Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/me-_V4c1n79GxFXhXGpxaUMFf8k.roa
File: me-_V4c1n79GxFXhXGpxaUMFf8k.roa (raw, json)
Hash identifier: 6ycL/AGYIPkyF+CGL2gCRcEQ4LrDjqtPx5KCf6XvLuA=
Subject key identifier: 99:EF:BF:57:87:35:9F:BF:46:C4:55:E1:5C:6A:71:69:43:05:7F:C9
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F285C48261CF66096A8716A231BA2C990
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/me-_V4c1n79GxFXhXGpxaUMFf8k.roa
Signing time: Fri 03 Jul 2026 14:22:44 +0000
ROA not before: Fri 03 Jul 2026 14:22:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 212.189.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:5c:48:26:1c:f6:60:96:a8:71:6a:23:1b:a2:c9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 3 14:22:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99efbf5787359fbf46c455e15c6a716943057fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:e0:d3:f1:29:54:a2:84:e0:d3:5e:75:50:
a6:80:00:85:66:45:c7:3b:be:e6:16:3b:8a:51:9f:
e1:bb:03:7a:4f:16:2d:3b:46:f8:87:83:b2:bb:8d:
50:55:b5:66:e4:73:bc:85:dc:fb:94:51:30:e4:1e:
53:81:52:c6:9a:fc:cd:6e:9f:e3:ba:81:12:81:1a:
8f:13:2f:24:6c:76:8f:e4:a4:c9:14:e1:96:f7:70:
68:4f:93:1b:33:20:c2:27:8f:a2:57:ab:73:bb:bf:
77:61:f2:9c:78:d1:e9:54:50:ca:2a:dc:cf:8a:5d:
08:a7:a7:8d:80:1d:e1:a0:f9:74:03:45:fd:d3:db:
3a:c1:ff:77:f2:64:a6:9c:8e:0e:79:3a:ab:3f:91:
fe:9f:ab:37:41:55:32:ca:9f:79:b9:98:a9:29:3f:
b7:84:8a:1d:65:da:b7:e2:1b:2a:b5:15:46:9c:81:
15:f1:f8:a5:7f:a1:e6:7e:c0:e5:4b:84:27:9c:a6:
20:38:b9:18:86:27:e9:30:8c:59:a1:a1:6d:be:f8:
96:17:b8:8f:1c:56:3d:bf:c0:30:09:bb:dc:a6:1e:
d9:5d:f5:1b:bd:d4:25:02:d6:d0:2a:c4:a8:88:57:
9c:bf:89:a2:f8:a7:ee:62:da:a6:22:dd:7b:97:ee:
0a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:BF:57:87:35:9F:BF:46:C4:55:E1:5C:6A:71:69:43:05:7F:C9
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/me-_V4c1n79GxFXhXGpxaUMFf8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.70.0/23
Signature Algorithm: sha256WithRSAEncryption
e6:f6:d4:f0:d0:c1:f7:a3:6c:10:33:07:cd:3d:10:ae:9e:86:
0c:65:81:75:56:6c:ce:97:50:10:20:d9:93:a9:31:a2:1b:0e:
72:73:fd:65:2b:6a:5d:47:e4:09:1e:f9:8d:38:e8:64:d7:36:
5b:ef:d9:b4:2c:fe:7e:2f:a5:f3:6b:f7:d3:3d:be:6f:03:56:
de:13:55:f9:e4:55:3a:ab:cd:ef:be:b9:f1:18:d0:f1:46:ff:
10:dd:10:84:0f:d0:04:ba:13:d6:bc:55:24:f0:f0:8c:88:d9:
5a:09:59:13:f3:40:04:f1:00:0f:08:2c:fb:01:c7:d1:55:b0:
44:6e:9f:56:5b:fd:b3:8a:40:dc:d2:fd:21:c3:c6:b0:cd:55:
e3:ad:c3:19:6d:c4:75:c8:39:b6:46:e9:b2:a9:9a:e9:b2:5d:
65:11:15:ed:e2:b1:d5:9b:06:71:c9:60:da:14:9e:65:12:20:
9f:eb:98:07:1c:8b:93:d7:e3:ed:1c:5c:1f:19:43:60:27:4c:
af:29:77:ad:bf:0c:d9:f3:27:22:ca:b8:1b:48:49:a9:32:77:
27:ff:a8:35:83:71:15:64:23:07:55:f7:62:16:65:d5:63:18:
53:05:7a:10:5f:f9:21:76:b3:a5:ef:bf:6e:c1:f5:26:94:1d:
3c:30:9e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:06 2026 by rpki-client