Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/mmeMEwkbU97JoYdWkkEcuBsE0s0.roa
File: mmeMEwkbU97JoYdWkkEcuBsE0s0.roa (raw, json)
Hash identifier: QGztUtfOwtQPZG5NEH8v2QsY0hatN3B+6IgUMqc+ERI=
Subject key identifier: 9A:67:8C:13:09:1B:53:DE:C9:A1:87:56:92:41:1C:B8:1B:04:D2:CD
Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial: 019DAF9DBC8EA793141404BA1B8ED993A26A
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/mmeMEwkbU97JoYdWkkEcuBsE0s0.roa
Signing time: Tue 21 Apr 2026 10:37:23 +0000
ROA not before: Tue 21 Apr 2026 10:37:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6453
IP address blocks: 89.31.192.0/21 maxlen: 21
89.31.192.0/24 maxlen: 24
89.31.193.0/24 maxlen: 24
89.31.194.0/24 maxlen: 24
89.31.195.0/24 maxlen: 24
89.31.196.0/24 maxlen: 24
89.31.197.0/24 maxlen: 24
89.31.198.0/24 maxlen: 24
89.31.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:9d:bc:8e:a7:93:14:14:04:ba:1b:8e:d9:93:a2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
Validity
Not Before: Apr 21 10:37:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a678c13091b53dec9a1875692411cb81b04d2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:a2:1e:2b:e6:ae:b9:ed:6a:36:19:b9:16:
e9:65:74:2c:ac:47:2d:12:57:f8:a1:90:29:84:54:
d0:99:82:7e:73:bb:03:c5:55:94:fa:e1:f7:95:a3:
60:5c:3c:8e:da:f4:cc:48:ef:ae:d7:a6:ba:f3:8b:
f0:e8:59:39:b0:d4:22:70:ec:4f:bb:7a:e2:01:c3:
e1:b2:4c:cf:b9:c1:10:5a:5b:67:1d:73:bf:50:b1:
c6:91:77:50:24:65:38:11:d7:c2:c9:a2:44:66:32:
f1:7f:5c:e9:07:22:ff:13:68:9b:be:16:1b:db:a0:
fb:9e:af:81:92:46:af:5e:5f:26:30:eb:73:de:b8:
65:00:ad:b9:64:87:e4:27:ba:92:20:c6:e9:9c:f4:
b8:25:20:0b:b7:8d:7e:ea:cf:ad:52:d0:b9:c8:c7:
1a:9d:ee:aa:fa:8e:fb:43:4c:f0:6a:f2:2e:de:60:
51:4d:4e:22:05:0d:b2:24:9f:be:62:f2:d0:4d:fd:
89:31:c8:06:f7:9d:05:19:62:3f:86:ad:36:bd:b4:
d2:4c:d7:f6:99:ab:2d:eb:2c:20:f7:41:68:d7:c8:
01:5e:9f:9d:1c:79:d6:65:93:d1:6c:9e:c0:1a:af:
5f:ab:26:19:19:57:bf:67:70:38:7a:16:45:5b:ae:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:67:8C:13:09:1B:53:DE:C9:A1:87:56:92:41:1C:B8:1B:04:D2:CD
X509v3 Authority Key Identifier:
keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/mmeMEwkbU97JoYdWkkEcuBsE0s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.192.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:69:01:8a:a1:cb:75:05:93:90:3c:2f:29:47:f6:dc:2a:9d:
8c:32:69:f4:84:51:28:00:d7:89:b6:a5:7e:c4:a6:7a:36:75:
43:8d:9e:9c:b0:c8:eb:ca:26:03:e1:f1:8f:98:9c:46:d1:66:
03:6b:ad:fa:07:70:87:ba:ad:0d:ad:27:0c:b8:86:0b:dd:4d:
c1:f2:8f:bd:ff:3c:a2:87:39:92:b6:ce:ad:99:1d:df:76:d9:
d5:bf:18:5a:7f:bb:2b:42:a0:eb:83:89:51:13:94:10:33:f5:
6c:e2:ee:19:f4:27:3e:eb:ff:8e:1e:28:6b:4a:86:c8:b4:b8:
06:69:2b:82:6f:84:5a:c7:3d:e5:86:e9:8b:91:7f:e5:37:29:
ce:11:54:ee:ff:47:ee:c9:bb:47:49:69:99:c4:ff:34:1e:8a:
84:c1:83:f8:fe:e0:7e:9f:30:13:ba:fe:f2:81:8c:06:b7:df:
06:a6:ab:0b:82:ee:e1:6a:b1:bf:e5:fa:b1:f9:1c:88:21:67:
71:77:7e:a5:80:ed:80:6d:fd:3f:0a:66:67:56:95:84:83:70:
40:aa:ef:f8:5b:92:07:16:b6:aa:cb:19:cd:bd:70:d8:8e:a3:
51:7f:0e:ef:10:13:bf:d2:0d:11:ff:44:6b:da:8d:72:f8:1f:
3a:e9:75:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:52:30 2026 by rpki-client