Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/Mer11hQ15D-jrLouYRlyFBNsr9k.roa
File: Mer11hQ15D-jrLouYRlyFBNsr9k.roa (raw, json)
Hash identifier: pFGvLBy0OAKz3OIzWOuN1/pjfeO7iP38PaUND1hqokk=
Subject key identifier: 31:EA:F5:D6:14:35:E4:3F:A3:AC:BA:2E:61:19:72:14:13:6C:AF:D9
Certificate issuer: /CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Certificate serial: 019F2368C39C06F80BEA251D384DC95DF3AC
Authority key identifier: C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/Mer11hQ15D-jrLouYRlyFBNsr9k.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199058
IP address blocks: 45.85.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c3:9c:06:f8:0b:ea:25:1d:38:4d:c9:5d:f3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31eaf5d61435e43fa3acba2e61197214136cafd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:c0:e2:fd:c6:e2:d1:8b:87:9e:ef:a0:84:
ba:88:51:65:12:2b:38:61:2d:3a:d3:2b:22:55:fd:
e1:c5:f9:36:36:7e:64:3e:e5:ea:e1:11:33:6d:be:
fd:20:1f:45:45:2d:46:96:a9:be:b4:6f:90:f1:7d:
3d:b7:3a:aa:25:54:97:f6:eb:d6:b5:f1:1e:c1:76:
a5:88:12:7f:9b:97:59:6e:51:5d:dd:0c:ea:04:fc:
d9:67:e8:ca:6a:4b:d5:42:36:68:3e:66:c9:1c:b7:
64:a1:36:70:5d:89:fe:06:90:64:ff:5b:c6:cd:f6:
25:ee:4d:2b:fd:c4:df:65:2a:44:55:ad:62:f1:0e:
e7:7b:c0:1f:6b:fc:a9:c5:24:3b:f6:a9:09:b7:4f:
b0:26:0e:4c:9a:11:02:0f:0b:62:c5:63:c8:38:17:
f7:d7:85:0f:fb:60:5d:a6:fa:e4:d9:cc:ac:eb:3c:
c0:95:1d:d0:9e:09:78:cb:67:e4:41:9e:ea:04:2e:
f0:be:fd:0e:63:1d:fe:73:2a:f3:65:09:64:6c:38:
a9:fc:67:b1:92:cf:ec:60:98:12:fe:81:5d:1e:1a:
20:42:a1:e3:56:ea:73:3d:5e:1c:53:68:f9:3a:be:
11:96:e7:e8:5b:5b:12:32:9a:20:b7:dd:4d:4f:e9:
2d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EA:F5:D6:14:35:E4:3F:A3:AC:BA:2E:61:19:72:14:13:6C:AF:D9
X509v3 Authority Key Identifier:
keyid:C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/Mer11hQ15D-jrLouYRlyFBNsr9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.93.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f8:f2:62:f4:68:a0:ee:1d:17:bd:d2:a0:36:7b:47:16:62:
cc:7c:f1:05:69:60:f1:5d:19:9d:bb:63:51:a6:4b:67:92:2d:
c5:9b:11:09:50:32:01:b7:19:bc:e4:8b:bb:b6:14:b9:62:f9:
7e:49:f7:13:de:99:db:a0:6d:f4:9f:81:c6:66:fb:26:90:5a:
55:df:99:9e:46:92:be:1a:8a:4a:23:84:84:9c:91:a5:64:bf:
7c:76:87:ee:9e:72:ad:7a:9c:84:ed:8c:27:c4:84:44:b0:a2:
d6:3e:aa:93:af:36:34:31:1b:1b:e6:dd:f1:5a:99:4b:c3:fa:
ad:31:ff:4a:23:79:31:77:f5:28:d5:53:b9:a0:d7:8d:fe:f1:
07:5a:3f:e2:b5:a0:e0:eb:2c:cb:dd:0b:c4:95:2a:a5:26:4a:
3d:f1:45:25:de:1b:1e:34:eb:b5:ae:59:93:af:64:24:99:db:
4c:93:7c:7f:db:15:fd:75:cc:34:a5:50:9d:e4:ec:a3:73:9b:
c0:51:24:e8:5e:c6:0c:ff:d2:e4:92:7a:89:01:60:b8:d4:0d:
82:24:3d:b0:db:85:0c:8c:e6:04:95:4c:60:57:dc:73:fb:65:
11:6e:5a:55:63:90:11:2a:cb:d1:c9:c8:22:89:ac:40:66:05:
44:99:50:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:02 2026 by rpki-client