Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/M-KPLxG9kRua3jww0tVvkGPTnsU.roa
File: M-KPLxG9kRua3jww0tVvkGPTnsU.roa (raw, json)
Hash identifier: ieuTmf07XkxLPO0zu/suKGOPUrNWciqHfBXvEgPva2w=
Subject key identifier: 33:E2:8F:2F:11:BD:91:1B:9A:DE:3C:30:D2:D5:6F:90:63:D3:9E:C5
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01A1C4B8A148DB138C3DE642A8CE74FA96F8
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/M-KPLxG9kRua3jww0tVvkGPTnsU.roa
Signing time: Tue 10 Nov 2026 09:09:56 +0000
ROA not before: Tue 10 Nov 2026 09:09:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 141.226.243.0/24 maxlen: 24
213.137.82.0/24 maxlen: 24
213.137.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:b8:a1:48:db:13:8c:3d:e6:42:a8:ce:74:fa:96:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Nov 10 09:09:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33e28f2f11bd911b9ade3c30d2d56f9063d39ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:75:47:ba:35:a7:bf:44:cf:1a:5b:21:44:
f2:f8:7f:0e:2b:a8:7f:85:f6:7f:84:02:ad:ae:59:
a1:a4:ad:27:3d:68:6a:00:18:dc:b0:3d:4b:8f:38:
b7:f9:08:81:f0:a0:23:65:3e:4c:33:fe:e6:4c:43:
63:13:cf:57:3a:4f:40:67:5c:47:00:98:92:ea:cc:
c3:ec:0e:99:75:4c:57:f3:78:0f:23:c6:9d:dc:8c:
80:15:17:8d:38:da:f2:7f:0e:fb:5c:83:73:e3:32:
c2:6f:f6:8b:61:ef:b9:67:f2:ed:c2:aa:5d:28:bd:
b1:1b:6b:e2:bf:bf:03:95:da:ec:4a:62:37:65:99:
aa:9a:ab:e9:0f:42:9f:dd:0f:3e:34:80:4c:76:8b:
91:e7:83:23:8d:4e:a8:ac:db:a3:9e:89:38:21:f6:
a2:2c:8b:6d:44:f9:df:63:3f:3e:69:04:6e:4c:39:
8b:d8:a6:22:da:a3:0c:04:7c:84:a6:cd:81:92:aa:
4e:80:1b:96:aa:80:7e:b6:e2:de:ed:b6:40:e4:c0:
ce:9d:f5:32:8e:99:e7:d3:1c:34:5b:0d:9e:82:a8:
2b:7c:ff:98:ac:87:0b:bb:45:45:41:ed:27:8f:d6:
83:e1:86:13:97:1e:6f:9e:f2:0a:c7:e1:3a:d8:d0:
12:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E2:8F:2F:11:BD:91:1B:9A:DE:3C:30:D2:D5:6F:90:63:D3:9E:C5
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/M-KPLxG9kRua3jww0tVvkGPTnsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.243.0/24
213.137.82.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:f4:aa:0e:0c:f4:08:7a:93:cf:02:52:a7:4d:eb:4c:01:6b:
2d:b5:63:6f:b4:d9:32:86:40:30:bf:b9:89:c9:6d:e0:4c:f9:
7c:52:1d:7c:ea:9d:7e:41:6e:57:00:c7:42:ec:3f:a6:1c:31:
7b:d7:82:37:e0:8e:31:12:bd:c7:7c:d1:ea:3d:62:c7:6d:2d:
1a:6a:37:c8:cf:d5:d4:df:47:fd:77:7f:79:fa:89:d9:1e:59:
8e:24:d2:86:02:95:a6:92:d0:45:b2:a3:01:27:96:17:38:46:
bd:eb:4c:99:37:82:55:50:9f:80:21:80:d7:43:28:2c:b3:bf:
22:8e:f0:41:7d:69:7c:27:5f:7a:46:cd:3f:20:c1:f7:fa:64:
2e:2e:7f:87:cb:d1:7f:b3:d4:53:2e:75:ea:d9:31:83:b0:d6:
d4:d2:94:2e:63:bb:2e:af:0d:d0:ea:6a:4d:bf:4e:4f:e8:f0:
27:fd:fd:33:f0:c9:16:53:8d:2e:fd:12:ba:a4:c7:28:2a:af:
92:53:6b:aa:84:aa:0c:11:04:19:6a:89:36:ab:de:07:42:ac:
77:7e:d0:ba:72:f7:86:10:2d:e3:25:83:38:db:4e:a8:c2:60:
be:46:c9:1c:db:3a:9f:f1:8f:9e:ac:0b:94:15:ca:9b:d8:45:
61:02:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:27:49 2026 by rpki-client