Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/m0RG4WTgfPf8LkZ-OCwh5iipTXA.roa
File: m0RG4WTgfPf8LkZ-OCwh5iipTXA.roa (raw, json)
Hash identifier: HiYhmPimw5zrHpf0G1f9pTllF+a4yQoZVKqt8DYNJq8=
Subject key identifier: 9B:44:46:E1:64:E0:7C:F7:FC:2E:46:7E:38:2C:21:E6:28:A9:4D:70
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019CF78ABAC8D7A7720F72D85642D5C67832
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/m0RG4WTgfPf8LkZ-OCwh5iipTXA.roa
Signing time: Mon 16 Mar 2026 16:46:29 +0000
ROA not before: Mon 16 Mar 2026 16:46:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199527
IP address blocks: 80.81.39.0/24 maxlen: 24
83.223.157.0/24 maxlen: 24
85.254.12.0/24 maxlen: 24
85.254.13.0/24 maxlen: 24
85.254.15.0/24 maxlen: 24
85.254.63.0/24 maxlen: 24
91.190.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:8a:ba:c8:d7:a7:72:0f:72:d8:56:42:d5:c6:78:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 16 16:46:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b4446e164e07cf7fc2e467e382c21e628a94d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:55:79:27:1d:cc:36:3f:64:68:60:d1:bb:
96:2d:7b:59:65:9d:e4:97:a7:72:f9:c4:38:ce:27:
a9:e5:50:4f:ac:e5:56:f6:c7:d5:a0:46:c8:5c:a1:
2b:b4:5c:5f:5e:46:dc:9e:89:78:e5:e5:f5:52:77:
3b:53:0b:59:e3:66:53:67:e7:d5:45:eb:5d:5b:c5:
1e:e2:a5:89:20:2f:1e:46:99:8b:ae:a1:56:27:f1:
4a:e9:5c:f4:9c:bf:a0:5b:ba:d2:7f:76:c3:d0:cf:
14:bc:2b:8f:3e:e8:e3:5d:4f:5d:57:2b:df:0b:e8:
72:73:50:a2:1a:d8:dc:1b:a6:74:4c:4b:3f:be:15:
df:84:cc:08:74:9f:f4:41:8d:3a:83:7a:ae:94:c4:
da:1f:c5:50:73:02:cb:84:53:ef:ba:e6:a6:2d:f7:
4e:f6:ba:eb:9b:30:87:a6:41:d3:48:25:91:a5:7b:
df:02:be:8f:0e:47:2b:a0:dd:f9:f9:1f:c5:0a:fd:
9a:a1:71:57:44:da:ac:2a:33:38:83:ca:a5:d5:45:
e0:1a:d0:34:2e:a7:1b:dd:82:44:c7:aa:00:1a:9f:
ee:9b:c2:12:93:79:2a:e7:5b:7e:33:3d:74:de:ad:
88:02:16:8c:6e:35:5c:fc:3a:ef:eb:d6:08:43:9f:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:44:46:E1:64:E0:7C:F7:FC:2E:46:7E:38:2C:21:E6:28:A9:4D:70
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/m0RG4WTgfPf8LkZ-OCwh5iipTXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.39.0/24
83.223.157.0/24
85.254.12.0/23
85.254.15.0/24
85.254.63.0/24
91.190.61.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:31:81:92:68:81:29:e4:8c:1d:22:cf:0e:eb:3c:74:ad:66:
cc:4c:67:4d:bf:86:b8:26:b5:57:e6:18:e9:c9:e2:27:a3:6a:
4c:57:2b:be:78:a0:12:67:02:1c:02:0c:c0:63:88:8d:1c:89:
b6:00:df:94:8f:f9:72:4f:7e:37:ea:ed:a7:a3:e9:9d:a4:6d:
f2:5e:28:5d:0f:34:eb:7e:7c:ea:db:03:63:01:c8:47:9a:2e:
55:59:c4:1a:b6:4c:0e:44:a1:b4:3a:c8:3c:e3:9e:21:fe:46:
c2:39:63:20:b2:f8:c9:27:f2:aa:bb:83:85:ca:14:90:a1:de:
67:4e:66:8e:9d:ac:cb:65:94:aa:ab:81:59:06:c0:3b:d6:cc:
07:59:6b:6f:91:13:c4:1a:54:bb:5d:73:14:32:73:65:8c:12:
27:f0:fb:ca:d8:d3:dc:e9:dc:eb:54:69:6f:f8:e2:07:49:31:
0a:f0:38:a6:5f:c2:23:5c:4b:bb:c8:3c:48:80:47:c7:47:db:
28:7f:7c:02:cf:ac:eb:4e:f2:97:21:9d:99:24:2d:2e:8d:a7:
55:db:3a:a8:f5:ee:eb:30:22:dd:a2:f9:68:ed:df:07:70:7d:
23:a3:1a:08:6f:91:7e:09:9c:c5:4e:0e:07:55:6f:b8:de:f6:
46:31:7d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:51:17 2026 by rpki-client