Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mEwtG1DhCPdEdCtQaViAy3INGDI.roa
File: mEwtG1DhCPdEdCtQaViAy3INGDI.roa (raw, json)
Hash identifier: KVvrTDsMuLWYO/9W1VKYvtUz9r2zs+z2AyGLgZ02PBQ=
Subject key identifier: 98:4C:2D:1B:50:E1:08:F7:44:74:2B:50:69:58:80:CB:72:0D:18:32
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019CDA5BBDE4D85E460F9EF56EE56FB10346
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mEwtG1DhCPdEdCtQaViAy3INGDI.roa
Signing time: Wed 11 Mar 2026 00:46:11 +0000
ROA not before: Wed 11 Mar 2026 00:46:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205983
IP address blocks: 45.15.177.0/24 maxlen: 24
45.89.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:da:5b:bd:e4:d8:5e:46:0f:9e:f5:6e:e5:6f:b1:03:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 11 00:46:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=984c2d1b50e108f744742b50695880cb720d1832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:8b:24:f2:ca:54:03:fa:a0:ec:ac:71:cc:
3b:aa:55:5d:33:18:70:90:b2:f4:61:6f:80:c5:03:
7b:d5:38:e4:6f:d3:97:27:00:0a:88:94:77:43:b6:
70:d6:41:87:23:1c:b1:fc:47:34:35:1a:46:da:f8:
59:d5:8d:f0:a0:ac:ad:bf:ef:03:dc:4f:6e:d0:d8:
00:5e:77:74:a4:7d:79:20:c5:9c:58:5f:83:02:65:
b3:ce:04:46:96:ed:ee:3f:5d:0d:16:b6:f8:94:a0:
c7:94:d5:9c:06:0a:83:85:09:99:71:19:e6:ef:d9:
aa:0b:d0:90:66:aa:e6:29:b6:26:8e:60:c5:a3:62:
74:5d:c4:b1:79:e0:7e:8b:e1:81:cd:47:5c:93:cc:
b5:9b:98:77:67:ed:55:a1:b5:6d:86:b1:a3:1b:f3:
ac:2e:47:5f:91:d5:89:1c:00:b5:02:98:62:01:fe:
3b:73:2f:e1:60:5b:c0:a5:0a:90:d0:52:9c:55:0b:
13:9b:1b:41:b8:fc:36:72:ee:c1:3a:a5:96:54:af:
21:39:41:ac:c6:f9:94:fb:ef:5a:f4:7e:8c:1c:a3:
b8:0b:cc:83:42:06:0b:89:88:4b:97:dc:4a:09:33:
8d:42:5e:94:46:86:2a:88:b1:23:52:af:00:da:44:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4C:2D:1B:50:E1:08:F7:44:74:2B:50:69:58:80:CB:72:0D:18:32
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/mEwtG1DhCPdEdCtQaViAy3INGDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.177.0/24
45.89.99.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f0:b8:f7:69:99:33:44:8e:f2:45:b7:22:6b:b2:eb:a5:b5:
97:6a:40:b6:81:90:5c:48:73:e1:87:77:b8:e2:9e:e9:71:db:
80:f5:71:9e:69:a5:36:02:67:c6:24:64:54:40:f7:0a:7a:d6:
fd:70:e7:eb:f0:eb:8f:c1:83:50:12:83:14:eb:a0:e8:31:9b:
c8:2c:79:54:09:fe:04:25:fd:74:b5:11:6a:1e:61:6c:2c:a3:
c6:3e:9a:f3:ff:bd:53:87:5f:e3:a4:da:77:6c:cf:65:83:45:
48:61:22:a2:53:d9:5f:2a:f2:b9:00:b8:28:58:6a:54:e6:8b:
f9:dd:7e:6a:48:bd:96:74:22:d9:c7:83:63:78:27:3d:89:26:
9f:f8:2c:5a:ce:da:82:33:d4:a9:df:42:8e:f2:a9:21:b1:10:
4a:23:07:bb:a3:4d:38:06:92:2b:24:a1:ed:de:40:25:e0:e1:
41:1a:74:a0:19:64:82:9f:b5:2b:39:7f:13:1e:73:8d:bb:85:
7a:7e:2a:04:e3:cd:1b:e7:a9:33:85:cb:11:07:bf:d2:b0:a0:
1f:1e:f7:2f:39:60:8a:fc:5a:00:86:a1:a1:30:ed:83:16:53:
df:75:aa:2c:db:b7:c4:ba:18:e6:fd:0c:fb:0a:d0:ce:af:3a:
81:cf:2a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 08:30:45 2026 by rpki-client