Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/M4N0jj6w3UQFZNaC3qE9M_Jrw8w.roa
File: M4N0jj6w3UQFZNaC3qE9M_Jrw8w.roa (raw, json)
Hash identifier: 68EPrkKRbnmdobTDXuQjz6PVloe3KPvn9v4KewR5N04=
Subject key identifier: 33:83:74:8E:3E:B0:DD:44:05:64:D6:82:DE:A1:3D:33:F2:6B:C3:CC
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A0F402816A719928E32814D673EA6C0CF5
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/M4N0jj6w3UQFZNaC3qE9M_Jrw8w.roa
Signing time: Wed 30 Sep 2026 20:29:59 +0000
ROA not before: Wed 30 Sep 2026 20:29:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.144.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:02:81:6a:71:99:28:e3:28:14:d6:73:ea:6c:0c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 30 20:29:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3383748e3eb0dd440564d682dea13d33f26bc3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:d4:dd:c0:f4:c4:1c:a5:08:85:e0:3b:67:
ab:a7:8a:da:b3:83:21:27:88:90:8b:cf:37:9c:a5:
80:1f:5a:51:00:7e:50:3d:0b:77:7e:bc:bb:4b:2c:
59:46:49:25:1b:23:7f:18:7a:3a:e2:f2:b0:1e:9c:
66:ab:81:86:7e:f9:90:fe:0d:b0:37:de:ce:72:17:
04:d4:be:90:29:d3:bd:3f:1c:98:7c:0c:96:70:25:
71:34:8d:dd:fd:9b:bc:e7:06:0e:92:bb:71:a7:9a:
c9:c7:0e:dd:69:b0:1a:12:01:be:92:65:52:0b:a5:
40:d1:3a:2f:30:6a:46:c1:e7:54:5c:1e:97:3d:43:
27:1f:2b:fe:c5:91:35:69:3f:22:dc:cf:6e:d4:59:
3d:f8:03:b7:49:bd:44:8b:f5:b4:48:9a:30:b7:20:
75:f9:96:3c:90:2b:64:a5:1f:00:e3:6a:d9:9f:54:
cc:2d:a7:b7:4e:53:56:3c:2e:76:db:3c:ae:72:d0:
cb:a7:3f:11:f8:85:77:7b:aa:fc:17:d2:de:20:d6:
6c:e1:9c:70:8a:d7:b1:b0:5a:b8:03:ab:05:09:a8:
b8:f0:05:d7:ba:a3:c5:60:13:4f:51:c6:31:60:02:
a7:cb:18:14:fe:a4:07:27:0d:75:32:fc:aa:95:46:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:83:74:8E:3E:B0:DD:44:05:64:D6:82:DE:A1:3D:33:F2:6B:C3:CC
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/M4N0jj6w3UQFZNaC3qE9M_Jrw8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ce:30:16:a3:7e:56:db:67:65:1c:61:c7:d9:11:a2:00:03:
ab:c8:82:95:8d:14:d9:c0:8e:ba:57:7d:cd:a4:a8:78:e1:10:
ef:4d:ff:f8:d2:55:07:2e:75:1c:2a:ad:0f:33:7e:0b:7b:20:
63:12:d7:d9:cb:d3:f4:0b:89:66:54:95:9c:10:32:fd:3f:b3:
4c:c3:bd:13:b4:db:4d:2e:d9:6b:88:dc:27:2f:cc:9d:72:43:
4a:23:a6:2b:39:61:57:fa:89:d6:be:79:43:23:b7:e4:86:86:
b7:5c:42:69:31:d5:e8:9f:27:f5:af:02:c2:47:eb:d6:17:49:
ea:ea:a7:f0:38:45:aa:ea:56:80:b0:4c:89:be:77:ff:c1:ac:
17:9d:02:ff:4f:a7:ab:09:e9:01:d8:d0:d8:75:f1:e0:0f:70:
a2:4f:5b:1d:ba:8a:2c:86:af:3e:ab:7f:c2:16:18:d1:02:5f:
91:d1:24:f7:4d:c5:c6:a0:a0:0f:0a:06:dc:f1:d8:43:46:4e:
66:fd:31:75:6a:48:96:80:30:3a:e4:b6:8c:9d:21:7c:f2:bf:
82:35:1e:2f:0e:a0:98:98:9a:a5:29:69:66:7e:a1:78:86:9a:
22:2c:bf:9f:2d:9e:b6:b0:22:e6:4a:5e:8a:11:67:df:74:2f:
9b:b9:3b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 17:12:12 2026 by rpki-client