Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/MeQQK5Z35pmBULz3X38zAUF_9nE.roa
File: MeQQK5Z35pmBULz3X38zAUF_9nE.roa (raw, json)
Hash identifier: 8lmaxTq313s4EIQyECYUive1SQumlEGi8AN0p4h3+r4=
Subject key identifier: 31:E4:10:2B:96:77:E6:99:81:50:BC:F7:5F:7F:33:01:41:7F:F6:71
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 01A0A136A392EF3EFE2A8E0CD7022BAA0775
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/MeQQK5Z35pmBULz3X38zAUF_9nE.roa
Signing time: Mon 14 Sep 2026 18:38:27 +0000
ROA not before: Mon 14 Sep 2026 18:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42675
IP address blocks: 2a0e:1c80:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:36:a3:92:ef:3e:fe:2a:8e:0c:d7:02:2b:aa:07:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Sep 14 18:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31e4102b9677e6998150bcf75f7f3301417ff671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:26:e1:a9:99:66:b4:92:a5:72:f1:59:dd:f3:
a2:b9:df:b3:5c:41:1c:17:0b:55:eb:d5:4a:0f:16:
9b:af:0c:7b:e1:b9:0a:d9:06:3e:00:f9:54:60:68:
c3:48:93:92:aa:e4:bf:02:38:16:bc:df:98:61:3b:
7a:4a:13:73:0d:cb:7a:37:fe:b7:66:5f:68:41:12:
d7:04:c1:bc:98:38:b0:81:53:48:09:99:7a:d4:db:
e4:d1:53:ff:4b:64:47:0f:29:07:65:b6:34:ea:1f:
bb:53:5e:79:90:d5:b9:00:85:4b:b0:81:d5:ec:d0:
24:8f:f3:9e:ef:62:3f:1d:71:74:2e:40:ba:6f:f1:
3e:08:65:7e:34:47:d6:3d:91:5a:f2:5f:e3:98:47:
c1:34:fc:7b:28:24:4f:1b:0c:63:c3:9f:2a:52:fc:
00:02:b3:26:6c:ad:4a:a4:9c:6e:4f:86:b1:6c:99:
2d:c6:70:72:7c:0a:a1:d5:35:5c:a8:66:46:a2:ff:
c2:94:80:2a:fc:6b:d7:0b:c4:10:b1:77:65:a1:d5:
87:9a:2c:84:7c:bb:4f:2b:91:6f:b8:e1:d5:1f:9a:
64:f9:e6:1e:3b:1a:d4:35:1a:f6:39:36:ea:59:2f:
b2:a9:81:e6:3f:ba:45:ca:12:c9:97:0e:28:f7:51:
93:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E4:10:2B:96:77:E6:99:81:50:BC:F7:5F:7F:33:01:41:7F:F6:71
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/MeQQK5Z35pmBULz3X38zAUF_9nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:3::/48
Signature Algorithm: sha256WithRSAEncryption
99:aa:23:3c:9a:b7:09:66:bb:27:20:78:a0:3c:b9:1e:e7:ef:
d7:48:ad:5c:b9:57:60:cf:8d:e6:47:7c:38:3d:ec:99:62:31:
42:bb:a3:14:11:85:a4:4f:41:1a:5e:e0:a9:c7:c3:1a:66:8f:
f3:90:79:5a:6e:0f:53:00:19:0a:7c:73:89:3b:24:3b:ce:81:
c7:77:ab:6f:23:d9:24:17:75:1d:1f:04:ff:e1:b5:03:59:b1:
bb:14:09:fb:b4:c6:22:17:e3:31:5c:d7:99:68:8e:0c:c2:f1:
16:3c:1d:26:72:3c:bc:d4:58:9f:4e:3b:56:29:71:52:54:54:
dc:1f:1b:bf:f2:ea:d3:0b:c8:c0:eb:0a:58:79:95:c5:fa:13:
ea:7d:c9:da:70:72:f9:55:4a:75:b9:c4:30:96:af:18:02:12:
24:5e:27:3a:0a:0d:31:7d:e0:67:1e:19:4f:cf:63:09:cb:1e:
40:ca:25:ed:a7:9e:db:7c:3e:9f:4e:77:38:9a:e1:99:cb:98:
17:d8:8c:9b:95:20:c5:02:e5:76:b8:c9:7b:c7:04:b1:4a:67:
0d:62:6c:42:e2:38:b8:fc:70:41:d0:e8:19:85:0c:a4:a7:20:
0a:fe:4f:58:c3:7f:e3:e4:47:2a:f7:d6:8d:a2:d4:a8:22:19:
ef:ed:2b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:27:54 2026 by rpki-client