0:6F:B5:9A:02:29:84:01:F8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXw08WgyztiYLPBvtZoCKYQB-No.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/M2Xl3gCxDPl2FoR0ehnDRYa-dGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/mXw08WgyztiYLPBvtZoCKYQB-No.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.215.0/24
Signature Algorithm: sha256WithRSAEncryption
30:5f:82:bb:1b:4f:06:d5:0c:01:27:68:00:b1:07:fa:a3:c8:
b0:0f:51:04:93:e2:0d:26:ad:93:3c:ca:19:50:2d:47:f4:9e:
89:4b:b7:99:ac:33:94:0d:42:48:64:4d:52:e1:07:eb:d2:aa:
db:ed:5a:da:d0:c8:06:6b:37:32:ff:4f:37:64:3e:70:f7:72:
4d:a0:de:4e:ad:88:a5:9a:cc:d3:53:75:55:64:39:c6:1a:41:
15:f2:b4:26:2e:36:44:d4:90:ac:4b:f4:9a:bb:50:89:64:4a:
71:71:8f:7d:19:7a:65:1a:4a:31:a1:ac:4f:a8:33:cb:1b:de:
e0:2c:b1:8b:9a:18:4b:b4:ec:c8:3e:60:94:26:aa:0e:5f:0c:
85:4d:5a:e3:ea:d0:a2:63:c9:0f:3c:7b:28:7b:86:d8:18:2a:
d3:08:30:d7:59:72:4d:14:d2:5b:bc:4f:96:75:a3:3e:4a:a5:
86:72:d9:ec:76:bc:44:68:dd:af:f2:3f:75:71:24:fe:b4:da:
68:3a:fc:52:53:aa:d6:7b:24:c0:e4:0a:9c:fb:b4:f0:be:4a:
54:a0:47:54:5e:8d:cb:1b:6d:18:5a:f4:d7:5b:da:62:ae:cf:
4f:7d:e7:f2:b8:f7:14:ff:ba:97:41:38:1e:b0:91:41:eb:9d:
97:42:cb:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaScqV3ImQBHiVdVyeoTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5N2MzNGYxNjgzMmNlZDg5ODJjZjA2ZmI1OWEwMjI5ODQw
MWY4ZGEwHhcNMjYwNzAyMTUxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzY1ZTVkZTAwYjEwY2Y5NzYxNjg0NzQ3YTE5YzM0NTg2YmU3NDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX3uYk8HN3C604scUgwxmFHHY86P
A7CGV9lh8VLYut/PX67iy51LMCBSOETu0VGEbLKsmxxieUVjWu6EK24mJXi8Jh2k
DGr7TjmpVy6FMQ3lBbvt8FSWEhE/YgnYwUlx+M+Y/UctBd0nHTZOFhWQLCp2BxE9
cLwb3lb1QbywzPGaQ+2y6C82fZKlGBhqJ7b2AVi2vWsjRnXo7OvPfGid2ZLUCwsy
oSAuySe5H3bc8Ky+tZTiFdlh2bpxYIOdbdx4AYRHMqQmQFER1Q2d711qANDGJ5LK
rxQimKpzhBJrTEg+Hfa8r/VaDzPex/2m6PuIDozIUHeAYlHAEFd0mM0beQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDNl5d4AsQz5dhaEdHoZw0WGvnRmMB8GA1UdIwQY
MBaAFJl8NPFoMs7YmCzwb7WaAimEAfjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVh3MDhXZ3l6dGlZTFBCdnRab0NLWVFCLU5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85YTg2ZDItNGRkNS00MGYwLWE2MjIt
MzE4YjBlOTk2YWQxLzEvTTJYbDNnQ3hEUGwyRm9SMGVobkRSWWEtZEdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85YTg2ZDItNGRkNS00MGYwLWE2MjItMzE4YjBlOTk2YWQx
LzEvbVh3MDhXZ3l6dGlZTFBCdnRab0NLWVFCLU5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjDXMA0G
CSqGSIb3DQEBCwUAA4IBAQAwX4K7G08G1QwBJ2gAsQf6o8iwD1EEk+INJq2TPMoZ
UC1H9J6JS7eZrDOUDUJIZE1S4Qfr0qrb7Vra0MgGazcy/083ZD5w93JNoN5OrYil
mszTU3VVZDnGGkEV8rQmLjZE1JCsS/Sau1CJZEpxcY99GXplGkoxoaxPqDPLG97g
LLGLmhhLtOzIPmCUJqoOXwyFTVrj6tCiY8kPPHsoe4bYGCrTCDDXWXJNFNJbvE+W
daM+SqWGctnsdrxEaN2v8j91cST+tNpoOvxSU6rWeyTA5Aqc+7TwvkpUoEdUXo3L
G20YWvTXW9pirs9PfefyuPcU/7qXQTgesJFB652XQsub
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:44 2026 by rpki-client