Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M4p3tz-ojiVBriAqkhRpIxYBaVg.roa
File: M4p3tz-ojiVBriAqkhRpIxYBaVg.roa (raw, json)
Hash identifier: DNFvJ9p4goQLQp+p5cNeGfyXZb7RKnDgzimeaRO5JX4=
Subject key identifier: 33:8A:77:B7:3F:A8:8E:25:41:AE:20:2A:92:14:69:23:16:01:69:58
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F3743493D90A8D33948372DC21F8D636F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M4p3tz-ojiVBriAqkhRpIxYBaVg.roa
Signing time: Mon 06 Jul 2026 11:49:44 +0000
ROA not before: Mon 06 Jul 2026 11:49:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200260
IP address blocks: 82.110.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:43:49:3d:90:a8:d3:39:48:37:2d:c2:1f:8d:63:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 6 11:49:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=338a77b73fa88e2541ae202a9214692316016958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:85:74:46:3a:b8:c0:97:88:cb:73:ec:91:
7a:38:b0:cc:8a:b4:26:9a:4d:15:69:69:67:02:63:
66:f1:fd:c8:76:60:48:28:cd:3e:7f:53:b0:a9:84:
c8:0e:9f:ba:31:07:a6:b1:7f:94:fa:8e:e8:9b:e6:
06:33:20:35:15:e8:74:35:b5:a2:4d:bd:ae:25:6a:
ff:00:7c:e1:2a:25:92:b1:3d:95:75:97:eb:64:3b:
0d:d9:8a:c4:e0:a9:2b:27:f2:7e:66:75:17:5f:5f:
4c:c1:fd:9d:3b:eb:0d:c6:9b:91:eb:2b:fc:1f:51:
54:60:72:05:59:51:68:7a:fa:d7:ff:8d:8d:53:1d:
c2:e6:0a:33:e0:c2:cf:95:c8:fe:9d:81:15:1d:48:
01:0b:47:37:23:21:bc:85:06:9a:46:21:eb:79:85:
60:2a:d6:75:19:c7:eb:eb:04:09:52:17:c5:9d:06:
3c:4b:e4:73:21:23:17:82:4d:8c:9a:48:2b:99:59:
fd:cd:12:23:a8:f6:28:7e:9f:2a:ba:2a:e6:59:11:
22:34:f5:82:f3:17:e7:ea:1c:69:80:83:df:4d:cd:
2c:b1:8a:ea:e5:03:dc:cf:2e:1c:74:49:ee:ca:06:
03:f8:71:58:66:83:16:69:53:e5:43:88:3b:2b:67:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8A:77:B7:3F:A8:8E:25:41:AE:20:2A:92:14:69:23:16:01:69:58
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M4p3tz-ojiVBriAqkhRpIxYBaVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.132.0/22
Signature Algorithm: sha256WithRSAEncryption
62:d5:39:22:c5:be:60:71:da:e4:13:c5:31:e5:47:73:a9:f7:
9d:fe:e1:88:e7:31:ac:38:fa:d8:91:bf:ca:b6:4e:bb:77:c8:
37:cd:38:a0:25:56:c5:d7:7a:ca:43:61:73:b6:9d:c1:f9:11:
24:7d:17:5d:ba:7f:9a:01:d1:27:71:0e:1b:ea:9f:68:28:e4:
69:b6:d7:31:99:b9:80:e5:d3:38:3c:62:ef:63:1f:23:ca:f7:
95:51:8c:fb:de:3e:f8:3c:ce:d9:1c:35:47:2a:4a:ec:b9:ab:
e8:f1:33:a1:54:e4:b7:65:ec:2a:ee:4f:65:91:42:5b:2b:42:
a8:c5:7c:c5:44:4c:3b:6e:43:46:2a:35:2c:30:13:ed:7c:70:
66:11:44:fb:4d:9e:87:66:18:93:06:bc:5e:8e:3f:1e:03:8f:
2b:26:6e:78:35:45:b2:6d:b2:03:99:ac:24:55:09:f0:1f:2d:
85:0a:66:c0:d3:cc:dc:2d:f7:d1:36:d4:97:c6:65:4a:fa:38:
15:af:ed:b2:a5:6f:1c:e5:c7:95:9e:76:bd:64:3d:25:67:24:
b1:f3:b8:b0:e8:97:77:d1:d8:4f:42:47:04:6e:6f:32:df:a8:
43:85:47:e6:e0:94:8d:b2:ce:86:5f:46:12:fc:13:93:16:44:
d4:cb:e1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:40 2026 by rpki-client