Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/m0PCCuuKQXgWJqTZSdxwQsBX66s.roa
File: m0PCCuuKQXgWJqTZSdxwQsBX66s.roa (raw, json)
Hash identifier: 606ww6A+IADwULNhMsZB5CNHymRvztMh7JZEr3D5GTw=
Subject key identifier: 9B:43:C2:0A:EB:8A:41:78:16:26:A4:D9:49:DC:70:42:C0:57:EB:AB
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019D00FF61DFD9C0B8184CDFED18BA9E70E1
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/m0PCCuuKQXgWJqTZSdxwQsBX66s.roa
Signing time: Wed 18 Mar 2026 12:50:29 +0000
ROA not before: Wed 18 Mar 2026 12:50:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24768
IP address blocks: 213.182.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:ff:61:df:d9:c0:b8:18:4c:df:ed:18:ba:9e:70:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Mar 18 12:50:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b43c20aeb8a41781626a4d949dc7042c057ebab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:7e:24:1d:12:0a:ad:fc:41:09:9e:bd:d3:
22:61:44:d1:77:97:32:c1:38:a9:68:27:f9:bf:8f:
07:bc:2f:a4:2f:2f:b2:1e:da:6c:23:90:68:ff:1c:
69:0a:50:78:7a:2d:f4:6a:45:1f:aa:1e:a1:69:99:
f1:7b:2b:b5:b6:83:c1:f9:7d:2b:c9:1a:9c:1b:ee:
45:f4:0d:56:6a:ee:ec:ac:61:b3:8d:c8:35:83:e1:
4e:a9:ce:31:b2:21:11:e1:b6:cf:e0:3a:c3:dd:a2:
9b:0e:40:3f:d2:69:18:e7:42:42:e9:5e:80:e1:25:
b7:8e:0a:51:3a:4a:4c:db:0a:f9:64:4e:42:40:66:
d9:da:12:f3:99:b5:25:ce:4a:68:e8:3c:17:b8:94:
43:cd:50:c7:61:c2:93:82:3d:e2:a1:8d:d9:f5:ae:
1c:ee:83:26:da:fc:6d:76:ab:db:a3:57:49:2d:e8:
e6:e3:4c:f7:30:92:9a:a1:bd:82:1f:c8:2f:ef:7e:
00:d9:da:d0:e8:87:75:76:e3:e6:9d:52:99:8f:96:
a2:bb:5d:9d:a8:1c:e8:00:33:6b:e9:bc:ea:cc:fb:
e6:80:28:e5:da:67:e9:3d:61:f7:1a:83:bf:19:cc:
a0:f1:96:50:b1:84:2f:d3:e3:7f:63:e3:95:04:80:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:43:C2:0A:EB:8A:41:78:16:26:A4:D9:49:DC:70:42:C0:57:EB:AB
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/m0PCCuuKQXgWJqTZSdxwQsBX66s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.195.0/24
Signature Algorithm: sha256WithRSAEncryption
24:06:3f:b9:74:ba:ba:2f:91:87:43:d7:2f:2a:7d:92:ac:77:
1e:46:ff:ee:09:2b:ab:16:23:5f:d8:af:42:04:20:5e:b8:b8:
43:6c:9c:d0:0d:5a:68:3e:52:1c:95:1b:d0:0d:f5:f7:32:1f:
87:d6:24:e3:ef:60:54:d0:8e:29:0d:5b:87:49:33:94:bc:87:
34:82:53:bb:be:f8:59:6e:e2:1b:14:0e:e6:24:3b:72:f1:14:
50:27:d1:ba:d0:d5:7b:a6:4f:34:9b:6c:ef:84:25:3f:84:17:
20:69:43:74:5c:9b:fc:e6:f8:65:53:ab:73:3c:c3:d4:14:74:
cb:a3:5a:82:d4:0d:8d:03:fc:d8:ea:40:e4:a9:86:6f:9a:00:
10:5d:e8:1f:c8:40:77:2f:6e:31:98:22:d1:a4:77:f3:60:97:
4f:f3:22:52:6f:7b:d1:69:1c:d2:b5:0d:62:60:50:14:0c:36:
d0:86:eb:06:4f:45:12:51:bf:dc:54:5a:12:0e:e1:a0:f9:ac:
24:5f:32:9e:cc:53:da:09:87:da:42:92:8a:6f:c0:78:d0:93:
08:26:fb:d7:f9:c7:24:38:81:2e:39:72:45:93:ea:24:b6:c7:
a6:57:f7:3a:83:60:70:c0:3a:56:22:cb:c1:e5:73:59:ff:07:
46:87:5a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 09:17:20 2026 by rpki-client