Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/M5ZYGH9lDFPCSRy8-s4NKUEi3C4.roa
File: M5ZYGH9lDFPCSRy8-s4NKUEi3C4.roa (raw, json)
Hash identifier: EBzDzWb4sgVmc74lbxpw3ydnj4wAHsc6f6vvDxUA8Tk=
Subject key identifier: 33:96:58:18:7F:65:0C:53:C2:49:1C:BC:FA:CE:0D:29:41:22:DC:2E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019CB957D7959BE9C976A79BCD0436148A47
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/M5ZYGH9lDFPCSRy8-s4NKUEi3C4.roa
Signing time: Wed 04 Mar 2026 14:54:27 +0000
ROA not before: Wed 04 Mar 2026 14:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211415
IP address blocks: 89.213.123.0/24 maxlen: 24
109.176.29.0/24 maxlen: 24
109.176.31.0/24 maxlen: 24
213.218.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:57:d7:95:9b:e9:c9:76:a7:9b:cd:04:36:14:8a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 4 14:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=339658187f650c53c2491cbcface0d294122dc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bb:ac:46:4a:34:21:b9:ee:c7:29:45:4f:f8:
0c:a2:1b:87:77:36:10:93:eb:94:50:f4:87:47:ab:
9b:a8:1f:9a:5c:23:28:8e:33:d9:ac:b1:1d:1a:13:
3e:ff:89:1e:40:81:f8:07:39:9b:49:de:12:b9:31:
88:44:a2:ff:58:f8:f6:3a:b5:1a:40:a5:8f:07:c0:
85:fc:62:fe:9c:cd:87:44:28:40:57:62:10:fa:1a:
c2:f9:56:91:3c:38:4c:a7:03:a8:5e:98:cf:5f:ba:
0e:03:99:b9:04:b6:06:46:2c:d2:8c:1a:83:61:12:
8e:f0:5f:32:fe:af:02:82:f2:6c:98:bb:35:3a:5b:
e2:dd:a5:d6:b6:ce:a4:04:a9:99:06:85:8c:07:52:
87:53:d4:2c:e7:c6:e0:6a:84:6d:3b:67:6a:8c:7c:
4f:93:4b:67:b6:b1:5c:14:1d:c6:a3:ac:98:96:51:
7e:2c:ea:de:f4:5d:74:9a:03:dc:7a:60:1b:77:9c:
43:3c:23:71:0b:c7:a4:ba:4a:4c:b9:80:f0:5b:22:
21:38:48:11:0d:d6:fd:5e:5b:26:17:fb:5f:3b:09:
34:db:65:a8:cc:33:03:f5:bf:d0:23:db:d3:bd:fc:
c7:ad:12:4b:54:4c:61:53:f0:00:2b:4e:51:a1:4e:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:96:58:18:7F:65:0C:53:C2:49:1C:BC:FA:CE:0D:29:41:22:DC:2E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/M5ZYGH9lDFPCSRy8-s4NKUEi3C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.123.0/24
109.176.29.0/24
109.176.31.0/24
213.218.242.0/24
Signature Algorithm: sha256WithRSAEncryption
00:fb:c2:c7:6c:4b:7b:8a:51:73:38:34:0c:6b:c1:a5:dd:52:
e2:b0:93:5c:86:49:f5:f9:3a:4f:d6:7c:5b:4e:e6:e8:ea:26:
98:7f:01:a2:a8:17:b5:5e:62:09:11:a6:92:d9:53:7b:ed:5d:
9c:2b:b9:60:fd:ef:1d:9f:78:82:d7:12:4d:84:95:00:60:93:
26:7f:83:48:e4:10:47:05:2f:b7:b8:e1:be:f2:c2:58:a0:e2:
c5:1b:21:e1:a3:1e:3b:55:13:82:ce:07:da:1d:2e:c3:3d:c1:
3f:c5:32:a9:cb:2c:ce:2c:ae:95:ab:8b:5b:93:99:25:30:d6:
f0:90:f8:c2:77:b3:4f:1a:f6:f3:83:36:0d:e2:3f:b0:99:22:
05:a4:2f:3d:b8:59:02:0b:51:c9:7a:85:ec:7c:f3:8e:75:0b:
c8:18:d1:2b:4e:5f:53:cd:f5:39:9f:04:5d:6c:0d:4b:99:97:
a0:25:42:6e:94:ed:90:93:b2:54:b4:28:1b:f3:54:0e:24:96:
ef:ff:5f:ea:08:cf:5b:3b:40:e9:fb:2f:cb:68:06:25:03:21:
40:de:6d:f2:d9:a3:1c:57:24:c8:52:71:b5:c9:92:6f:5d:f8:
b9:a1:09:5c:19:b9:73:a4:00:bb:db:96:d6:4f:7c:64:d8:b4:
22:6f:71:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:01:41 2026 by rpki-client