Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/M3YvO3dRBUI3j6GH6zoCRrsgabE.roa
File: M3YvO3dRBUI3j6GH6zoCRrsgabE.roa (raw, json)
Hash identifier: P69ndgMJ0iBMDkBYuqCtuk6h1y6LBH+odfA2qJ6I8BI=
Subject key identifier: 33:76:2F:3B:77:51:05:42:37:8F:A1:87:EB:3A:02:46:BB:20:69:B1
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 01A066835FF80EB496DEC7CD6BEC476A88F7
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/M3YvO3dRBUI3j6GH6zoCRrsgabE.roa
Signing time: Thu 03 Sep 2026 09:04:40 +0000
ROA not before: Thu 03 Sep 2026 09:04:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218831
IP address blocks: 188.137.155.0/24 maxlen: 24
2a07:cec0:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:83:5f:f8:0e:b4:96:de:c7:cd:6b:ec:47:6a:88:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Sep 3 09:04:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33762f3b77510542378fa187eb3a0246bb2069b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:e8:17:0e:53:26:01:73:a4:a4:bf:5a:e6:
af:30:9b:b0:39:81:65:fc:64:0c:ec:e1:a7:55:83:
a1:69:05:a8:1c:7b:fd:ee:58:78:b5:82:21:b6:16:
c5:4e:6e:e4:26:eb:f5:fb:1c:98:65:43:66:21:c0:
4c:8f:98:1e:a2:a5:10:ef:dd:49:aa:27:a2:47:18:
c4:30:18:a5:94:7b:ce:b4:db:ad:32:0b:1d:99:6e:
54:8c:0c:7b:c7:d4:d9:fd:53:20:2b:b6:7a:24:40:
3e:05:85:14:9d:ad:6a:22:ce:57:a4:d9:97:d5:88:
98:8b:67:c4:84:f5:41:d2:45:41:2a:9c:cf:d1:fb:
fb:94:be:7f:9d:c8:09:f1:a3:7f:a8:06:6d:09:1c:
2a:1b:10:c0:96:4b:87:5a:05:ec:19:91:e6:53:e1:
dc:5e:d3:e0:e9:9e:3c:97:cc:fd:42:39:89:d7:19:
a8:38:ff:2c:c1:70:1a:94:85:bc:bb:6b:6f:b6:37:
05:29:ef:52:1c:6d:a4:78:65:ea:08:3d:13:33:5b:
fc:5e:64:36:9d:72:cf:5a:92:34:68:8a:ff:01:eb:
6c:e1:c6:10:62:31:ad:0e:b2:b2:31:2c:a5:e0:4b:
bb:6d:f6:f5:39:85:16:dd:aa:e4:bf:cf:09:70:f8:
80:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:76:2F:3B:77:51:05:42:37:8F:A1:87:EB:3A:02:46:BB:20:69:B1
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/M3YvO3dRBUI3j6GH6zoCRrsgabE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.137.155.0/24
IPv6:
2a07:cec0:7::/48
Signature Algorithm: sha256WithRSAEncryption
23:96:82:9c:02:35:19:b7:f3:37:e6:5a:27:89:b6:2e:f2:34:
21:ec:2b:fa:7d:a0:96:94:30:69:d3:c0:80:e7:71:f7:06:25:
49:2a:1e:96:a3:e8:ab:98:16:47:c4:57:08:f8:00:a3:b8:58:
99:bc:d0:2f:65:bf:6e:7d:f3:87:9e:24:a5:da:eb:3e:7b:9c:
80:3f:e8:91:f4:1f:67:63:a3:96:ea:64:8e:1b:43:cd:2e:78:
fa:12:7b:73:3d:67:64:9b:8b:a8:50:16:30:6b:c9:67:b0:c9:
99:4a:a6:55:29:de:21:69:8a:47:82:b5:10:dc:61:77:71:b9:
c2:bc:55:00:69:5a:92:50:db:ec:9f:6b:21:73:e8:fd:d3:32:
5b:ef:00:0d:db:36:19:d3:11:71:a1:b8:01:c7:e3:b0:2e:06:
a2:1c:37:b8:04:2c:4e:61:1b:60:88:54:49:75:71:8b:19:bb:
0c:8a:c2:ed:b6:21:4f:af:ef:33:42:ca:30:05:6d:66:50:5e:
cd:ac:fe:8d:fa:89:8a:6f:0d:91:55:a4:e0:b9:01:b3:cc:c3:
b4:4b:26:63:1d:79:20:6b:76:c0:61:b2:ac:c9:77:66:6e:24:
7c:99:6d:f3:b2:82:df:3c:b2:45:fa:75:7c:10:c9:e7:d2:4c:
ac:be:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:29:30 2026 by rpki-client