Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/MepLmZbt23727bu7i1sZtq5TYHU.roa
File: MepLmZbt23727bu7i1sZtq5TYHU.roa (raw, json)
Hash identifier: CEQGpaoQctPR7fkdzqVk8v2fKY5oxVttH1xe6bXTouQ=
Subject key identifier: 31:EA:4B:99:96:ED:DB:7E:F6:ED:BB:BB:8B:5B:19:B6:AE:53:60:75
Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Certificate serial: 019F88E7D9E0BA1BB3F0C5F533930E7AAA08
Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/MepLmZbt23727bu7i1sZtq5TYHU.roa
Signing time: Wed 22 Jul 2026 08:18:43 +0000
ROA not before: Wed 22 Jul 2026 08:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30722
IP address blocks: 194.55.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:e7:d9:e0:ba:1b:b3:f0:c5:f5:33:93:0e:7a:aa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Validity
Not Before: Jul 22 08:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31ea4b9996eddb7ef6edbbbb8b5b19b6ae536075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:a7:e3:4e:b2:d7:84:74:b7:7b:88:e2:be:
5b:3e:da:44:01:31:4e:b1:a0:bc:77:a0:31:18:95:
96:98:69:a1:5c:c8:21:07:b0:a5:8d:8e:eb:74:ab:
82:d1:32:92:ab:8b:cd:eb:9e:34:dc:bc:27:13:f7:
6a:d3:86:6a:69:d7:ad:37:0f:20:7e:4f:4f:fa:7e:
0d:db:17:d1:cb:48:ae:8c:c2:ae:4a:78:f2:58:75:
ce:b8:72:f6:d3:ab:2c:ac:67:62:cc:db:a8:ed:a8:
76:5d:1e:ec:7c:dd:db:02:4f:60:8b:e6:a7:cf:7b:
f0:96:b0:ab:57:5c:8d:d2:77:b9:3f:ca:5a:d9:5c:
83:1d:b9:fb:a3:d3:69:63:8d:19:08:b3:30:66:26:
b3:4a:0e:ed:d0:1e:69:a2:55:23:34:8a:52:86:58:
95:5e:20:41:e6:b4:35:9f:39:0f:8b:34:16:60:27:
fe:d9:7c:d8:32:40:e0:6f:b1:92:eb:de:28:32:40:
72:5f:69:81:21:e7:79:a4:18:68:88:77:56:60:49:
c9:76:fa:87:e4:96:77:c7:34:1e:0f:1a:6b:7b:8b:
ea:3d:28:f9:ba:9f:9e:71:82:c7:e1:04:04:de:e1:
ed:cc:19:16:1f:46:b2:10:fb:4b:f3:09:46:1e:8d:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EA:4B:99:96:ED:DB:7E:F6:ED:BB:BB:8B:5B:19:B6:AE:53:60:75
X509v3 Authority Key Identifier:
keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/MepLmZbt23727bu7i1sZtq5TYHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.44.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:d4:54:1c:e5:52:76:ef:a5:8a:02:8a:b8:e4:b9:56:f6:bc:
17:3e:e4:fd:3a:14:31:26:fc:b5:ab:54:a6:71:e5:31:c5:78:
5f:d3:ee:d1:92:59:c5:eb:8b:5e:d9:05:49:87:ed:4f:5e:9f:
d5:0f:cc:f6:13:30:24:c0:03:ff:09:f0:bf:cc:e5:4c:93:62:
12:81:ae:e5:b9:bd:8c:8a:93:dc:91:3d:e9:85:ca:8e:26:0d:
93:f2:21:ab:20:50:9c:09:01:fc:0c:68:4c:da:57:d4:71:c4:
b1:80:b5:f3:c8:a5:d0:e5:51:30:ea:44:99:62:92:15:a5:6a:
39:fd:10:ec:4c:88:a9:bb:28:0c:7a:7a:1f:f2:12:8a:db:95:
4a:c8:e9:e8:7b:66:00:e8:83:88:88:28:5f:e5:f4:9f:40:fe:
17:e5:7f:79:a2:1d:a0:66:d4:f0:b4:ee:63:27:4a:55:00:d5:
ec:95:64:fc:ac:92:25:c9:d7:4d:3c:05:37:c7:ed:c5:35:7f:
20:d7:dd:2f:86:03:9e:bb:67:54:b3:c2:6b:ac:61:98:a0:cb:
b3:53:3d:b8:f7:44:b3:64:cb:0a:7c:e8:95:a1:79:7c:48:d7:
79:ed:8a:96:6c:38:ac:55:6f:80:7f:cc:31:d6:01:ed:37:ce:
cd:cd:9a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:16 2026 by rpki-client