Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/1M3xsOh_lxfEcm0dFrzEOzv-AnE.roa
File: 1M3xsOh_lxfEcm0dFrzEOzv-AnE.roa (raw, json)
Hash identifier: dnKbu4kjPt0WacaLtGX58/WNe6QRITRJWyWfqyKVROk=
Subject key identifier: D4:CD:F1:B0:E8:7F:97:17:C4:72:6D:1D:16:BC:C4:3B:3B:FE:02:71
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 019F714858470469C2D880842EFD85748FEA
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/1M3xsOh_lxfEcm0dFrzEOzv-AnE.roa
Signing time: Fri 17 Jul 2026 18:13:14 +0000
ROA not before: Fri 17 Jul 2026 18:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204287
IP address blocks: 153.52.212.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:48:58:47:04:69:c2:d8:80:84:2e:fd:85:74:8f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Jul 17 18:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4cdf1b0e87f9717c4726d1d16bcc43b3bfe0271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:21:46:e5:1c:dd:20:ee:70:8f:44:34:c7:
8b:89:5b:6b:43:54:d0:f7:26:4f:f5:fe:7d:16:c8:
cd:39:bb:de:84:31:4f:de:ba:94:56:3c:17:7b:39:
ea:1e:a0:ca:d5:6c:a7:aa:0e:3d:66:ab:14:af:10:
75:cd:67:cb:a8:62:01:3b:a8:ec:6f:d1:4d:f5:98:
3b:3c:01:d0:48:92:c8:f3:fa:fd:8e:e4:1f:cb:c0:
13:3e:30:96:2c:ad:ae:ac:15:ec:ce:b9:29:d4:36:
df:ac:03:83:9f:e1:c2:ea:55:b4:b0:de:b5:63:d7:
12:5d:a3:33:e9:f9:3e:49:49:d6:87:44:64:5e:65:
26:21:a8:fc:6e:95:c0:b0:e6:65:38:fe:57:d8:7d:
2f:86:9a:5e:01:d9:22:d9:73:31:fc:2f:57:9a:84:
27:23:5c:b2:31:aa:0a:6c:dc:ea:4f:4d:f7:3a:47:
9e:2e:76:1e:a8:bc:7c:d7:3a:6c:5e:74:e8:91:6e:
64:08:d2:65:bc:68:e9:4a:88:d6:87:23:e6:5f:88:
1d:0f:eb:3a:94:82:e6:ee:e8:0e:f0:dc:a8:49:7b:
7c:02:51:b7:4f:14:94:70:45:06:61:1f:ef:3d:6b:
53:c9:b8:af:04:64:4b:2c:5e:b5:02:8f:95:76:72:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CD:F1:B0:E8:7F:97:17:C4:72:6D:1D:16:BC:C4:3B:3B:FE:02:71
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/1M3xsOh_lxfEcm0dFrzEOzv-AnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.212.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:7b:f9:09:03:06:c9:30:1b:e5:2d:ff:f8:f4:69:6b:46:8b:
0a:b3:40:56:ed:ea:90:00:34:f4:f5:97:34:ee:8a:05:ec:9a:
7f:1d:92:01:e0:e7:89:2e:05:d8:73:e9:3b:e0:8d:2c:df:e3:
73:e7:21:d6:31:d3:5e:8c:11:dc:2e:23:ed:ac:43:5b:3e:20:
bd:02:71:ff:ca:de:9f:36:a1:88:30:e6:13:af:a9:78:75:ac:
21:58:9d:c9:02:6c:d8:0a:64:1a:bd:bb:22:5a:bd:a3:a9:eb:
8b:8f:15:f8:11:10:37:9c:54:fa:6e:b2:08:a5:39:40:7a:09:
23:4c:bb:c9:2c:99:ba:b6:53:ce:89:7a:26:a0:7d:93:f4:be:
51:02:da:2a:75:96:2a:27:2e:7e:cc:e3:67:39:29:96:b1:64:
89:ac:58:c1:70:b9:01:3c:c9:77:24:e1:ee:53:9b:a6:af:53:
d7:25:06:dc:b8:58:8d:6c:5f:02:1a:ac:ca:fa:5c:d1:83:5d:
dd:85:0d:2f:ba:1b:05:5c:da:94:75:ca:23:39:8a:77:6a:50:
61:5a:54:a4:1b:a1:e6:6f:7e:4b:70:0a:1d:19:16:1d:10:4d:
0f:cf:65:3a:31:f9:18:1b:09:01:7d:9d:26:3b:3f:88:84:79:
6f:ed:e5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:14 2026 by rpki-client