Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/M7PDBeLeJmZmrWLLCIOo-cFokeg.roa
File: M7PDBeLeJmZmrWLLCIOo-cFokeg.roa (raw, json)
Hash identifier: g807Ya94FMzlXjRCEKZdpEdflYVmJb+BcNjnyvJbTKI=
Subject key identifier: 33:B3:C3:05:E2:DE:26:66:66:AD:62:CB:08:83:A8:F9:C1:68:91:E8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01A111301575886A6CFE3B342047C686325D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/M7PDBeLeJmZmrWLLCIOo-cFokeg.roa
Signing time: Tue 06 Oct 2026 12:28:46 +0000
ROA not before: Tue 06 Oct 2026 12:28:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218493
IP address blocks: 95.47.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:30:15:75:88:6a:6c:fe:3b:34:20:47:c6:86:32:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 6 12:28:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33b3c305e2de266666ad62cb0883a8f9c16891e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:c1:78:a8:ee:b0:d3:67:59:d5:8f:d3:e6:
78:a6:a5:90:e3:90:36:ac:a2:07:86:85:47:cf:da:
b9:a7:d5:58:f9:84:96:ff:57:0f:21:5d:c0:20:3e:
d6:84:5a:88:6d:76:01:ff:5a:bd:8a:41:15:68:59:
ae:22:cc:d9:1e:cd:f7:67:8e:e2:80:ed:bc:b7:94:
b2:82:5f:b0:99:11:6e:9f:9d:e6:ce:5d:35:49:51:
39:75:71:ff:b5:62:d2:c2:bc:01:dd:bc:c5:c9:74:
d7:0d:57:e9:bf:99:f9:5d:ff:c6:4f:0e:91:16:e0:
c8:00:87:28:c7:72:d5:d2:b9:80:67:da:99:15:8a:
60:2d:90:48:55:f8:94:ab:00:4a:48:d9:86:85:8a:
43:54:2f:b7:2e:8e:cc:08:3b:6e:15:ea:a6:30:17:
b8:2b:e2:7c:98:d1:60:91:e0:b9:7e:ad:75:e7:7e:
35:04:5c:ee:4b:5e:23:5f:05:1e:70:9e:f1:59:9b:
24:25:51:a2:e1:35:3d:81:e0:4f:e8:14:63:7b:20:
eb:99:a8:11:fb:03:6e:a0:9c:57:d4:e5:97:b7:24:
bc:d2:f4:38:81:b8:0e:fb:26:7b:49:f4:a8:33:b9:
36:e3:42:6e:dc:12:c5:78:f9:72:41:6e:ee:db:72:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B3:C3:05:E2:DE:26:66:66:AD:62:CB:08:83:A8:F9:C1:68:91:E8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/M7PDBeLeJmZmrWLLCIOo-cFokeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.245.0/24
Signature Algorithm: sha256WithRSAEncryption
03:57:6e:0d:4e:8c:e7:e6:89:33:34:65:3a:79:fd:d0:04:ac:
b7:a9:67:24:43:53:13:19:28:43:3d:ad:b0:8a:ec:00:a1:ab:
45:4e:bf:c5:f4:a6:c9:a7:57:fb:11:96:6b:67:10:8b:bc:28:
e1:66:0a:74:b1:a2:da:56:0a:5f:4a:79:48:b8:74:13:12:0e:
e4:d5:5b:0f:0a:f0:2c:e4:c1:45:56:cd:15:28:e1:a6:9d:ef:
03:7f:37:3d:33:0b:d7:54:76:c5:55:f4:cf:94:5e:cd:c3:9b:
e3:28:13:17:96:fa:91:b6:62:d2:71:ef:4c:75:15:d2:99:2b:
f5:49:d4:7f:6e:b4:96:1f:16:c1:bf:e6:7b:3f:85:f9:0e:7d:
3d:44:aa:f2:68:35:c8:88:78:3b:c0:a3:5a:fb:35:3c:3b:4c:
97:78:1d:28:ae:10:7e:fb:1d:f3:ef:37:3f:4b:49:f9:77:53:
71:62:52:73:51:cd:8b:0b:3a:2d:cb:f8:67:5c:46:ae:7a:64:
55:4c:78:9a:d9:8a:68:e0:e7:f6:bc:88:f8:ab:b1:88:a6:ad:
10:8c:7d:4b:f7:51:4f:21:4d:6d:3f:79:c7:a1:a3:fa:61:4a:
3a:9e:d3:02:53:01:51:d7:d9:17:92:66:32:73:e6:ab:21:43:
b6:4b:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:10:52 2026 by rpki-client