Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MEM5VQiVg3LLXtg7CDwoGBna9do.roa
File: MEM5VQiVg3LLXtg7CDwoGBna9do.roa (raw, json)
Hash identifier: g+MATSZ/G7TIe8MLVsDSuz58BzxDUAp+jselE+9u+ZU=
Subject key identifier: 30:43:39:55:08:95:83:72:CB:5E:D8:3B:08:3C:28:18:19:DA:F5:DA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019DA633EA0C2F35831D524C689816F37385
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MEM5VQiVg3LLXtg7CDwoGBna9do.roa
Signing time: Sun 19 Apr 2026 14:45:13 +0000
ROA not before: Sun 19 Apr 2026 14:45:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.253.66.0/23 maxlen: 23
87.120.68.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:33:ea:0c:2f:35:83:1d:52:4c:68:98:16:f3:73:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 19 14:45:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3043395508958372cb5ed83b083c281819daf5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:2a:40:b8:92:55:c5:78:5b:9a:8c:a6:2b:
4c:4e:80:da:03:6d:40:0a:14:71:78:5b:2a:8b:33:
38:66:04:e2:fd:5e:a4:b2:7d:43:3a:56:e9:3c:c2:
55:45:39:ee:11:59:cc:dc:54:0e:5a:6a:9b:84:61:
42:86:43:39:24:7c:fa:32:87:1a:8b:a7:f3:5e:2c:
66:cc:67:58:1e:2d:d1:73:85:72:9b:75:f6:cf:5f:
21:93:b0:b1:61:6f:83:da:ae:f3:59:0e:dc:54:78:
f1:14:d7:58:4d:91:8a:61:16:0d:78:51:58:f5:36:
f0:fe:d6:18:3b:d3:57:0b:ab:46:40:f7:52:6e:80:
89:79:69:82:e2:49:02:2f:74:9a:89:4b:4e:56:3f:
b9:5d:55:fd:dd:da:aa:e0:5a:78:7d:e3:f1:98:18:
a1:39:ac:54:c2:a5:32:c1:66:60:ac:17:09:8f:2a:
1b:87:ac:1e:32:f7:6a:93:f8:9e:07:56:3c:9a:e1:
43:00:5d:27:1c:31:35:75:f5:35:58:64:9a:d2:0c:
77:0b:17:9b:c6:5a:83:5c:5b:52:69:bf:ef:cb:f9:
de:93:8e:84:45:83:59:9b:cc:25:4b:bf:4d:1a:d8:
03:84:6c:7c:d1:7a:4b:24:31:43:ac:43:5c:53:06:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:43:39:55:08:95:83:72:CB:5E:D8:3B:08:3C:28:18:19:DA:F5:DA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MEM5VQiVg3LLXtg7CDwoGBna9do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.66.0/23
87.120.68.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:53:b9:86:25:f8:cb:6b:a4:50:81:92:6b:e0:94:f8:0e:82:
17:32:1c:be:f6:e8:4f:b5:40:c0:5a:80:0b:5f:c4:24:00:2a:
88:52:41:08:b5:15:ab:93:b1:26:46:11:80:66:b3:83:fd:14:
9d:34:18:ad:db:ba:6e:d9:87:be:98:cb:56:e1:eb:a5:45:9b:
03:ca:d4:5b:49:d5:60:b7:fc:98:34:44:f4:bd:b9:bc:ff:14:
73:64:34:de:15:d6:55:69:bd:86:86:73:d4:7c:18:42:53:46:
fa:8f:a1:ec:a9:3d:4c:a7:f2:74:91:bb:0a:9e:19:30:0f:61:
5e:96:d6:9f:0b:18:3f:f0:b8:df:66:66:43:f2:a1:30:91:83:
22:04:b2:df:d9:62:3e:eb:86:59:f0:e2:45:50:cf:9c:4d:78:
85:53:5c:3c:54:c8:ab:cc:d5:d5:f9:fa:fc:05:69:4a:4b:c2:
eb:0d:a2:53:73:7a:2d:75:24:62:e4:f5:4a:70:4d:9f:52:30:
27:f8:7e:81:96:61:4f:d8:8e:f3:69:34:05:5c:1c:df:c9:ac:
f8:db:97:06:1d:4a:b1:c1:cc:4f:cc:d4:4f:0d:78:5d:7b:dd:
eb:90:92:95:6b:02:96:15:0a:c7:95:43:d3:a2:f5:75:41:0a:
72:7c:c2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:04:58 2026 by rpki-client