Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/M-O71STwS8Kp5niFGIFQhYvdlWo.roa
File: M-O71STwS8Kp5niFGIFQhYvdlWo.roa (raw, json)
Hash identifier: yLzi9tjJQyrnPyV+LD1bidPc5F2jwLqmN1OObhiODg4=
Subject key identifier: 33:E3:BB:D5:24:F0:4B:C2:A9:E6:78:85:18:81:50:85:8B:DD:95:6A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 019E23C55A861122E7650371D454E4ADED79
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/M-O71STwS8Kp5niFGIFQhYvdlWo.roa
Signing time: Wed 13 May 2026 23:56:36 +0000
ROA not before: Wed 13 May 2026 23:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34445
IP address blocks: 193.104.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:23:c5:5a:86:11:22:e7:65:03:71:d4:54:e4:ad:ed:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: May 13 23:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33e3bbd524f04bc2a9e67885188150858bdd956a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:09:85:eb:b5:ed:11:4a:8b:38:94:c6:c0:ea:
d5:8a:70:7e:a6:21:e7:14:7d:c8:2b:db:4a:c9:41:
a4:3e:68:43:80:83:71:8f:d3:45:08:46:c4:6d:50:
2b:f6:0c:8a:67:2b:c7:4e:1f:6c:22:49:50:73:c2:
5c:80:03:51:1e:df:4f:7b:63:71:71:eb:00:64:85:
69:c4:4e:d2:9b:30:b7:70:05:83:2d:78:41:f5:d2:
1c:8b:57:ab:9f:99:80:98:ad:3c:f2:35:54:46:80:
c4:fc:8e:71:a7:c8:f5:b0:5a:03:a0:15:5c:3d:8e:
d8:cc:f7:c5:6a:f0:69:56:57:69:5e:1c:fa:ea:10:
3d:85:29:52:60:9b:34:d5:42:56:79:ad:e5:3b:e8:
2a:ca:78:c3:a8:e4:18:85:59:d0:6a:7c:06:f5:9b:
e3:86:8b:c0:e5:1c:0f:71:3c:a3:c3:88:91:87:ad:
cd:48:55:a7:ab:95:0e:5d:3e:44:d2:97:ce:85:45:
17:5d:6f:25:27:07:92:c2:a7:4e:27:7b:5b:2c:01:
3c:e3:81:3a:c4:3d:40:10:ce:99:3e:6d:35:87:2d:
89:db:d7:6f:1a:54:38:c4:7a:1a:62:e0:56:81:cc:
4f:b5:86:7d:be:55:57:66:c8:6f:fe:9d:c7:b2:2a:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:BB:D5:24:F0:4B:C2:A9:E6:78:85:18:81:50:85:8B:DD:95:6A
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/M-O71STwS8Kp5niFGIFQhYvdlWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.15.0/24
Signature Algorithm: sha256WithRSAEncryption
87:da:7e:56:a6:90:63:14:69:cd:ae:14:f8:1e:ae:3e:b0:c4:
ef:74:e4:42:cd:27:15:b9:27:03:14:45:b9:4a:c2:65:45:89:
c4:cc:85:1b:e4:f7:e0:e6:14:6d:9d:77:20:e7:af:dd:03:a4:
c4:4f:ea:3d:56:4e:bb:aa:f5:14:69:2e:97:43:a9:ad:5b:33:
18:71:9e:15:73:e0:9e:bc:87:12:2c:48:e0:18:f4:f0:4a:10:
44:ef:35:7a:41:b5:30:6e:88:0c:1a:25:59:f2:3c:90:40:09:
96:18:71:c4:64:68:07:b3:33:fd:01:55:39:f8:ba:97:96:5f:
07:33:bb:fa:cc:be:23:45:e8:25:62:47:70:30:7e:30:67:e7:
30:6b:3a:3d:4b:44:42:49:dc:37:03:bc:bb:b0:47:09:6b:3e:
57:25:80:90:53:82:82:7c:67:86:5e:c0:a6:00:16:48:00:21:
80:a5:f3:56:80:d3:5a:5b:b6:e8:fc:13:8d:70:b1:a4:f1:4f:
fd:6b:9c:6d:83:c8:ee:fe:91:43:9a:28:97:c8:72:87:c5:6a:
ee:b3:ea:65:67:80:4d:c4:bd:43:f0:3f:91:a2:de:bd:9c:0d:
88:13:24:e7:e7:69:d5:98:37:9f:bb:b9:fb:fa:c4:47:e9:86:
17:be:d7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:25:59 2026 by rpki-client