Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/M57ZzgIoqmnX8oIrPnoBTIoTA_k.roa
File: M57ZzgIoqmnX8oIrPnoBTIoTA_k.roa (raw, json)
Hash identifier: tqmWlBAseAGNPKJzRW1RJLsoEl9qzSRJUIXNz+O9tHk=
Subject key identifier: 33:9E:D9:CE:02:28:AA:69:D7:F2:82:2B:3E:7A:01:4C:8A:13:03:F9
Certificate issuer: /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Certificate serial: 019CE189324826E018F10B5F38D1EBCB2CC6
Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/M57ZzgIoqmnX8oIrPnoBTIoTA_k.roa
Signing time: Thu 12 Mar 2026 10:13:10 +0000
ROA not before: Thu 12 Mar 2026 10:13:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44133
IP address blocks: 185.237.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:89:32:48:26:e0:18:f1:0b:5f:38:d1:eb:cb:2c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Validity
Not Before: Mar 12 10:13:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=339ed9ce0228aa69d7f2822b3e7a014c8a1303f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:a6:6b:09:b9:6f:b6:8d:ab:e9:f9:3d:79:
e2:40:15:37:76:dc:af:77:0f:3f:ac:49:96:30:02:
66:ab:4f:85:2e:51:77:fe:a8:7c:82:ff:1f:f6:db:
46:0c:d5:94:29:be:78:bb:71:a1:f7:67:50:7f:8e:
ac:eb:64:27:8b:3d:33:e3:41:f6:8d:c9:19:a3:bd:
8a:78:e5:8b:71:75:60:92:35:92:b9:47:86:d8:12:
3c:30:c1:e7:12:2d:6f:e1:da:ef:09:56:cb:d8:9e:
7c:0c:f6:10:d1:91:e0:8d:86:71:be:ff:83:bc:48:
6d:55:91:95:ff:3d:27:d5:af:ff:2c:be:bb:07:72:
46:40:26:51:bd:e2:9b:e0:f1:7c:bb:7d:ca:92:85:
7d:93:10:41:97:2d:82:a1:79:cf:70:95:6f:08:53:
61:4f:05:a8:b7:3c:cf:6d:39:8f:19:1e:4b:0d:d0:
d1:86:e3:2b:a8:3c:ce:81:b0:b2:df:f6:f9:a5:7a:
1a:47:7c:58:4c:3f:6a:01:3b:c4:53:43:91:f6:c8:
17:57:45:8a:66:e7:ab:fe:37:52:82:70:75:71:ba:
ee:12:8e:c3:a9:37:1a:2a:b0:ad:4c:be:22:de:0e:
5a:0d:2e:46:9b:d4:67:e2:ab:72:38:8e:33:47:6e:
21:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9E:D9:CE:02:28:AA:69:D7:F2:82:2B:3E:7A:01:4C:8A:13:03:F9
X509v3 Authority Key Identifier:
keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/M57ZzgIoqmnX8oIrPnoBTIoTA_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.94.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f3:98:59:8a:4c:9c:59:f4:2c:b8:53:4c:de:ff:c2:a2:7e:
be:f4:df:ec:22:04:ed:4c:f4:78:31:ef:aa:1c:99:c5:c7:97:
19:63:6b:cc:b8:78:97:77:de:c1:2e:85:33:c7:ec:11:d7:46:
e8:c7:0f:e2:a1:82:3f:04:8d:4b:02:c6:fe:90:43:8f:64:2a:
64:44:00:0d:55:9d:33:dc:28:70:78:ef:ef:10:b6:77:98:92:
d7:d9:e6:5b:e1:2e:9c:a2:93:d7:2e:34:59:65:99:b1:f7:98:
19:8e:7e:90:6e:93:7a:80:42:e9:41:98:64:97:09:c8:7f:3f:
0b:d2:8f:5c:b0:50:85:5a:8c:38:93:03:6d:0f:b8:e5:42:aa:
66:7b:69:55:f4:2b:d6:3d:ec:48:27:38:ef:ed:d7:65:58:5c:
bc:97:40:74:d2:d1:ed:45:33:3f:9c:67:7f:68:de:94:12:86:
17:4a:86:c5:9c:f7:21:11:91:e5:a5:b6:f9:63:62:66:a6:ac:
2c:8e:50:89:01:40:c4:bf:26:ff:88:e0:4c:a1:eb:9b:7d:86:
29:3d:68:bf:49:28:0f:4b:19:72:bd:9f:e4:af:0d:54:12:08:
78:4e:22:6a:9e:6b:af:dd:65:56:19:2b:89:13:6d:5c:81:2e:
29:c7:39:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:32:08 2026 by rpki-client