Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/0smr-9ZIi2AFJNLWJAcguZY4qmM.roa
File: 0smr-9ZIi2AFJNLWJAcguZY4qmM.roa (raw, json)
Hash identifier: U0Zc8PcXc4/S0iCAzLVr8ylZb1VARWvnkFI8+firC1g=
Subject key identifier: D2:C9:AB:FB:D6:48:8B:60:05:24:D2:D6:24:07:20:B9:96:38:AA:63
Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109
Certificate serial: 01A17770CB42072261279D96A4ECD2716049
Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/0smr-9ZIi2AFJNLWJAcguZY4qmM.roa
Signing time: Mon 26 Oct 2026 09:00:43 +0000
ROA not before: Mon 26 Oct 2026 09:00:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209928
IP address blocks: 94.231.40.0/21 maxlen: 24
185.128.64.0/24 maxlen: 24
185.128.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:cb:42:07:22:61:27:9d:96:a4:ec:d2:71:60:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109
Validity
Not Before: Oct 26 09:00:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2c9abfbd6488b600524d2d6240720b99638aa63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6a:32:07:a5:1a:a7:56:37:b5:d1:fe:0b:46:
b8:59:a7:87:0d:d3:f5:83:40:dc:1c:09:37:75:c2:
68:6d:6e:11:8f:11:7b:66:2a:25:1a:1b:b6:e2:ee:
45:41:e9:2b:20:af:cb:e0:06:27:8e:32:95:be:8e:
19:0e:c6:73:eb:aa:fd:d9:c7:c4:65:dd:86:79:ea:
08:c4:49:23:1b:5d:15:00:72:5a:fb:1b:9f:0d:53:
4b:f7:ce:68:c3:a8:99:3d:f3:d5:ac:93:00:74:25:
b4:b8:94:5e:1d:db:e0:11:c6:27:fb:f2:76:97:51:
cd:b7:9f:09:5c:f2:66:6e:b1:33:ff:cd:ce:39:69:
1a:2e:0d:37:e6:0b:f3:68:6a:c5:99:b9:33:44:42:
23:04:da:04:1e:18:59:bb:42:51:cd:d9:e6:5f:76:
5b:82:c1:c3:d9:8b:98:1c:1a:61:62:d6:d9:b9:d3:
4c:e1:3d:bc:37:9c:19:eb:79:01:d3:4e:9d:02:25:
37:3f:96:39:6d:21:9e:d6:3b:d0:1e:67:90:f7:6f:
75:e5:7f:6d:79:68:59:1d:d9:cf:9a:d2:92:19:f9:
70:25:ab:84:3f:d1:ed:b6:9d:9f:c0:ad:58:88:f5:
0c:4f:87:64:78:c8:18:19:c5:82:79:cc:e5:bd:a1:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C9:AB:FB:D6:48:8B:60:05:24:D2:D6:24:07:20:B9:96:38:AA:63
X509v3 Authority Key Identifier:
keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/0smr-9ZIi2AFJNLWJAcguZY4qmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.40.0/21
185.128.64.0/24
185.128.67.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b4:a2:81:7d:52:6b:62:6c:86:fb:d3:7f:5b:17:d1:06:49:
5a:5b:e8:b5:c1:9b:b2:7e:a5:85:43:e4:01:2e:2d:d2:e9:39:
9d:88:23:59:f9:58:0d:a7:fa:6d:cc:0e:dc:fb:82:2c:7f:a9:
e0:b2:65:43:b5:4c:4c:60:a8:36:3d:c5:25:4a:8b:05:b7:da:
46:d8:41:10:fc:d8:05:2a:6b:1a:b5:e0:7e:23:32:89:b4:d0:
7c:a5:d3:ee:69:08:5f:c0:c7:23:bf:ae:55:9e:92:09:3e:8b:
35:72:47:df:68:12:0a:39:af:50:d8:1c:38:cb:13:3e:a1:8c:
37:a4:d3:79:ff:ef:20:00:71:8b:07:bb:54:e7:09:80:58:cd:
8b:40:2f:a7:34:76:1a:74:e6:ff:e9:74:85:d4:08:77:60:bf:
7e:97:58:ac:5d:0a:34:a0:d8:e9:af:49:48:df:33:3d:2b:3f:
f9:f2:8f:f7:c6:a7:20:be:bf:dd:c6:00:a4:1f:09:59:e3:50:
7e:29:29:a0:04:fd:a6:b3:66:40:97:db:8d:e2:e6:93:d3:93:
e4:17:f0:4b:02:a5:a6:f6:ab:ab:03:91:ce:ea:9e:5b:35:04:
f0:3d:3d:ba:80:89:f9:ae:c3:6d:60:f9:43:b8:d9:10:ef:5f:
5d:f0:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:44:06 2026 by rpki-client