Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/M2uxK4q47x4eUk5x2CDI5p_qHlg.roa
File: M2uxK4q47x4eUk5x2CDI5p_qHlg.roa (raw, json)
Hash identifier: 5pa5GIOwyhp3y4tbcKUsTX1710EyGkZrrz75hvZiUvA=
Subject key identifier: 33:6B:B1:2B:8A:B8:EF:1E:1E:52:4E:71:D8:20:C8:E6:9F:EA:1E:58
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 01A15F35CCD0811E28558005E609206A8539
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/M2uxK4q47x4eUk5x2CDI5p_qHlg.roa
Signing time: Wed 21 Oct 2026 16:05:23 +0000
ROA not before: Wed 21 Oct 2026 16:05:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 91.108.149.0/24 maxlen: 24
185.42.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:35:cc:d0:81:1e:28:55:80:05:e6:09:20:6a:85:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Oct 21 16:05:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=336bb12b8ab8ef1e1e524e71d820c8e69fea1e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3e:18:a4:b9:c9:8a:d5:48:29:0c:f0:9a:00:
e2:0b:9a:79:42:c2:dd:c4:a7:e2:a8:16:c8:b4:46:
3b:ca:aa:73:df:0d:9d:47:d4:f5:34:29:90:d2:b6:
b7:47:1a:e5:f8:7c:54:38:89:48:64:92:ae:c9:b2:
b1:d0:b1:bc:a2:4e:14:22:c5:36:31:ba:7e:c3:12:
b6:bd:4b:3f:72:85:9c:59:57:93:82:9c:c2:b2:5d:
f6:44:c5:cc:96:75:f6:f2:08:85:61:94:f8:d4:36:
9e:6f:5a:72:1b:56:bc:51:55:1e:99:2d:a8:74:01:
b4:a0:95:c9:e5:3b:c1:6c:1f:07:6e:57:ba:37:c5:
d9:4f:e9:39:22:38:cd:ee:e9:41:1c:82:77:bd:58:
6e:19:30:ae:fa:d7:8e:83:37:d4:44:b0:f1:86:d6:
4a:fb:45:8e:95:5f:6c:62:f1:96:be:7f:ee:5a:0e:
54:4e:e0:11:a8:ea:74:2f:c8:43:51:50:66:25:0e:
3b:f8:53:a9:95:95:bc:24:af:78:08:cd:b6:0e:bf:
40:15:56:7a:ed:5a:54:de:a6:a2:81:c0:3b:d1:a5:
cb:a5:5b:f9:41:4e:d0:32:f2:db:6c:3c:20:05:fe:
73:dd:5a:21:8d:56:14:0a:a0:8f:81:8c:f2:84:9d:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6B:B1:2B:8A:B8:EF:1E:1E:52:4E:71:D8:20:C8:E6:9F:EA:1E:58
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/M2uxK4q47x4eUk5x2CDI5p_qHlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.149.0/24
185.42.213.0/24
Signature Algorithm: sha256WithRSAEncryption
33:eb:c9:81:2a:2d:f6:00:9f:f8:b2:21:81:6e:91:a4:cc:81:
0d:ac:42:9c:96:c5:1c:a7:6a:f5:44:91:5b:15:f9:3e:e1:44:
21:34:29:49:1e:94:01:1a:12:ad:88:51:b7:4f:c1:5f:e7:11:
8e:5c:92:57:36:ed:5c:87:39:ad:3f:c6:cd:76:f4:d7:65:fc:
d3:0f:11:d8:1a:45:01:35:c8:58:52:bb:c8:66:87:e9:e4:94:
07:1d:ff:4b:e6:24:83:50:12:a9:91:66:d0:1b:07:d5:da:d9:
50:63:b6:64:e9:a5:3e:7e:32:9f:93:fb:88:56:9b:13:91:1d:
1b:f9:e6:c6:92:3f:9a:94:c9:40:72:09:37:18:5f:78:b1:5c:
b9:2d:d6:87:34:38:4e:51:7d:34:cf:56:49:7f:34:a4:af:b4:
4e:5c:08:a8:68:04:61:6a:cf:6d:f6:10:20:52:08:43:42:08:
39:6a:c6:d7:a0:65:46:e6:fb:7c:99:ba:4f:cf:95:be:8d:9c:
7d:4e:c0:68:af:ac:c1:ea:00:3f:ec:06:e8:9b:ec:bf:14:13:
b4:4e:fd:2c:25:4d:4d:3a:19:ee:20:29:55:88:63:ec:2a:d4:
72:72:32:96:f3:f7:fb:dc:e7:95:51:78:5f:0f:21:a4:4e:b1:
c9:97:64:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:00:19 2026 by rpki-client