Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/MD4cosIRi9elPGst52tPGWVVXgQ.roa
File: MD4cosIRi9elPGst52tPGWVVXgQ.roa (raw, json)
Hash identifier: uQ5E7La04dxcXCsqGXXrY+8iqi3ww+c05QuoQOajMIE=
Subject key identifier: 30:3E:1C:A2:C2:11:8B:D7:A5:3C:6B:2D:E7:6B:4F:19:65:55:5E:04
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 019CBDBB2E7B21FC3071F63FD56943465BB0
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/MD4cosIRi9elPGst52tPGWVVXgQ.roa
Signing time: Thu 05 Mar 2026 11:21:26 +0000
ROA not before: Thu 05 Mar 2026 11:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 193.193.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 11:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:bb:2e:7b:21:fc:30:71:f6:3f:d5:69:43:46:5b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Mar 5 11:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=303e1ca2c2118bd7a53c6b2de76b4f1965555e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:74:52:f1:cf:c0:b9:c0:5f:42:d9:f2:66:
cf:0d:cd:22:73:c3:39:3e:87:d4:77:3b:3d:17:8f:
78:64:f6:43:40:ac:ff:6a:7d:50:da:8c:27:1c:30:
96:e5:1c:22:b1:15:48:d4:7e:d0:d5:03:31:94:c2:
9e:3a:80:e2:a4:6c:4c:66:a4:93:78:ee:52:2a:55:
1d:fd:79:b2:ee:13:76:45:f3:de:e0:19:88:a1:b3:
ab:9e:fd:c6:98:a8:68:70:44:41:6e:5b:a0:e7:6b:
7c:ed:1d:9b:e3:ab:f8:36:6b:42:d9:7e:52:05:7d:
26:92:df:01:cb:68:62:79:b5:d2:38:09:9a:4c:b6:
45:a2:8f:f2:fa:8b:4c:72:cf:60:4a:e0:48:dd:de:
51:18:af:8f:cd:80:db:dc:0f:d5:d0:68:75:5d:aa:
3a:d1:57:fe:22:ac:dd:40:b7:c3:71:50:cf:c3:9f:
46:ea:d6:3b:59:d1:64:3f:e6:9d:01:e2:c5:5b:82:
3b:1c:c5:38:07:cd:a3:97:e5:c5:2e:b8:67:8d:3e:
7e:94:00:cc:82:d9:0d:7a:5b:01:b6:e8:27:0e:37:
8c:70:f7:4b:40:68:da:14:4c:9a:c8:0d:25:ab:32:
50:5e:b7:65:33:af:02:df:22:9b:58:e1:76:98:bc:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3E:1C:A2:C2:11:8B:D7:A5:3C:6B:2D:E7:6B:4F:19:65:55:5E:04
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/MD4cosIRi9elPGst52tPGWVVXgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.208.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:20:65:48:7a:97:50:36:ab:d1:30:e0:c0:8e:56:d9:3d:c5:
81:5a:f4:87:85:9d:e8:a8:cd:eb:34:a0:69:bc:f7:10:47:11:
23:00:35:4c:bc:5e:ab:01:e6:46:79:08:96:3a:55:70:f1:9f:
1a:a8:f4:88:44:01:92:89:68:83:76:de:3c:87:4b:f9:0f:8c:
ee:e6:5e:31:f6:67:01:4f:07:f7:62:7e:ae:d8:b7:dc:2c:d0:
38:b2:37:fa:7f:c7:27:13:8a:48:b3:a3:12:d4:fb:0d:0c:5a:
b6:aa:9a:ff:12:52:60:de:cc:38:c7:ff:20:84:0c:52:f4:ea:
05:33:45:ba:83:9d:35:3e:76:e5:7c:d8:c8:6c:5c:f7:dd:7e:
9b:e8:cd:32:b0:91:8d:ce:9c:42:78:93:ea:39:b6:7e:23:09:
3c:35:ae:ba:52:12:87:8d:8a:d2:3e:45:af:80:68:26:44:6e:
20:5c:d2:55:4f:16:74:46:7b:53:3a:36:4d:7c:b2:05:e7:39:
48:40:6c:c6:59:4d:8b:0c:e4:05:d0:c2:14:15:a7:84:78:97:
a5:24:4c:d2:2e:f3:28:ce:b4:8c:a9:14:a1:e1:49:08:ba:93:
de:78:98:37:9f:2e:36:ce:fe:60:8c:66:40:71:98:96:7c:55:
7e:98:38:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZy9uy57IfwwcfY/1WlDRluwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4
NTU1MzkwHhcNMjYwMzA1MTEyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDNlMWNhMmMyMTE4YmQ3YTUzYzZiMmRlNzZiNGYxOTY1NTU1ZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq750UvHPwLnAX0LZ8mbPDc0ic8M5
PofUdzs9F494ZPZDQKz/an1Q2ownHDCW5RwisRVI1H7Q1QMxlMKeOoDipGxMZqST
eO5SKlUd/Xmy7hN2RfPe4BmIobOrnv3GmKhocERBblug52t87R2b46v4NmtC2X5S
BX0mkt8By2hiebXSOAmaTLZFoo/y+otMcs9gSuBI3d5RGK+PzYDb3A/V0Gh1Xao6
0Vf+IqzdQLfDcVDPw59G6tY7WdFkP+adAeLFW4I7HMU4B82jl+XFLrhnjT5+lADM
gtkNelsBtugnDjeMcPdLQGjaFEyayA0lqzJQXrdlM68C3yKbWOF2mLzevQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDA+HKLCEYvXpTxrLedrTxllVV4EMB8GA1UdIwQY
MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt
MzM2YWM5NDU2NDY0LzEvTUQ0Y29zSVJpOWVsUEdzdDUydFBHV1ZWWGdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0
LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcHQMA0G
CSqGSIb3DQEBCwUAA4IBAQCaIGVIepdQNqvRMODAjlbZPcWBWvSHhZ3oqM3rNKBp
vPcQRxEjADVMvF6rAeZGeQiWOlVw8Z8aqPSIRAGSiWiDdt48h0v5D4zu5l4x9mcB
Twf3Yn6u2LfcLNA4sjf6f8cnE4pIs6MS1PsNDFq2qpr/ElJg3sw4x/8ghAxS9OoF
M0W6g501PnblfNjIbFz33X6b6M0ysJGNzpxCeJPqObZ+Iwk8Na66UhKHjYrSPkWv
gGgmRG4gXNJVTxZ0RntTOjZNfLIF5zlIQGzGWU2LDOQF0MIUFaeEeJelJEzSLvMo
zrSMqRSh4UkIupPeeJg3ny42zv5gjGZAcZiWfFV+mDhA
-----END CERTIFICATE-----
Generated at Thu Mar 5 17:34:34 2026 by rpki-client