Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/M4yvFOCrNQYrMEvHUynTCH1sRYg.roa
File: M4yvFOCrNQYrMEvHUynTCH1sRYg.roa (raw, json)
Hash identifier: AUJ02SjlaCnhsHTiNOzqXyVE53GehhBlvRs76nGe1NA=
Subject key identifier: 33:8C:AF:14:E0:AB:35:06:2B:30:4B:C7:53:29:D3:08:7D:6C:45:88
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019F1D060E06A3506F2D9C07F3B3CAE6C402
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/M4yvFOCrNQYrMEvHUynTCH1sRYg.roa
Signing time: Wed 01 Jul 2026 09:32:43 +0000
ROA not before: Wed 01 Jul 2026 09:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44133
IP address blocks: 205.188.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:06:0e:06:a3:50:6f:2d:9c:07:f3:b3:ca:e6:c4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jul 1 09:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=338caf14e0ab35062b304bc75329d3087d6c4588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:ce:fe:95:6d:37:0d:44:31:19:af:2e:84:
1e:9d:05:8b:f7:e3:cc:b3:67:52:62:5d:32:9e:29:
ae:16:c0:2c:80:49:46:ad:51:bb:dd:ab:01:3b:77:
fa:8b:e3:1f:33:48:24:a8:10:58:93:d0:5b:3f:e9:
5e:36:1f:d3:a6:5f:e7:3e:c0:fc:dc:17:26:36:66:
f3:c7:94:05:5a:07:da:db:0f:fb:c4:53:46:98:c7:
9e:1b:8c:fd:2f:58:3c:04:58:ed:c5:9e:8c:df:38:
a1:bb:90:fb:1f:73:42:2b:24:cb:82:35:0b:a8:bd:
f9:95:2e:d7:73:dd:24:1e:e1:72:7d:33:95:e8:a8:
55:bc:b8:fe:93:0d:d5:23:0b:ed:25:d2:ad:d7:a1:
be:4f:eb:1f:42:79:d1:04:93:05:6b:4f:5f:00:8f:
c2:23:ea:ed:95:14:eb:ec:6a:d2:9b:b4:81:24:75:
37:2b:19:d1:68:98:80:17:29:12:2f:7a:bf:1a:6b:
5b:73:56:e0:02:35:ad:24:0d:4b:28:6f:87:8e:68:
ba:b2:dc:fc:6f:0b:d4:8f:82:52:0b:35:68:47:ae:
f0:a0:80:9c:36:6a:37:e2:75:22:a8:d7:0e:99:0d:
06:6a:03:3c:a0:6b:7d:d5:2d:b0:dd:2e:22:02:7a:
fa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8C:AF:14:E0:AB:35:06:2B:30:4B:C7:53:29:D3:08:7D:6C:45:88
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/M4yvFOCrNQYrMEvHUynTCH1sRYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.188.20.0/24
Signature Algorithm: sha256WithRSAEncryption
12:09:cf:90:e3:ac:ba:f9:4f:35:58:e4:f5:da:e8:2c:07:74:
60:ea:ac:dc:ae:ed:ba:1c:26:c2:fe:3d:36:2e:c8:8a:98:e1:
81:c3:a4:25:4b:df:60:67:9f:cb:a5:5b:b2:b3:af:1d:64:a2:
42:1c:b7:c8:0f:59:96:13:75:bc:66:70:45:23:6f:a3:cc:2a:
49:76:23:d6:60:c2:d0:00:d2:58:ac:40:35:68:d4:4a:4b:b2:
d0:48:6d:06:72:ee:39:c7:c0:7a:cb:5e:1f:5f:62:d5:af:a4:
37:e2:60:14:a1:e2:0e:d3:a1:de:43:f6:e2:0b:a4:ac:77:e3:
cc:7c:9b:bd:41:33:03:8c:8d:cd:8e:79:03:9d:1e:2d:ff:db:
04:97:1e:ae:74:17:a0:e2:83:e6:d7:1f:e3:2a:fd:b8:13:3b:
26:23:b8:6f:23:a5:62:36:c5:04:5b:53:fb:34:08:2e:0b:9c:
0f:10:fe:62:a5:f8:c8:18:05:6b:8e:83:4a:f8:da:e2:e6:0f:
76:42:2f:76:0c:13:4f:35:36:c7:32:cf:e3:ba:4e:c6:27:dc:
77:dc:4d:7b:9e:18:95:dd:c1:15:8f:96:5a:ef:81:61:61:5b:
46:67:dd:cf:46:ba:a4:1c:22:71:80:2b:ce:b6:7f:11:85:55:
c1:ca:f5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:44:05 2026 by rpki-client