Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/M2P5NHOr1VNdgU_pG36AXasq6n0.roa
File: M2P5NHOr1VNdgU_pG36AXasq6n0.roa (raw, json)
Hash identifier: 0BcfiTpnoAKg2w/PTa9f6dvzV2U3+YYKy/UwXHMH75Y=
Subject key identifier: 33:63:F9:34:73:AB:D5:53:5D:81:4F:E9:1B:7E:80:5D:AB:2A:EA:7D
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019F36F661050643B14ADF7F85387D5DFF45
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/M2P5NHOr1VNdgU_pG36AXasq6n0.roa
Signing time: Mon 06 Jul 2026 10:25:44 +0000
ROA not before: Mon 06 Jul 2026 10:25:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51259
IP address blocks: 2a0d:60c3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:f6:61:05:06:43:b1:4a:df:7f:85:38:7d:5d:ff:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jul 6 10:25:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3363f93473abd5535d814fe91b7e805dab2aea7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:c3:71:57:e3:42:e6:d3:12:31:36:4f:0c:
90:48:10:79:4d:db:0a:7a:31:f1:00:77:7e:53:e4:
f6:f3:3e:fc:6f:89:4a:ef:fb:32:6a:2d:af:35:cb:
06:a1:98:3a:ec:29:89:3c:cb:c1:c2:cc:2c:5b:c1:
ba:90:cc:1c:b6:39:9d:17:d5:0f:4a:bf:12:db:6f:
73:23:45:a2:6b:4a:a8:40:75:d8:6d:bf:d9:ee:50:
2b:c0:b3:99:48:f7:78:5b:b9:42:cb:31:2a:e4:9a:
d5:12:f1:ce:74:ed:6c:b6:33:7f:da:51:65:6f:a1:
02:0d:fd:6f:9f:82:b0:2b:fa:82:9f:34:c6:fb:2e:
c0:43:c0:6e:f0:44:46:39:97:90:2c:b4:b9:89:6c:
53:b4:f3:cc:56:f0:fd:de:2b:7c:8d:9c:03:c2:ce:
36:5d:4a:6e:b3:2d:48:2d:c6:f0:b5:bb:16:e3:06:
13:67:c0:21:4f:74:6a:89:28:66:5f:a1:81:0c:ae:
9c:1a:7d:5a:99:b5:ef:2e:fa:75:4b:85:b7:94:9b:
ca:81:59:2d:8a:80:ef:12:ec:8f:aa:15:da:d7:67:
7a:42:01:2f:48:91:46:75:8e:fa:7f:a6:39:ec:70:
20:9c:bd:f7:7f:2c:4f:a4:2a:08:c0:57:11:d0:6d:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:63:F9:34:73:AB:D5:53:5D:81:4F:E9:1B:7E:80:5D:AB:2A:EA:7D
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/M2P5NHOr1VNdgU_pG36AXasq6n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:60c3::/32
Signature Algorithm: sha256WithRSAEncryption
4f:15:77:b2:de:c2:39:46:84:7c:30:b9:41:5b:7e:b9:48:75:
8a:06:65:de:31:63:65:77:9a:8e:9c:8d:0a:ef:b6:3f:85:48:
3f:c0:8f:2b:2e:7c:5f:23:bd:8d:6f:c0:5a:af:cd:0d:8b:ae:
de:c4:d3:18:0c:38:86:0c:4c:20:cd:47:ce:8b:a4:49:ec:f9:
1c:4d:63:e3:53:af:23:83:c5:5c:08:7d:ec:e2:2e:d3:6b:0d:
3b:62:df:6f:28:a5:fb:88:64:66:d8:1b:5f:07:69:45:6b:7a:
33:04:db:ae:79:21:f3:c2:98:86:d2:5b:91:4e:80:a6:10:37:
d6:1c:27:88:6b:0d:32:54:25:73:e6:79:c6:23:cc:83:a1:f3:
9f:f5:01:41:e5:d7:37:5e:cb:d3:db:02:17:30:9d:c4:43:1b:
da:22:34:25:e1:06:ae:79:7e:c4:10:26:92:9f:01:a7:fc:e0:
01:58:02:46:e1:c2:4e:94:88:07:00:37:ae:94:5b:3c:34:d4:
7d:ac:98:2f:f7:52:6e:5b:b7:b1:f4:e8:00:f9:b0:c5:c8:c2:
0c:6a:bf:68:e7:74:6b:ca:2b:25:28:e4:34:ee:42:e5:98:79:
0e:10:8f:1a:81:ea:38:ee:b7:e8:db:ac:a6:b1:5c:8b:db:ec:
43:a6:f4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:48 2026 by rpki-client