Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/M9DBstFW3t3ahp_OW2aqADxQQxM.roa
File: M9DBstFW3t3ahp_OW2aqADxQQxM.roa (raw, json)
Hash identifier: nM+RdUPyHhBHKvuAgEm7021Y5qI0kQHhTkOZwKeG7k4=
Subject key identifier: 33:D0:C1:B2:D1:56:DE:DD:DA:86:9F:CE:5B:66:AA:00:3C:50:43:13
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0807845E0E213BC070BED2F23435D20AD
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/M9DBstFW3t3ahp_OW2aqADxQQxM.roa
Signing time: Tue 08 Sep 2026 10:02:40 +0000
ROA not before: Tue 08 Sep 2026 10:02:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 45.150.181.0/24 maxlen: 24
45.150.182.0/24 maxlen: 24
45.150.183.0/24 maxlen: 24
84.51.232.0/24 maxlen: 24
92.51.234.0/24 maxlen: 24
92.51.235.0/24 maxlen: 24
92.51.255.0/24 maxlen: 24
103.210.196.0/24 maxlen: 24
107.150.166.0/24 maxlen: 24
134.49.77.0/24 maxlen: 24
134.49.90.0/24 maxlen: 24
134.49.93.0/24 maxlen: 24
136.176.169.0/24 maxlen: 24
145.63.173.0/24 maxlen: 24
145.63.176.0/24 maxlen: 24
145.63.179.0/24 maxlen: 24
147.90.91.0/24 maxlen: 24
147.90.119.0/24 maxlen: 24
147.90.126.0/24 maxlen: 24
147.90.185.0/24 maxlen: 24
147.90.201.0/24 maxlen: 24
155.2.180.0/24 maxlen: 24
155.2.181.0/24 maxlen: 24
158.173.184.0/24 maxlen: 24
158.173.186.0/24 maxlen: 24
158.173.201.0/24 maxlen: 24
158.173.208.0/24 maxlen: 24
173.209.6.0/24 maxlen: 24
185.161.111.0/24 maxlen: 24
192.140.220.0/24 maxlen: 24
192.140.221.0/24 maxlen: 24
203.188.165.0/24 maxlen: 24
203.188.181.0/24 maxlen: 24
213.254.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:78:45:e0:e2:13:bc:07:0b:ed:2f:23:43:5d:20:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 8 10:02:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33d0c1b2d156deddda869fce5b66aa003c504313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:e5:a0:9c:86:f6:a3:40:86:d5:d1:55:8b:
34:9b:fe:58:47:45:01:5c:ae:e5:de:15:9a:80:ac:
e5:db:35:8f:d0:4c:74:6f:b3:5a:87:79:07:cb:77:
8c:d1:8a:b0:ea:53:a8:a7:de:d4:34:32:de:11:07:
c5:ef:b8:24:30:7d:dd:9a:f1:58:24:89:c8:d1:52:
61:3d:f6:bf:fa:b3:c2:81:66:f6:c6:c8:33:12:21:
6c:1d:f7:75:dc:93:5f:7d:a2:1b:8d:09:f1:4d:7c:
d2:6f:dc:74:ea:75:75:8b:99:cc:38:c6:f6:24:41:
95:76:11:d5:a4:c5:4e:e3:8f:5e:ce:ce:5d:dc:71:
90:ad:01:02:60:3a:48:0b:f8:1c:bb:87:ae:14:f1:
2c:26:fa:4e:04:c8:52:c7:da:10:75:96:83:1a:10:
df:11:6f:d4:65:55:8f:53:0c:ef:06:4d:4e:ce:4d:
3e:b2:ad:d0:19:34:4e:f7:d2:00:93:dd:68:0b:ab:
86:8b:8d:a0:5c:48:2b:78:f2:9b:08:a7:f9:de:9f:
a2:de:b7:ab:43:e4:9f:25:ca:cc:76:13:47:fc:86:
fc:49:8f:1f:2b:63:97:45:75:73:43:b3:47:1d:56:
de:ba:17:6f:69:9f:e6:80:86:a4:9c:d7:8c:95:6f:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D0:C1:B2:D1:56:DE:DD:DA:86:9F:CE:5B:66:AA:00:3C:50:43:13
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/M9DBstFW3t3ahp_OW2aqADxQQxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.181.0-45.150.183.255
84.51.232.0/24
92.51.234.0/23
92.51.255.0/24
103.210.196.0/24
107.150.166.0/24
134.49.77.0/24
134.49.90.0/24
134.49.93.0/24
136.176.169.0/24
145.63.173.0/24
145.63.176.0/24
145.63.179.0/24
147.90.91.0/24
147.90.119.0/24
147.90.126.0/24
147.90.185.0/24
147.90.201.0/24
155.2.180.0/23
158.173.184.0/24
158.173.186.0/24
158.173.201.0/24
158.173.208.0/24
173.209.6.0/24
185.161.111.0/24
192.140.220.0/23
203.188.165.0/24
203.188.181.0/24
213.254.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:6b:4a:9f:c8:27:bc:9b:db:db:85:01:b3:51:91:24:6f:61:
50:45:ff:0d:0b:83:14:b2:75:ca:78:4d:cf:29:2f:1a:4d:8f:
34:7e:59:49:10:04:ca:13:89:b7:00:e7:5f:73:2f:bd:fa:0f:
68:aa:66:bd:8d:8a:eb:c5:8b:32:45:85:07:3e:ca:e3:00:a6:
9f:c5:1e:77:73:a2:db:66:fe:f3:7f:39:fc:ca:95:89:e3:1d:
2d:03:2e:d6:70:40:de:9b:3c:0c:b6:7a:24:04:6d:6e:65:3b:
6f:fc:89:02:4f:82:3a:81:d7:ec:1b:12:8a:f6:87:bc:8c:ec:
f2:19:c8:a7:65:2f:87:ed:43:c6:bd:ab:e5:b6:69:48:5f:72:
38:e8:42:7d:5d:46:50:85:70:be:e7:66:1a:c9:75:5d:a9:ad:
37:04:a7:03:fb:4c:ca:2b:37:e1:c1:95:f8:5d:7c:24:2c:f8:
6f:96:00:ff:1b:70:e4:a6:19:07:10:94:7d:88:b8:d9:69:2d:
14:60:be:74:25:30:56:ed:f3:09:c6:a5:59:18:f7:dc:54:d9:
47:93:02:80:f1:80:cd:f6:e8:a8:21:e0:37:af:3a:2c:0f:d6:
96:4f:e7:67:8a:57:c9:d8:e2:cc:a7:c9:89:8d:9e:b9:78:09:
13:83:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:13:53 2026 by rpki-client