Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/MaRo3qPa_AXa-98seLnNkzlSlLM.roa
File: MaRo3qPa_AXa-98seLnNkzlSlLM.roa (raw, json)
Hash identifier: ji8JHlcGAHWKEBT5OFXPF3gvRuoRQByWZBo69DobjWw=
Subject key identifier: 31:A4:68:DE:A3:DA:FC:05:DA:FB:DF:2C:78:B9:CD:93:39:52:94:B3
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019D251AAF74102ABA39756B24DF33009079
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/MaRo3qPa_AXa-98seLnNkzlSlLM.roa
Signing time: Wed 25 Mar 2026 13:06:39 +0000
ROA not before: Wed 25 Mar 2026 13:06:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 45.140.204.0/23 maxlen: 24
193.202.10.0/23 maxlen: 24
193.203.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:1a:af:74:10:2a:ba:39:75:6b:24:df:33:00:90:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Mar 25 13:06:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31a468dea3dafc05dafbdf2c78b9cd93395294b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:04:99:0a:77:85:65:5e:e8:2b:fa:3e:37:
0b:9f:cd:5e:bb:c5:32:f4:7a:37:8d:af:37:3d:73:
ce:62:61:bc:ea:30:6a:ae:79:f0:39:61:c8:57:32:
7e:32:15:5c:41:40:d2:65:46:b6:07:16:56:8c:c8:
dc:b5:88:17:60:30:9c:b0:c0:a2:f8:be:d7:67:ac:
dd:3a:af:93:75:da:1e:ce:d2:b8:5d:fb:24:66:87:
d7:68:1e:49:70:90:bf:73:14:3b:81:e6:52:69:0e:
90:37:03:1e:d6:a7:f4:e2:8a:f7:df:a8:b3:c0:66:
13:84:cb:1d:ab:05:47:bc:9e:98:43:3e:63:27:0a:
a5:d6:fe:91:da:b6:20:5f:21:13:64:65:c1:be:d6:
59:d7:d3:39:53:08:28:10:a7:53:ef:31:b8:2b:6c:
5d:87:61:d5:84:22:f6:a1:2c:29:3d:d5:63:8c:1c:
02:d6:4f:76:dd:f4:ff:5b:a4:cc:2b:1c:62:cd:02:
9b:d3:39:fc:bd:44:2e:3f:14:84:7e:62:c7:d9:31:
97:b8:ae:2e:78:a5:b5:e4:fd:fb:36:7f:40:01:85:
a1:2f:7d:19:9c:79:f4:1b:23:14:90:86:3a:f5:32:
14:54:7f:f3:2a:fb:21:e2:49:5c:35:b0:8f:a0:ec:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A4:68:DE:A3:DA:FC:05:DA:FB:DF:2C:78:B9:CD:93:39:52:94:B3
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/MaRo3qPa_AXa-98seLnNkzlSlLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.204.0/23
193.202.10.0/23
193.203.10.0/24
Signature Algorithm: sha256WithRSAEncryption
32:36:53:06:a0:c8:a4:cc:4b:be:ea:c3:b7:3a:be:50:ff:16:
30:a8:48:27:4a:86:d7:b4:29:a0:7c:ed:61:9e:8b:57:56:b2:
d2:75:f1:64:bf:f0:50:75:f6:7f:9c:a4:3c:25:0c:40:78:db:
42:0c:e4:ec:ae:2d:18:6e:2f:11:54:c6:70:16:f5:74:89:27:
0c:e4:96:1a:aa:59:64:14:b2:fa:96:a8:3c:8e:75:79:b5:6f:
89:27:97:e6:0d:93:72:f3:38:18:07:63:ee:e2:9f:5c:b1:7b:
02:27:6b:21:63:bc:39:59:ef:0d:e6:42:72:d9:83:7e:4b:3c:
f6:82:6e:d3:b6:b3:b8:df:bd:11:10:56:15:46:99:9e:ac:25:
28:9f:ad:aa:4b:2b:c7:b4:c6:1b:a1:18:3d:2c:35:2b:d9:ad:
26:e0:a3:44:09:df:73:b6:9f:16:c7:de:27:64:57:fc:81:6b:
a2:1d:6f:0e:6c:cf:c8:ca:53:b5:61:ad:0e:5b:90:7c:8d:f3:
2d:c8:f3:98:96:f6:1c:d8:69:54:88:ee:80:79:d0:ee:46:79:
05:22:7c:96:fe:1a:42:6d:7c:7a:c7:ba:2f:96:47:66:79:00:
c6:3e:21:2e:9d:fa:d6:18:10:16:b0:f3:89:eb:35:4e:95:4c:
50:90:04:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:58 2026 by rpki-client