Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/Me-3_nMxEtudvFEiZv13drFygFE.roa
File: Me-3_nMxEtudvFEiZv13drFygFE.roa (raw, json)
Hash identifier: iW69kKCgFDhPrZ2mp9OiMFp2BNpeSnBxeI31XMO1Tao=
Subject key identifier: 31:EF:B7:FE:73:31:12:DB:9D:BC:51:22:66:FD:77:76:B1:72:80:51
Certificate issuer: /CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Certificate serial: 01A11B75C94FA90674CA2151B35578AEC594
Authority key identifier: AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/Me-3_nMxEtudvFEiZv13drFygFE.roa
Signing time: Thu 08 Oct 2026 12:21:06 +0000
ROA not before: Thu 08 Oct 2026 12:21:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48405
IP address blocks: 91.209.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:75:c9:4f:a9:06:74:ca:21:51:b3:55:78:ae:c5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Validity
Not Before: Oct 8 12:21:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31efb7fe733112db9dbc512266fd7776b1728051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:20:3e:82:bc:d2:c2:30:cc:da:0a:9e:91:
0b:a2:99:be:29:4d:df:fe:75:8b:e0:ee:d3:2d:0a:
68:88:fd:fc:be:3e:d9:4f:ce:6c:38:99:96:37:d4:
ab:09:98:da:60:ae:69:0f:57:10:1b:82:dd:56:2c:
9c:56:92:26:aa:76:35:94:dd:48:f1:3d:5f:04:e2:
3d:0d:47:24:be:64:c8:4b:ec:99:40:c5:cf:76:db:
6e:da:0a:8d:67:4e:e7:e8:bb:f3:85:a1:e8:39:64:
52:dc:55:ce:8e:4f:17:d6:66:70:31:de:42:9e:66:
b5:b4:fa:84:ed:40:5a:ea:78:13:c8:12:1e:07:22:
c0:d2:ce:a4:72:8b:a5:59:64:a0:f9:c7:50:13:29:
da:b8:59:9c:1f:16:bb:8e:79:7e:ab:5a:f2:79:17:
cc:1e:b6:61:01:58:d9:c5:8a:aa:79:df:02:7f:28:
69:1c:b0:2b:ce:72:4f:01:1d:d2:1f:2d:9c:7b:64:
a2:93:bf:3b:22:58:69:da:1f:16:76:90:30:14:20:
a7:19:23:ef:f3:3d:17:2a:93:3e:63:3a:b5:7c:78:
a1:f8:09:ae:35:55:fe:8b:64:5b:5c:78:6b:af:92:
90:67:60:8f:5a:2c:d6:ab:d2:ce:32:98:5f:d7:5e:
6e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EF:B7:FE:73:31:12:DB:9D:BC:51:22:66:FD:77:76:B1:72:80:51
X509v3 Authority Key Identifier:
keyid:AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/Me-3_nMxEtudvFEiZv13drFygFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.101.0/24
Signature Algorithm: sha256WithRSAEncryption
08:23:fd:ac:2b:63:8d:3e:e2:c1:4d:ec:db:17:15:d6:05:3b:
bb:08:57:76:63:25:e5:dc:f9:ef:65:ea:78:b2:a1:fa:98:5a:
c6:44:21:c4:93:9d:9b:90:f6:19:56:a7:83:57:c5:29:77:e5:
1e:33:93:fb:7c:ad:01:ad:c7:e4:f1:1b:d5:f1:7a:d5:69:67:
f1:10:4d:6d:42:fe:48:0f:ee:a1:1f:46:7f:d3:4b:c5:87:c8:
96:09:b4:c1:3a:2d:39:5b:9f:3c:65:b9:d7:ae:5a:a5:ec:15:
71:53:6d:74:71:30:ef:f2:2d:a2:28:ce:45:da:76:58:e4:82:
3d:d5:5d:93:92:53:5e:6e:a8:d8:64:6f:90:dc:c8:d8:f8:65:
ad:d2:d1:76:0e:67:b8:bf:62:4d:2d:55:1f:70:46:2e:f1:80:
bf:08:8a:53:93:e2:6b:d9:1e:2a:3f:3e:9a:e8:b1:22:9d:8c:
38:81:e6:e8:6e:d6:ac:90:92:02:99:76:a0:80:91:72:78:0d:
f1:7d:d8:37:16:b8:d9:9f:15:bb:a4:00:f9:b1:28:b2:39:92:
85:7c:47:28:c9:6e:31:44:e4:80:49:f1:eb:70:a6:d8:bf:db:
22:2e:53:e2:4c:00:8f:a5:9d:40:c1:bf:19:ec:39:a2:0c:21:
60:d9:5d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:30:24 2026 by rpki-client