Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/M5Pjk3-Iv7owCPOWJdu9RksUoQk.roa
File: M5Pjk3-Iv7owCPOWJdu9RksUoQk.roa (raw, json)
Hash identifier: 0apaBVPVgcAHb1VlUzCJsDR4I1XWTpJr/hHmPBPsgfc=
Subject key identifier: 33:93:E3:93:7F:88:BF:BA:30:08:F3:96:25:DB:BD:46:4B:14:A1:09
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 019ED97C632F38812B101909CC91D2653410
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/M5Pjk3-Iv7owCPOWJdu9RksUoQk.roa
Signing time: Thu 18 Jun 2026 06:47:48 +0000
ROA not before: Thu 18 Jun 2026 06:47:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15412
IP address blocks: 62.216.128.0/19 maxlen: 24
80.77.0.0/20 maxlen: 24
80.81.64.0/19 maxlen: 19
85.95.24.0/22 maxlen: 24
89.17.96.0/19 maxlen: 19
2001:1a00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:7c:63:2f:38:81:2b:10:19:09:cc:91:d2:65:34:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Jun 18 06:47:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3393e3937f88bfba3008f39625dbbd464b14a109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:e7:06:19:d6:e7:6b:4b:4f:9a:52:68:23:
4f:5d:71:46:a8:b7:92:19:21:c2:27:29:c7:ea:dc:
82:4d:07:99:85:8b:aa:c0:12:58:90:40:c8:52:8b:
c7:5d:40:4f:b5:ad:fd:24:a9:b9:4c:1d:80:db:2c:
a0:74:a8:30:9d:ec:c2:92:bc:c5:88:0b:4a:0f:30:
97:57:ba:9d:da:b6:8f:80:e2:11:68:dd:29:88:f2:
68:a7:d3:95:fa:44:b7:41:db:3b:c8:d4:c5:a7:f7:
5d:7c:30:61:77:3e:eb:c8:2d:f7:0e:45:6b:60:98:
e2:27:f0:ad:03:48:80:a3:6e:b8:29:65:43:18:fc:
53:43:e5:29:a4:48:7b:2a:01:ee:26:15:f7:b2:ae:
ae:57:68:02:14:a6:b8:96:83:55:c3:27:6d:54:3c:
35:13:76:b0:27:0b:35:36:df:94:74:c6:3a:f7:5f:
7e:ba:0f:78:5c:48:ad:9a:11:af:be:b4:ac:13:9b:
4a:d0:a3:b3:a4:64:f5:1c:52:f3:f4:29:ef:a4:fe:
34:03:35:ad:3c:93:e9:f9:33:3d:d0:33:d9:4c:c7:
5d:3d:d0:d7:22:3b:36:aa:a7:61:9a:a3:dc:c6:45:
b6:41:48:a8:fa:69:a8:45:b6:7f:f9:d2:58:3e:4a:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:93:E3:93:7F:88:BF:BA:30:08:F3:96:25:DB:BD:46:4B:14:A1:09
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/M5Pjk3-Iv7owCPOWJdu9RksUoQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.216.128.0/19
80.77.0.0/20
80.81.64.0/19
85.95.24.0/22
89.17.96.0/19
IPv6:
2001:1a00::/32
Signature Algorithm: sha256WithRSAEncryption
55:5f:22:71:82:e9:91:b0:d9:f7:a2:61:d8:ff:a1:1d:9c:aa:
84:c8:21:85:a0:10:0e:68:da:a4:1a:9c:3a:16:1d:7e:e9:3d:
7d:75:3a:f1:c5:bf:da:2e:79:b5:49:d9:20:0e:34:f0:86:21:
95:4f:d8:f4:c3:e0:f2:16:20:18:a0:21:7a:07:46:3c:76:3e:
b3:e6:5c:00:0d:1c:e2:54:f5:86:0d:94:c3:b2:ef:3d:83:5a:
ee:84:03:ed:8a:93:61:bb:e2:c3:f6:bd:6f:da:93:29:e0:55:
3e:be:db:0f:00:9e:6e:a8:f3:d4:f1:12:a9:b2:cd:11:68:5d:
8c:58:93:ed:b4:47:da:34:e0:c4:ac:45:0e:7b:2b:0a:d6:14:
c7:11:18:4c:04:4b:d7:37:11:1d:88:ab:f4:54:7b:84:43:ca:
fd:18:b0:c5:64:f3:45:4d:88:ec:53:90:14:9f:82:56:40:75:
a6:59:7c:5d:34:af:a6:82:1a:cf:2d:b0:91:e8:ef:ee:8f:e9:
69:09:f7:05:fb:6b:9a:e9:94:d5:59:b0:c2:19:ad:41:b8:51:
e0:55:0b:c3:31:12:aa:cd:f4:ef:dc:f9:b2:54:f4:2b:7b:c1:
75:9f:77:48:3f:b0:1b:0d:c5:57:cc:06:0e:b1:fa:75:3b:79:
25:36:e1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:14:47 2026 by rpki-client