Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/M2jXc0NhZkPSY8HF_AES6Z2QgY4.roa
File: M2jXc0NhZkPSY8HF_AES6Z2QgY4.roa (raw, json)
Hash identifier: IaTjBLUpeVPvAQsCn4UJQ4zSezVEpOlxAezx7/pK0RA=
Subject key identifier: 33:68:D7:73:43:61:66:43:D2:63:C1:C5:FC:01:12:E9:9D:90:81:8E
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 019FBE1A80152B976EBBEF898507EA35BF12
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/M2jXc0NhZkPSY8HF_AES6Z2QgY4.roa
Signing time: Sat 01 Aug 2026 16:13:55 +0000
ROA not before: Sat 01 Aug 2026 16:13:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32519
IP address blocks: 45.88.192.0/22 maxlen: 24
193.110.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:be:1a:80:15:2b:97:6e:bb:ef:89:85:07:ea:35:bf:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Aug 1 16:13:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3368d77343616643d263c1c5fc0112e99d90818e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:78:cb:12:23:17:c1:49:50:11:18:d8:1a:
48:ea:8d:40:7b:18:f0:9f:6c:3e:cf:aa:6a:3b:a6:
cd:01:91:d5:28:23:6c:fd:02:a9:fd:45:c6:c7:4a:
63:b3:4f:d9:7c:e1:e8:7d:40:ae:da:0e:f7:52:e0:
b6:90:4c:3a:c1:dd:e3:a7:9a:15:38:b7:dd:1a:e1:
4e:51:ab:c1:2e:bf:05:a0:5a:cb:42:93:41:2d:8b:
e8:62:3d:c4:74:63:ce:aa:4e:fd:a0:41:cb:2f:f9:
90:22:f6:e8:4f:0b:18:54:11:95:38:81:ff:08:03:
5b:14:14:72:da:21:7d:89:ee:a7:6c:a2:c9:38:8f:
3a:e5:46:09:77:c6:07:f9:32:e9:82:71:40:64:ec:
93:a4:02:8d:d9:12:17:ed:e7:06:9e:1f:61:58:47:
ec:f0:ce:cb:17:ad:06:f4:67:f5:7a:46:4f:09:2b:
fb:c3:f6:3f:99:13:8a:d0:65:3b:53:5c:8f:9c:ed:
27:6b:fb:ac:66:85:d5:b9:e1:c3:39:71:fb:bc:87:
9f:9f:10:72:4e:03:f9:4f:aa:2e:bf:bf:d7:56:2d:
38:28:cc:b9:0e:fb:51:f1:90:0b:34:50:30:c6:41:
b5:44:da:9a:21:7f:81:b2:f5:ab:4d:87:6a:5d:22:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:68:D7:73:43:61:66:43:D2:63:C1:C5:FC:01:12:E9:9D:90:81:8E
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/M2jXc0NhZkPSY8HF_AES6Z2QgY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.192.0/22
193.110.200.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:b7:9b:4f:9f:3f:1b:36:75:b6:ba:6f:f8:7a:91:69:c4:18:
3b:b1:02:fc:4a:09:03:4b:95:9e:98:90:00:2a:7e:62:4a:43:
8b:8e:5f:8e:08:6a:a2:40:d9:59:60:59:12:f3:de:4b:09:4c:
5b:9d:00:ae:44:30:f3:10:dd:4f:b3:81:7b:6d:f9:78:24:ed:
e5:b6:12:4d:fd:73:89:2d:f8:f2:fc:a9:ab:e4:b6:99:1b:2a:
2d:04:be:b5:38:d5:98:f4:16:6c:b5:ec:48:92:87:64:7e:e6:
8a:e5:d6:10:ce:a4:b3:f3:0f:ce:10:a0:06:01:08:ac:76:18:
a8:42:39:06:db:ca:84:7c:9d:3e:ad:9e:e7:71:f6:85:ca:79:
3c:fb:41:26:0f:b6:b7:2f:bb:2e:b1:23:ab:f9:68:f4:01:98:
f8:35:e3:4b:da:e9:e2:ae:ab:79:cf:42:e3:e3:75:79:b4:46:
3c:a3:62:2b:56:52:b7:e9:d6:ac:60:ec:25:63:1a:a6:4b:b0:
47:61:b2:96:1f:ad:ab:e4:d9:40:67:2a:a7:1e:c0:af:60:25:
ca:28:78:f7:f5:0f:70:87:63:4a:a1:2e:7d:8d:be:33:b4:2b:
4b:1b:1e:b5:92:97:79:68:74:30:9d:89:1a:d2:2b:08:a2:cf:
9d:95:aa:33
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ++GoAVK5duu++JhQfqNb8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYmZiMDA0OGE4ZGE1NTZmZDlkM2RmMTA3NzQwMmY4NDNm
NWQ3MDMwHhcNMjYwODAxMTYxMzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzY4ZDc3MzQzNjE2NjQzZDI2M2MxYzVmYzAxMTJlOTlkOTA4MThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojt4yxIjF8FJUBEY2BpI6o1Aexjw
n2w+z6pqO6bNAZHVKCNs/QKp/UXGx0pjs0/ZfOHofUCu2g73UuC2kEw6wd3jp5oV
OLfdGuFOUavBLr8FoFrLQpNBLYvoYj3EdGPOqk79oEHLL/mQIvboTwsYVBGVOIH/
CANbFBRy2iF9ie6nbKLJOI865UYJd8YH+TLpgnFAZOyTpAKN2RIX7ecGnh9hWEfs
8M7LF60G9Gf1ekZPCSv7w/Y/mROK0GU7U1yPnO0na/usZoXVueHDOXH7vIefnxBy
TgP5T6ouv7/XVi04KMy5DvtR8ZALNFAwxkG1RNqaIX+BsvWrTYdqXSJUHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDNo13NDYWZD0mPBxfwBEumdkIGOMB8GA1UdIwQY
MBaAFNy/sASKjaVW/Z098Qd0AvhD9dcDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kY2I3MGQtNzk0Ny00NTY5LWJjODQt
ZTA2MGI0ZmNiY2NiLzEvTTJqWGMwTmhaa1BTWThIRl9BRVM2WjJRZ1k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kY2I3MGQtNzk0Ny00NTY5LWJjODQtZTA2MGI0ZmNiY2Ni
LzEvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVjAAwQC
wW7IMA0GCSqGSIb3DQEBCwUAA4IBAQC2t5tPnz8bNnW2um/4epFpxBg7sQL8SgkD
S5WemJAAKn5iSkOLjl+OCGqiQNlZYFkS895LCUxbnQCuRDDzEN1Ps4F7bfl4JO3l
thJN/XOJLfjy/Kmr5LaZGyotBL61ONWY9BZstexIkodkfuaK5dYQzqSz8w/OEKAG
AQisdhioQjkG28qEfJ0+rZ7ncfaFynk8+0EmD7a3L7susSOr+Wj0AZj4NeNL2uni
rqt5z0Lj43V5tEY8o2IrVlK36dasYOwlYxqmS7BHYbKWH62r5NlAZyqnHsCvYCXK
KHj39Q9wh2NKoS59jb4ztCtLGx61kpd5aHQwnYka0isIos+dlaoz
-----END CERTIFICATE-----
Generated at Sun Aug 23 00:16:41 2026 by rpki-client