Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ME82KiExP_I7zbZ5gzGZZCTjT6I.roa
File: ME82KiExP_I7zbZ5gzGZZCTjT6I.roa (raw, json)
Hash identifier: I1aAoVeNqZZFsmrJRaIkx5tu44rtBe4OwjoRqnQjR4Q=
Subject key identifier: 30:4F:36:2A:21:31:3F:F2:3B:CD:B6:79:83:31:99:64:24:E3:4F:A2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A1B285B33725FE924F9AB201E76673A0A1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ME82KiExP_I7zbZ5gzGZZCTjT6I.roa
Signing time: Fri 06 Nov 2026 20:21:08 +0000
ROA not before: Fri 06 Nov 2026 20:21:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218232
IP address blocks: 163.5.50.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b2:85:b3:37:25:fe:92:4f:9a:b2:01:e7:66:73:a0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 6 20:21:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=304f362a21313ff23bcdb6798331996424e34fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:c9:48:a5:79:66:d4:50:37:55:ce:16:51:
12:48:f3:8c:49:59:d9:3d:74:5a:9d:33:74:05:db:
87:a3:45:2d:fc:0e:ed:f5:df:d7:32:28:74:b1:5e:
82:fd:60:42:e0:d8:4b:b6:ef:46:bd:66:1f:9f:47:
23:64:b6:a4:7d:78:13:4e:a5:92:05:d2:3d:72:07:
58:b5:4e:a6:b7:fd:a9:4d:f9:88:b2:80:55:0c:e4:
80:91:43:d6:50:ce:23:ac:6b:c2:4c:e8:4e:82:9e:
b5:c7:24:a2:fc:2a:09:b3:48:34:86:51:5d:cc:ee:
76:ff:df:6c:49:ad:d4:8d:27:c8:0d:8c:42:1b:db:
53:a6:23:05:f7:7f:b1:5c:ab:16:2b:26:a3:f1:02:
44:93:18:56:ab:31:e4:45:4e:7e:ea:9b:75:1d:66:
a6:35:b1:e4:c2:e1:e3:dc:e2:66:8f:ac:6a:e5:9a:
9c:9c:62:34:e9:45:04:f3:8c:50:9c:82:35:da:48:
92:ce:1b:01:89:90:0d:8d:49:44:1b:7e:7c:dc:76:
64:fc:53:64:08:b4:d1:86:6b:8c:9b:91:3a:0a:51:
e0:48:7e:c8:e6:98:60:a8:db:0d:1e:e5:0a:58:23:
c4:40:05:65:22:2a:7f:a8:57:61:af:72:b8:81:f1:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4F:36:2A:21:31:3F:F2:3B:CD:B6:79:83:31:99:64:24:E3:4F:A2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ME82KiExP_I7zbZ5gzGZZCTjT6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.50.0/24
163.5.244.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7c:df:b1:4f:b8:f8:97:b1:24:6e:24:cc:46:95:48:fd:fa:
e2:b1:67:7a:d5:b3:8b:79:50:c8:99:3e:62:f8:bb:56:06:ce:
7a:46:c7:58:17:c3:49:eb:47:15:46:c3:f8:6e:74:ab:43:91:
83:d1:99:7e:8b:87:ec:c1:82:f6:ea:c4:6d:57:f1:10:16:e1:
d1:ba:86:d7:f2:12:a0:90:ea:b2:cf:91:8d:91:27:ef:d1:18:
08:bf:75:fb:d3:f7:91:4d:f5:40:59:91:94:2d:8d:4b:f3:85:
f4:d0:6a:12:5c:23:c7:c0:05:51:fa:51:d4:d1:f2:2d:04:71:
b7:e9:71:d5:50:9e:32:e5:b9:c9:10:63:8a:31:55:cd:92:cc:
03:4d:ca:0e:b4:02:97:fb:40:f0:97:bf:4f:b1:41:72:ad:1e:
34:b5:43:23:b2:72:98:66:cb:5f:3b:6e:4f:38:63:73:d2:3b:
2a:76:f0:e0:a9:af:d3:7a:7b:c4:bd:ed:81:0f:87:1f:92:76:
73:13:50:e1:f3:a8:0f:f1:52:b4:ad:b3:f0:ea:81:a8:8c:c8:
80:ba:b4:f2:59:0b:a7:d7:93:be:16:37:a7:95:7a:f3:dd:b1:
6c:ba:9c:68:8f:70:c5:60:a1:40:7a:c6:6b:d4:0a:5f:cf:af:
75:32:82:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:37:13 2026 by rpki-client