Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/M26BQVuNMK835dm83OV-Sr2CkQs.roa
File: M26BQVuNMK835dm83OV-Sr2CkQs.roa (raw, json)
Hash identifier: 9jTxXoCPeLHjBT+DdTQIMj47gOx4+kmiPGKh+dU2Lpc=
Subject key identifier: 33:6E:81:41:5B:8D:30:AF:37:E5:D9:BC:DC:E5:7E:4A:BD:82:91:0B
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 01A0B4ACA1104C2961D73F67B59E8F5C860E
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/M26BQVuNMK835dm83OV-Sr2CkQs.roa
Signing time: Fri 18 Sep 2026 13:20:07 +0000
ROA not before: Fri 18 Sep 2026 13:20:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 979
IP address blocks: 64.83.0.0/18 maxlen: 24
64.90.0.0/19 maxlen: 24
64.178.96.0/19 maxlen: 24
189.24.64.0/18 maxlen: 24
189.105.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:ac:a1:10:4c:29:61:d7:3f:67:b5:9e:8f:5c:86:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Sep 18 13:20:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=336e81415b8d30af37e5d9bcdce57e4abd82910b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:77:03:a7:21:33:57:d5:e3:95:7c:7d:21:
b8:1e:aa:bb:4e:2a:5f:76:6f:08:d7:32:03:36:cc:
6e:39:d3:b3:d5:80:06:bd:3d:af:49:4e:1a:44:f1:
23:f6:08:00:17:05:53:62:84:71:4b:91:32:9a:fa:
4b:a6:35:39:fe:0b:69:1d:1a:26:ec:2f:f5:1b:34:
2d:42:48:c9:2c:61:7c:2f:4a:cf:81:f9:ea:77:4a:
01:1e:7d:7a:cc:d4:db:bd:ba:38:e5:48:f3:97:30:
3c:19:4d:13:77:1b:5d:bf:82:ab:ff:50:ed:95:08:
10:88:39:e8:12:d5:94:bf:d4:7a:db:fb:2f:02:b4:
32:c2:29:49:74:91:75:bc:41:4a:71:16:8b:70:b0:
59:7b:e5:a4:33:cb:09:48:9c:07:fe:33:06:0d:26:
0c:11:ac:47:a7:f5:fb:3b:93:9e:71:d6:90:99:f3:
a4:b7:4e:f1:e5:28:95:59:0f:d4:eb:89:05:73:35:
82:40:ee:0d:72:59:c5:34:b2:15:a5:30:40:14:30:
32:c4:ab:c0:5f:71:f9:a3:d8:68:8b:c3:b0:2f:48:
7e:98:29:0f:47:68:cd:e9:87:d8:ef:01:e4:ae:0c:
9b:9c:37:1a:d2:ed:09:c1:0c:de:30:ac:b6:72:01:
d8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6E:81:41:5B:8D:30:AF:37:E5:D9:BC:DC:E5:7E:4A:BD:82:91:0B
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/M26BQVuNMK835dm83OV-Sr2CkQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.83.0.0/18
64.90.0.0/19
64.178.96.0/19
189.24.64.0/18
189.105.64.0/18
Signature Algorithm: sha256WithRSAEncryption
05:3a:ce:af:68:2f:2d:1f:d0:84:31:ac:3b:88:31:b8:44:d3:
fc:6b:f9:8e:fd:bb:68:b0:4e:05:e3:ca:1d:45:db:b2:9e:fe:
5b:03:a9:5a:d4:b1:5d:c3:fb:c2:6b:51:b6:31:be:5e:9e:a5:
0c:eb:4c:ec:8e:63:23:f5:ab:8f:f9:42:f7:7b:ce:a6:58:08:
75:06:f8:24:db:08:e7:91:b4:ea:7a:f2:ac:df:f2:bd:37:88:
63:27:59:df:29:c2:d0:18:9c:a1:35:9c:08:a7:d7:5c:f6:eb:
d1:c5:45:58:86:03:ce:78:ee:0a:74:91:3d:11:9c:63:68:70:
1c:93:24:c9:5e:69:44:51:47:d3:50:63:35:12:06:bb:0f:88:
4a:9e:59:93:7b:32:e1:34:73:d8:d4:4e:bc:cb:bc:c6:3b:45:
9c:28:f9:ab:0d:75:33:bf:7b:65:30:15:5b:d1:ed:7f:77:26:
a9:b1:00:83:4b:8c:17:e8:0c:b6:f2:14:54:d3:ae:f0:5a:15:
c0:92:4f:c8:af:72:99:06:46:ef:b4:62:46:e0:8b:b6:8e:54:
81:16:ee:65:12:60:ff:d9:67:c9:8c:18:5e:6c:49:6b:1b:65:
1c:6f:c1:19:71:98:eb:dd:58:d1:6a:56:8c:d9:f2:61:cc:d6:
45:e0:71:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:01:19 2026 by rpki-client