Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M-Mv2rCzS0-44rIc3IpH29WDtDw.roa
File: M-Mv2rCzS0-44rIc3IpH29WDtDw.roa (raw, json)
Hash identifier: yJBcyRDViAmM7e0injUhmirh/NUc2OtrHzmNYjW0x24=
Subject key identifier: 33:E3:2F:DA:B0:B3:4B:4F:B8:E2:B2:1C:DC:8A:47:DB:D5:83:B4:3C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019ED4E76DBC14B6E989B4D0C5405F4888B4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M-Mv2rCzS0-44rIc3IpH29WDtDw.roa
Signing time: Wed 17 Jun 2026 09:26:37 +0000
ROA not before: Wed 17 Jun 2026 09:26:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 46.34.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:e7:6d:bc:14:b6:e9:89:b4:d0:c5:40:5f:48:88:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 17 09:26:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33e32fdab0b34b4fb8e2b21cdc8a47dbd583b43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:31:06:50:36:eb:2e:3c:97:b2:8a:8d:63:
08:00:21:a0:a4:4a:1c:82:f2:6f:24:2c:c9:aa:df:
43:5f:84:64:70:48:53:81:a8:e7:10:71:b2:7e:e5:
61:c4:18:4f:c7:d4:5d:e9:b4:c3:41:b5:43:bb:5a:
4d:7c:20:66:8f:b3:9f:b2:91:16:87:31:ca:a0:ed:
11:a5:08:c9:69:2c:76:0f:53:a5:64:14:90:80:fe:
da:cc:a3:c3:74:d9:d8:d2:eb:09:0c:1e:17:7b:f7:
76:61:02:69:6c:3c:56:94:6f:71:fb:08:40:58:9b:
78:f3:c2:5a:56:c5:a5:d2:f3:3e:a5:59:d4:be:fa:
30:61:dc:55:c5:42:20:be:16:7c:48:9c:47:9c:e2:
fc:52:76:4a:6a:ad:db:13:a0:5b:40:62:fd:4d:fa:
91:6e:67:11:b9:62:c4:3d:5b:46:58:d5:01:02:6b:
25:e4:cc:2b:83:8f:1b:25:c3:7f:09:eb:5a:8c:ac:
eb:76:b2:40:b3:53:5c:16:dc:cd:29:cb:41:37:c0:
65:b9:b8:47:00:61:75:93:7e:e5:11:d2:4a:24:5f:
6a:cf:34:bf:11:4b:1c:52:55:37:0b:c5:4d:b6:11:
ce:82:27:b3:92:21:de:97:85:25:30:5c:c6:2d:b7:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:2F:DA:B0:B3:4B:4F:B8:E2:B2:1C:DC:8A:47:DB:D5:83:B4:3C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M-Mv2rCzS0-44rIc3IpH29WDtDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.18.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:0a:fe:75:f2:86:b8:ac:39:e1:af:b5:5c:db:29:b8:a0:5d:
9a:37:bb:fa:e2:73:7d:31:f5:3b:75:9a:11:57:b0:fc:ac:cf:
3d:d3:2a:94:94:72:74:4c:66:40:51:28:42:c1:82:55:35:f1:
72:42:c7:42:d2:fb:95:28:ac:63:3b:d8:d7:7d:74:81:b5:8d:
32:a2:bf:e5:eb:7a:12:15:77:99:be:ed:9b:eb:93:8e:dc:ab:
2d:cb:1a:c1:39:8f:04:49:33:0c:d0:38:44:41:3e:8f:0a:89:
4f:96:d9:49:b5:20:23:2c:7f:d6:78:78:c1:73:74:de:09:af:
ff:87:0e:32:6e:f1:2f:a4:ca:0b:71:34:5c:30:bf:f4:9d:46:
c1:3f:b4:0d:b6:00:7b:9c:3b:9d:c3:5c:08:38:c7:75:e7:36:
d6:87:d3:8d:ee:48:e1:0d:6d:97:b2:53:21:19:d2:24:87:06:
73:1e:2c:b7:fa:88:6b:03:71:d4:67:55:9f:4c:b8:a5:65:5b:
17:33:71:4f:c4:4e:b3:e1:64:7d:bc:2d:6a:36:ba:d1:2d:b5:
d0:02:1f:f4:2f:5b:fe:99:2f:d7:70:10:48:8f:e8:95:c9:ff:
da:9b:96:13:fa:8b:ed:e4:63:b8:cc:50:d3:75:3e:a9:f4:e0:
67:4c:79:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7U5228FLbpibTQxUBfSIi0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNjE3MDkyNjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2UzMmZkYWIwYjM0YjRmYjhlMmIyMWNkYzhhNDdkYmQ1ODNiNDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXAxBlA26y48l7KKjWMIACGgpEoc
gvJvJCzJqt9DX4RkcEhTgajnEHGyfuVhxBhPx9Rd6bTDQbVDu1pNfCBmj7OfspEW
hzHKoO0RpQjJaSx2D1OlZBSQgP7azKPDdNnY0usJDB4Xe/d2YQJpbDxWlG9x+whA
WJt488JaVsWl0vM+pVnUvvowYdxVxUIgvhZ8SJxHnOL8UnZKaq3bE6BbQGL9TfqR
bmcRuWLEPVtGWNUBAmsl5Mwrg48bJcN/CetajKzrdrJAs1NcFtzNKctBN8BlubhH
AGF1k37lEdJKJF9qzzS/EUscUlU3C8VNthHOgiezkiHel4UlMFzGLbeE1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDPjL9qws0tPuOKyHNyKR9vVg7Q8MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvTS1NdjJyQ3pTMC00NHJJYzNJcEgyOVdEdER3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLiISMA0G
CSqGSIb3DQEBCwUAA4IBAQCsCv518oa4rDnhr7Vc2ym4oF2aN7v64nN9MfU7dZoR
V7D8rM890yqUlHJ0TGZAUShCwYJVNfFyQsdC0vuVKKxjO9jXfXSBtY0yor/l63oS
FXeZvu2b65OO3KstyxrBOY8ESTMM0DhEQT6PColPltlJtSAjLH/WeHjBc3TeCa//
hw4ybvEvpMoLcTRcML/0nUbBP7QNtgB7nDudw1wIOMd15zbWh9ON7kjhDW2XslMh
GdIkhwZzHiy3+ohrA3HUZ1WfTLilZVsXM3FPxE6z4WR9vC1qNrrRLbXQAh/0L1v+
mS/XcBBIj+iVyf/am5YT+ovt5GO4zFDTdT6p9OBnTHng
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:14:56 2026 by rpki-client