Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/M9b4OFhdBcloRT9CTkDgiDPo_xg.roa
File: M9b4OFhdBcloRT9CTkDgiDPo_xg.roa (raw, json)
Hash identifier: UD8QBLRere+zeS3eYPqWAJhgq/bNYUbcVCMckM22MZw=
Subject key identifier: 33:D6:F8:38:58:5D:05:C9:68:45:3F:42:4E:40:E0:88:33:E8:FF:18
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 01A1419AB1099113C5B50FFD8C1D875D9773
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/M9b4OFhdBcloRT9CTkDgiDPo_xg.roa
Signing time: Thu 15 Oct 2026 22:06:59 +0000
ROA not before: Thu 15 Oct 2026 22:06:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39521
IP address blocks: 5.22.204.0/22 maxlen: 22
45.10.16.0/23 maxlen: 24
45.10.16.0/24 maxlen: 24
45.10.17.0/24 maxlen: 24
45.10.18.0/24 maxlen: 24
45.88.5.0/24 maxlen: 24
45.88.6.0/24 maxlen: 24
45.88.7.0/24 maxlen: 24
45.95.40.0/24 maxlen: 24
45.95.41.0/24 maxlen: 24
45.130.100.0/22 maxlen: 22
83.229.34.0/24 maxlen: 24
95.178.107.0/24 maxlen: 24
185.144.56.0/22 maxlen: 24
188.191.49.0/24 maxlen: 24
188.191.50.0/24 maxlen: 24
188.191.51.0/24 maxlen: 24
217.194.153.0/24 maxlen: 24
2a05:e4c0::/32 maxlen: 32
2a05:e4c1::/32 maxlen: 48
2a05:e4c7::/36 maxlen: 36
2a07:3bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:9a:b1:09:91:13:c5:b5:0f:fd:8c:1d:87:5d:97:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Oct 15 22:06:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33d6f838585d05c968453f424e40e08833e8ff18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:94:97:48:49:fe:c3:de:de:e6:7f:9c:8b:7f:
05:0e:1c:e2:f4:98:ce:46:1c:79:71:98:31:06:fe:
36:07:61:62:f7:05:6d:be:c4:48:ba:19:b6:90:ca:
7c:1d:0f:31:9e:a3:46:2d:f5:b8:06:6e:9f:13:a5:
f7:c4:1e:61:f7:7a:11:02:06:4b:d4:bf:38:35:8b:
62:bf:d6:7b:32:cb:b3:c0:17:de:ba:26:0c:e2:cd:
86:ce:22:d0:e2:99:f1:87:ac:d9:56:b6:f5:0f:b2:
75:5a:6e:df:2e:9b:35:4c:20:40:44:57:e1:f5:ba:
c1:8c:26:47:e8:b4:43:91:77:a9:6c:89:48:23:8e:
fb:35:e1:ad:eb:50:70:65:ab:ec:8d:78:8f:47:5f:
85:d5:be:49:ad:b7:3c:32:92:5e:a0:85:76:4c:76:
29:a0:3f:25:9f:51:b3:fa:46:bc:76:de:15:d1:7f:
93:f2:66:f2:cd:09:1c:b7:ac:12:01:04:c3:ab:12:
f4:af:59:ed:19:b8:14:c9:f1:8a:26:6a:f5:13:09:
f0:64:7c:77:4b:eb:a9:d1:39:20:9d:93:f2:8b:37:
c0:2f:70:6d:92:c5:b6:9a:28:b8:b4:e4:1c:44:79:
f9:c5:37:97:4a:72:da:5f:3a:07:3f:26:a8:23:83:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D6:F8:38:58:5D:05:C9:68:45:3F:42:4E:40:E0:88:33:E8:FF:18
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/M9b4OFhdBcloRT9CTkDgiDPo_xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.204.0/22
45.10.16.0-45.10.18.255
45.88.5.0-45.88.7.255
45.95.40.0/23
45.130.100.0/22
83.229.34.0/24
95.178.107.0/24
185.144.56.0/22
188.191.49.0-188.191.51.255
217.194.153.0/24
IPv6:
2a05:e4c0::/31
2a05:e4c7::/36
2a07:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
38:3c:53:15:b2:f8:01:94:22:ee:d1:db:37:e5:74:8a:7f:b4:
42:4b:be:3b:e5:e0:f5:0a:26:c6:5b:9d:50:07:41:c7:a3:b3:
ac:01:cd:68:58:6e:5a:dd:3d:9f:6c:80:0d:68:f9:9f:4b:3f:
06:6c:40:74:40:ca:3c:af:03:60:c3:51:8c:e6:2f:35:85:46:
73:d1:ee:0c:d2:12:14:7f:ec:59:5b:f7:8e:68:a5:f4:b8:70:
65:ae:4f:75:67:cc:b9:69:19:22:84:d3:0a:af:54:44:0d:ad:
00:2f:19:8e:f7:f5:00:17:16:ce:20:a4:74:12:1c:8a:ce:8c:
37:b9:de:8a:1e:f7:4b:39:26:6a:0f:78:ac:48:0f:56:19:19:
ee:a2:a5:a2:15:03:44:dc:c1:6b:5d:63:d5:7a:6b:4e:fc:b8:
20:a0:13:f2:8b:d2:d1:d7:44:d6:85:34:17:fd:3b:07:05:eb:
94:de:fb:08:9b:f1:f2:e4:11:6a:31:89:d8:79:a3:8b:3a:32:
ce:28:20:e0:c1:95:55:6b:7c:ba:6f:43:91:56:81:f3:3b:b0:
1b:2d:a4:15:84:fa:67:1a:cf:40:40:24:78:3e:c6:33:6e:4f:
f5:ee:e8:52:0f:f7:f2:30:85:4f:93:c5:62:29:86:62:95:82:
f9:f5:9d:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 24 11:06:24 2026 by rpki-client