Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/MR48vFydmr0SsuxdgWTO19IRiHw.roa
File: MR48vFydmr0SsuxdgWTO19IRiHw.roa (raw, json)
Hash identifier: mUaEgZFfj65CrRRMW4qrWw5/5psCJW35a20y1tpoOkI=
Subject key identifier: 31:1E:3C:BC:5C:9D:9A:BD:12:B2:EC:5D:81:64:CE:D7:D2:11:88:7C
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 019DBEC2218E62F624FC65C38B2B3A4F0D8D
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/MR48vFydmr0SsuxdgWTO19IRiHw.roa
Signing time: Fri 24 Apr 2026 09:11:26 +0000
ROA not before: Fri 24 Apr 2026 09:11:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58321
IP address blocks: 2a06:1980::/29 maxlen: 29
2a06:1980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:be:c2:21:8e:62:f6:24:fc:65:c3:8b:2b:3a:4f:0d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Apr 24 09:11:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=311e3cbc5c9d9abd12b2ec5d8164ced7d211887c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1c:37:e9:aa:a7:4b:eb:0b:4d:db:64:b2:43:
41:c5:03:3b:ac:12:7d:6b:77:8d:ef:ea:d3:1b:50:
9e:a3:4b:6c:2d:0d:3d:f2:c6:63:64:a1:53:33:b9:
11:3f:6b:27:1e:9c:94:94:37:ad:83:82:1c:e7:82:
44:c7:6c:24:0d:f1:96:d3:bb:70:39:60:13:15:17:
20:c2:0b:cb:b8:c2:5b:58:49:a7:34:49:0f:17:dd:
2d:fc:48:e6:cd:0a:b6:14:bd:d6:d7:e2:b5:32:f8:
d1:32:3e:e0:48:59:59:74:f7:3d:5f:54:95:80:6e:
cd:a3:fe:91:00:9c:24:6f:ce:3a:e7:06:51:dc:ba:
65:00:91:75:74:d8:e7:30:f3:9a:d5:02:b1:59:35:
b0:c9:f6:60:59:5e:77:c4:93:38:f2:ca:7d:f4:1e:
d8:48:1f:68:e4:7d:2d:c7:5d:19:22:7a:19:79:05:
7b:3d:60:16:b0:99:35:13:72:84:9d:7d:cb:67:0e:
00:e6:fe:f0:35:89:40:2f:e0:60:3e:12:df:33:5b:
d4:7c:47:29:db:64:cb:34:ac:e0:9c:6b:f9:c7:88:
53:90:58:79:21:22:cc:1b:99:3d:b1:5f:63:53:af:
f7:44:73:ff:22:8c:7a:21:a7:21:e1:ad:8b:1d:54:
7a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1E:3C:BC:5C:9D:9A:BD:12:B2:EC:5D:81:64:CE:D7:D2:11:88:7C
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/MR48vFydmr0SsuxdgWTO19IRiHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1980::/29
Signature Algorithm: sha256WithRSAEncryption
46:77:48:e9:43:c7:3a:6f:61:dd:9e:c4:b0:e7:0d:23:6d:14:
22:4d:80:87:9d:e6:a3:ad:45:05:51:15:2c:88:4a:13:5f:e2:
16:79:ae:85:b7:8d:9b:98:e4:c3:e3:18:70:85:b3:3b:fc:28:
51:dd:f7:78:d1:d6:79:1a:69:77:b1:fd:12:a7:bd:cb:e2:a6:
ef:58:04:15:ac:a1:d0:d0:a1:e9:ab:57:32:d3:b4:f8:f5:6a:
a7:bc:3e:97:fe:08:13:a5:76:2c:2e:88:e9:08:df:c9:a1:1f:
2e:f1:69:e9:7e:f2:ac:38:cf:f6:4e:0f:43:35:63:0e:72:f4:
9c:18:69:3b:d9:0c:7a:91:18:6e:70:6a:55:e2:9d:a2:aa:67:
43:37:e6:6f:fd:c3:20:cf:df:4c:e5:36:81:a0:30:8d:09:c7:
a8:0a:39:1a:5b:54:8a:9e:38:09:2d:e1:9b:d6:a1:83:ab:58:
af:7e:be:2f:97:cb:73:73:ca:d6:d7:ec:5d:e9:13:9d:49:ea:
d4:4f:fe:be:97:ee:33:e9:c3:39:a0:83:86:78:fb:5f:7f:c1:
87:5f:37:0e:35:ba:e7:7f:0f:ee:69:5c:17:ff:dc:63:d6:0e:
8f:62:b8:07:8c:21:64:e6:17:f5:3a:de:53:d1:e9:c7:ad:50:
4a:a5:f5:11
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ2+wiGOYvYk/GXDiys6Tw2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4
MWEyOWYwHhcNMjYwNDI0MDkxMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTFlM2NiYzVjOWQ5YWJkMTJiMmVjNWQ4MTY0Y2VkN2QyMTE4ODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hw36aqnS+sLTdtkskNBxQM7rBJ9
a3eN7+rTG1Ceo0tsLQ098sZjZKFTM7kRP2snHpyUlDetg4Ic54JEx2wkDfGW07tw
OWATFRcgwgvLuMJbWEmnNEkPF90t/EjmzQq2FL3W1+K1MvjRMj7gSFlZdPc9X1SV
gG7No/6RAJwkb8465wZR3LplAJF1dNjnMPOa1QKxWTWwyfZgWV53xJM48sp99B7Y
SB9o5H0tx10ZInoZeQV7PWAWsJk1E3KEnX3LZw4A5v7wNYlAL+BgPhLfM1vUfEcp
22TLNKzgnGv5x4hTkFh5ISLMG5k9sV9jU6/3RHP/Iox6Iach4a2LHVR6tQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDEePLxcnZq9ErLsXYFkztfSEYh8MB8GA1UdIwQY
MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt
Mzc1NzUzOWMyYWM5LzEvTVI0OHZGeWRtcjBTc3V4ZGdXVE8xOUlSaUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5
LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgYZgDAN
BgkqhkiG9w0BAQsFAAOCAQEARndI6UPHOm9h3Z7EsOcNI20UIk2Ah53mo61FBVEV
LIhKE1/iFnmuhbeNm5jkw+MYcIWzO/woUd33eNHWeRppd7H9Eqe9y+Km71gEFayh
0NCh6atXMtO0+PVqp7w+l/4IE6V2LC6I6QjfyaEfLvFp6X7yrDjP9k4PQzVjDnL0
nBhpO9kMepEYbnBqVeKdoqpnQzfmb/3DIM/fTOU2gaAwjQnHqAo5GltUip44CS3h
m9ahg6tYr36+L5fLc3PK1tfsXekTnUnq1E/+vpfuM+nDOaCDhnj7X3/Bh183DjW6
538P7mlcF//cY9YOj2K4B4whZOYX9TreU9Hpx61QSqX1EQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:30 2026 by rpki-client