Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mE_wt09IiPUOznKCDXVkzXHbnJ8.roa
File: mE_wt09IiPUOznKCDXVkzXHbnJ8.roa (raw, json)
Hash identifier: IjWeLvPyiguTXzPBu/QGWKkj9YG1mi8pPSFAwyMx8g8=
Subject key identifier: 98:4F:F0:B7:4F:48:88:F5:0E:CE:72:82:0D:75:64:CD:71:DB:9C:9F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E3FE8BFD41AA0B6198E45034BB345B27A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mE_wt09IiPUOznKCDXVkzXHbnJ8.roa
Signing time: Tue 19 May 2026 11:04:38 +0000
ROA not before: Tue 19 May 2026 11:04:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214962
IP address blocks: 37.202.195.0/24 maxlen: 24
151.245.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:e8:bf:d4:1a:a0:b6:19:8e:45:03:4b:b3:45:b2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 19 11:04:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=984ff0b74f4888f50ece72820d7564cd71db9c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:83:4d:3f:df:88:50:07:3f:13:3a:dc:4a:
a0:06:a3:18:92:79:af:6a:cd:c9:12:31:b4:54:38:
c1:6d:3c:7b:6d:1f:d7:c7:90:81:21:61:92:60:cd:
a9:07:cd:21:d8:24:ec:96:87:65:4c:1e:47:8b:ec:
a5:ea:9f:33:63:2e:00:1d:c1:66:15:5c:c7:35:8f:
6f:a0:63:26:29:bf:0e:6f:ae:7e:1c:22:a4:7f:f2:
16:48:d8:be:51:7e:df:65:0c:d3:d5:cd:45:1b:1d:
7d:dc:12:be:e6:a5:78:9a:cd:d1:8c:13:dc:72:6b:
f7:80:1d:c0:12:90:13:53:00:08:82:69:89:6a:80:
62:bb:f1:c3:0f:77:ae:70:d4:5a:84:47:76:29:b4:
5d:f2:43:c5:77:5e:a7:3a:ba:be:36:8a:70:8a:13:
23:dd:9e:5f:08:8b:7d:3f:de:4a:11:61:15:f3:7f:
cc:cd:3c:28:6d:31:c1:83:b6:27:6d:e7:83:86:52:
52:4a:8c:43:62:4c:a9:c3:c8:dd:b2:1a:db:98:96:
ee:f8:1f:c3:fb:b7:ce:61:30:c2:32:9f:f0:9c:dc:
0f:d3:48:b5:6b:dd:8f:a2:65:91:88:c1:13:80:02:
9c:11:8b:c5:b4:c8:5a:d8:f5:14:c4:b8:ef:2c:22:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4F:F0:B7:4F:48:88:F5:0E:CE:72:82:0D:75:64:CD:71:DB:9C:9F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mE_wt09IiPUOznKCDXVkzXHbnJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.195.0/24
151.245.193.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ed:de:c9:df:28:9e:0c:f4:57:12:35:9f:a6:3a:86:4c:57:
72:fa:04:70:94:86:8b:d0:21:92:5c:e3:61:27:d9:b1:38:52:
98:d7:72:21:5d:0c:49:6a:fd:bf:f4:5a:5e:e4:c2:cb:72:45:
4d:20:69:a3:2f:2f:36:f0:c6:f3:11:33:fa:a4:57:8f:e9:24:
32:fd:07:fd:10:f6:4c:1f:fe:29:82:d7:6f:96:de:d7:de:ea:
07:7b:e0:11:97:22:d1:09:9f:c5:51:2a:80:73:0a:0b:0b:40:
4d:43:c5:c4:4b:8c:73:56:65:19:7a:ea:c6:2d:97:e1:d0:43:
42:13:d9:7e:6c:e0:70:92:a0:5e:95:c5:da:0d:5c:e8:c1:c3:
07:d3:5e:c0:93:f1:84:b5:d0:a9:49:99:58:2e:d7:ac:2b:bb:
30:47:00:f8:30:30:a3:fd:a2:95:87:d1:dc:8a:9b:51:32:c2:
5b:fc:b8:0e:ff:2d:49:de:fa:91:5c:28:16:d0:6d:36:13:92:
88:6a:06:ea:f8:68:ed:4b:a8:b1:18:00:67:f7:2a:37:d6:23:
2d:e3:92:58:b9:28:a5:bd:e5:2e:49:21:c4:fe:d8:d4:2b:f9:
3d:1a:d8:ac:87:b7:1d:d0:db:3a:06:3e:bb:2e:6f:d4:3b:44:
06:f7:8c:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4/6L/UGqC2GY5FA0uzRbJ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNTE5MTEwNDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODRmZjBiNzRmNDg4OGY1MGVjZTcyODIwZDc1NjRjZDcxZGI5YzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWSDTT/fiFAHPxM63EqgBqMYknmv
as3JEjG0VDjBbTx7bR/Xx5CBIWGSYM2pB80h2CTslodlTB5Hi+yl6p8zYy4AHcFm
FVzHNY9voGMmKb8Ob65+HCKkf/IWSNi+UX7fZQzT1c1FGx193BK+5qV4ms3RjBPc
cmv3gB3AEpATUwAIgmmJaoBiu/HDD3eucNRahEd2KbRd8kPFd16nOrq+NopwihMj
3Z5fCIt9P95KEWEV83/MzTwobTHBg7YnbeeDhlJSSoxDYkypw8jdshrbmJbu+B/D
+7fOYTDCMp/wnNwP00i1a92PomWRiMETgAKcEYvFtMha2PUUxLjvLCKIDwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJhP8LdPSIj1Ds5ygg11ZM1x25yfMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvbUVfd3QwOUlpUFVPem5LQ0RYVmt6WEhibko4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJcrDAwQA
l/XBMA0GCSqGSIb3DQEBCwUAA4IBAQBO7d7J3yieDPRXEjWfpjqGTFdy+gRwlIaL
0CGSXONhJ9mxOFKY13IhXQxJav2/9Fpe5MLLckVNIGmjLy828MbzETP6pFeP6SQy
/Qf9EPZMH/4pgtdvlt7X3uoHe+ARlyLRCZ/FUSqAcwoLC0BNQ8XES4xzVmUZeurG
LZfh0ENCE9l+bOBwkqBelcXaDVzowcMH017Ak/GEtdCpSZlYLtesK7swRwD4MDCj
/aKVh9HciptRMsJb/LgO/y1J3vqRXCgW0G02E5KIagbq+GjtS6ixGABn9yo31iMt
45JYuSilveUuSSHE/tjUK/k9Gtish7cd0Ns6Bj67Lm/UO0QG94xQ
-----END CERTIFICATE-----
Generated at Wed May 27 13:47:30 2026 by rpki-client