Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/MezzCUmcqir09pIDM-Q32TQSxNA.roa
File: MezzCUmcqir09pIDM-Q32TQSxNA.roa (raw, json)
Hash identifier: WADJxcfUPJmWM2q+Ey187pYIdjDMvsYf9A+9uJTFp7s=
Subject key identifier: 31:EC:F3:09:49:9C:AA:2A:F4:F6:92:03:33:E4:37:D9:34:12:C4:D0
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019CE1E4C01B5FC1B391AF7EDA2EB95070EE
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/MezzCUmcqir09pIDM-Q32TQSxNA.roa
Signing time: Thu 12 Mar 2026 11:53:10 +0000
ROA not before: Thu 12 Mar 2026 11:53:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 150.251.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:e4:c0:1b:5f:c1:b3:91:af:7e:da:2e:b9:50:70:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Mar 12 11:53:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31ecf309499caa2af4f6920333e437d93412c4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ea:a5:62:99:d1:35:dd:e0:2f:b8:e2:c8:c6:
7a:10:2c:c4:96:6c:76:bb:be:86:1b:27:37:ba:fe:
90:a6:0b:0f:4d:fe:ef:f6:58:77:58:ff:b8:66:06:
eb:bd:0e:93:71:ce:5c:c7:32:d9:96:b2:ce:c9:65:
08:30:9f:99:f8:23:5f:d5:00:80:34:f8:d1:4f:48:
e8:b8:57:5e:e9:c6:7e:ff:43:41:e3:06:9e:61:eb:
a8:5f:cb:d4:ca:24:e9:f7:e8:50:c3:09:c4:67:fd:
67:52:24:83:9b:eb:bc:6d:46:59:39:ee:22:37:45:
22:26:7a:a5:f6:c7:a8:6f:99:22:93:18:03:bb:d8:
0f:eb:46:a5:ed:b6:49:16:9c:f8:4a:26:20:03:9b:
ef:c2:92:14:4a:ce:b9:e5:5f:bd:6d:a0:6a:ac:94:
f1:2b:44:62:7e:ab:45:a2:3a:f7:cd:33:a6:6a:34:
ac:1a:77:ed:f2:42:f4:e3:15:62:e9:32:29:05:d6:
c8:8e:1b:bf:64:74:72:94:f7:ad:a1:ad:82:4d:49:
82:6a:fa:3b:5c:4f:4d:5d:08:f5:b3:4d:a1:a1:a7:
b7:56:77:0c:fa:15:43:b0:59:ae:d9:8d:50:ef:d4:
ae:f6:32:a6:ef:b0:ca:5b:8a:4d:69:eb:ad:37:37:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EC:F3:09:49:9C:AA:2A:F4:F6:92:03:33:E4:37:D9:34:12:C4:D0
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/MezzCUmcqir09pIDM-Q32TQSxNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.156.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c0:7a:14:6a:4b:ac:23:2f:0f:90:41:a8:07:54:7d:4d:0b:
55:6a:3b:f2:ad:be:bf:ce:52:d7:35:bf:fa:09:39:d0:47:16:
6b:fc:c9:12:ee:b3:c4:f7:7e:3a:26:8e:d4:8c:f4:83:02:58:
b4:e3:1a:fd:fe:c9:2d:70:2b:0a:0d:6a:71:20:3a:c3:b9:8b:
21:02:99:12:14:85:76:43:4f:b5:14:ed:34:8f:a7:c4:f0:91:
88:97:45:1a:e0:45:7a:0e:bd:2c:d0:97:93:eb:97:84:d8:a1:
4a:6c:19:a5:06:d2:d1:f0:30:86:d0:d3:cb:28:f6:6b:ef:57:
2c:d9:d1:bf:05:38:e7:25:22:c3:97:37:d5:2e:b7:d0:1e:8c:
f7:5a:c5:d1:81:87:89:23:3d:9b:da:0e:97:39:54:d0:f7:b2:
8b:49:87:22:02:b7:ff:68:d9:70:77:9f:7d:56:f2:75:54:0a:
e3:fc:c4:b1:da:b0:e0:89:ef:4f:0e:71:cb:01:5d:87:a2:bc:
0f:4a:73:7d:ac:07:50:36:af:6d:1a:ea:89:4e:83:cb:ba:8b:
75:ea:df:a0:c3:5a:14:81:24:5b:58:b7:50:2d:7e:78:ff:de:
c3:b7:cd:7b:3c:ab:73:be:67:cd:62:fb:c3:ab:42:9a:b5:38:
36:5e:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:04:16 2026 by rpki-client