Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/MeXVUI3aWp7Z2DI7WMU0Gm4njP0.roa
File: MeXVUI3aWp7Z2DI7WMU0Gm4njP0.roa (raw, json)
Hash identifier: iGfrPBKEnMJclVSd9fkKLOCf5/zL3mFetrJ7LUyMUv0=
Subject key identifier: 31:E5:D5:50:8D:DA:5A:9E:D9:D8:32:3B:58:C5:34:1A:6E:27:8C:FD
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 01A15ED86AB460461CCD4C943D49DA69AB3F
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/MeXVUI3aWp7Z2DI7WMU0Gm4njP0.roa
Signing time: Wed 21 Oct 2026 14:23:23 +0000
ROA not before: Wed 21 Oct 2026 14:23:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 144.249.64.0/24 maxlen: 24
144.249.65.0/24 maxlen: 24
144.249.66.0/24 maxlen: 24
144.249.67.0/24 maxlen: 24
217.149.108.0/24 maxlen: 24
217.149.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:d8:6a:b4:60:46:1c:cd:4c:94:3d:49:da:69:ab:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Oct 21 14:23:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31e5d5508dda5a9ed9d8323b58c5341a6e278cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:8e:cb:e0:47:a6:ba:91:f5:17:1a:07:84:
ed:5a:21:03:6c:de:7d:81:26:49:da:c1:da:b8:1c:
7a:af:cd:80:96:d6:f4:31:e8:24:e6:3e:45:a9:08:
34:9c:d0:d4:38:8b:6b:19:3d:1e:7d:a3:bf:c6:97:
d6:ce:53:13:5c:cf:4c:b3:42:b1:8a:1c:8d:31:ad:
91:16:12:18:a0:1e:f6:a7:f2:79:c9:47:0d:2b:01:
c7:54:85:c5:9f:55:a6:76:18:ba:60:23:2b:bf:81:
fd:ff:fe:8b:c8:5c:1a:d0:1b:1e:03:d3:e7:1e:cb:
09:b0:44:f4:dc:67:1d:4c:78:48:81:de:7f:e0:02:
83:49:8d:08:70:fe:05:7e:34:ee:b6:6b:ed:a7:8c:
3b:be:8e:ea:d4:92:3d:01:08:01:54:fe:e0:88:2b:
05:6b:34:d6:a4:a8:1a:59:53:8b:d3:4f:ac:81:0e:
dd:68:bf:8e:1c:2e:37:0e:d8:39:63:02:31:5c:4d:
5e:e6:08:81:72:3e:d1:46:69:95:e5:58:67:59:da:
af:02:15:5d:16:4a:56:e5:c8:f0:65:cd:94:fa:a5:
d8:1e:11:4d:a9:b9:b3:b9:a3:61:d0:79:58:db:b1:
12:10:17:dc:b3:0b:e1:f4:81:69:60:17:4c:fc:bb:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E5:D5:50:8D:DA:5A:9E:D9:D8:32:3B:58:C5:34:1A:6E:27:8C:FD
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/MeXVUI3aWp7Z2DI7WMU0Gm4njP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.249.64.0/22
217.149.108.0/23
Signature Algorithm: sha256WithRSAEncryption
25:d7:fc:cf:5f:7c:f0:29:f0:cd:1b:98:b1:f8:d9:65:a2:5d:
d0:29:01:ec:36:29:14:66:94:77:5f:7f:15:99:1f:8c:79:cb:
f1:4d:80:d2:1e:e4:ca:3a:20:b3:ff:b4:54:0f:8d:a7:f9:c0:
d5:67:82:05:5a:27:b3:70:18:c0:fe:92:0e:76:e4:8c:3c:c0:
ee:05:4d:ef:fb:b6:8f:c6:32:92:bc:63:dd:dc:e6:30:dc:77:
bb:75:8e:23:75:bf:cc:6f:f9:8f:d4:e6:d1:bb:1f:a6:3a:53:
c5:9e:ec:5d:ad:9b:e0:d5:87:f8:c2:1f:3f:16:3a:6f:bb:ad:
c1:e3:34:9e:21:4f:33:ab:3c:00:eb:d0:82:79:7c:38:73:92:
5b:cf:de:5b:3d:93:ec:ab:6e:ff:e1:ae:0b:8b:96:1e:dc:36:
e3:d6:94:52:f9:5e:15:76:56:2a:da:13:22:e3:7e:15:28:d5:
30:e5:9d:00:2e:01:34:10:74:42:2a:cb:1d:33:97:76:a9:ca:
d4:89:2c:ca:49:e6:27:2a:31:c7:d4:80:eb:28:3b:b4:ee:a1:
5f:95:6f:47:7c:6f:08:07:0e:08:fb:60:61:d0:1f:26:6a:75:
8b:ab:a9:61:01:68:b0:70:ea:ba:b5:86:a6:7f:b5:67:b1:44:
57:39:4f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:26:27 2026 by rpki-client