Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/m-FMmcei6RoXmx26_WPzcJT92rc.roa
File: m-FMmcei6RoXmx26_WPzcJT92rc.roa (raw, json)
Hash identifier: uiRXU8YNMfNOaOsUZ29EQpdx41oxCxLuX9T0OnmhKNQ=
Subject key identifier: 9B:E1:4C:99:C7:A2:E9:1A:17:9B:1D:BA:FD:63:F3:70:94:FD:DA:B7
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A1DC14AC5545B09EBD12DEB78AE01CF22F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/m-FMmcei6RoXmx26_WPzcJT92rc.roa
Signing time: Sat 14 Nov 2026 22:01:44 +0000
ROA not before: Sat 14 Nov 2026 22:01:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.253.39.0/24 maxlen: 24
45.8.184.0/24 maxlen: 24
45.8.196.0/24 maxlen: 24
45.8.252.0/24 maxlen: 24
45.8.253.0/24 maxlen: 24
45.89.104.0/24 maxlen: 24
85.208.104.0/24 maxlen: 24
85.208.105.0/24 maxlen: 24
193.168.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:14:ac:55:45:b0:9e:bd:12:de:b7:8a:e0:1c:f2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Nov 14 22:01:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9be14c99c7a2e91a179b1dbafd63f37094fddab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:cc:1f:69:78:1d:86:d3:b9:14:52:1c:4d:
fd:63:2b:d3:ad:4c:5b:b2:9e:da:e8:78:ad:89:e6:
f8:50:7b:24:e4:0c:5f:ba:80:8e:c8:b4:1c:9e:24:
99:87:5d:db:ac:02:f3:c7:3f:c4:e4:d0:c1:9d:d7:
40:a3:ed:94:63:f0:77:78:41:cd:d3:9a:06:59:78:
e5:10:16:d7:9f:e0:6f:c1:c2:4c:bf:5e:99:30:23:
06:8a:79:6b:05:54:6b:96:05:73:fa:c6:ac:9b:72:
0c:68:ee:6f:a9:5c:8d:a7:0a:69:d7:c1:eb:84:13:
3b:6a:01:7b:ae:ee:ca:0b:e0:19:a4:d2:ea:e1:79:
22:8e:91:38:b5:e6:39:86:27:b6:22:2e:fd:e4:a2:
66:8d:0b:48:4f:31:d3:b5:58:e0:a5:78:c2:c1:c3:
71:8c:0c:bd:7e:43:73:f5:91:35:08:64:52:8a:c6:
80:02:29:d5:be:52:d2:43:a2:7f:5c:f6:6e:7f:b3:
c6:e9:4f:ba:b2:4b:44:1c:79:70:e9:de:53:c9:f8:
85:6a:9c:70:f1:7c:b0:f1:47:a2:5e:e6:1a:9d:10:
cc:7c:d5:c0:78:b9:3d:5d:54:44:2a:4c:3f:a5:bf:
45:12:62:dc:6f:80:c7:3c:ea:35:3f:4f:c3:bc:3f:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E1:4C:99:C7:A2:E9:1A:17:9B:1D:BA:FD:63:F3:70:94:FD:DA:B7
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/m-FMmcei6RoXmx26_WPzcJT92rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.39.0/24
45.8.184.0/24
45.8.196.0/24
45.8.252.0/23
45.89.104.0/24
85.208.104.0/23
193.168.210.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:fa:1e:06:2e:ef:23:cf:ba:81:f6:88:89:e7:78:16:1c:31:
ed:0d:d1:d8:b3:03:8c:e7:f6:bf:32:d0:34:b3:8f:e0:00:4b:
89:03:18:c3:c3:67:43:c3:38:26:f0:28:97:f1:6c:dc:b5:99:
8b:2c:7c:ba:dd:5c:8d:af:59:55:40:dd:0f:a6:9e:6c:8a:30:
51:04:84:1e:dc:0a:ee:ef:23:bf:35:41:01:73:c8:b5:c3:a2:
e3:cb:9d:bf:c5:3d:9b:b4:49:ec:53:08:bb:59:a2:d7:87:73:
fd:31:9b:f3:a2:d0:de:32:09:75:22:b0:d1:02:09:ad:6b:fc:
b2:10:f8:58:0d:73:12:07:1a:ec:40:86:6e:65:3c:19:e8:3f:
60:bd:85:62:30:14:41:f5:ea:be:ec:5a:a2:c5:36:21:5a:c0:
07:cb:b3:a6:31:36:d3:cc:83:59:e7:3c:ba:ec:ba:36:40:3f:
3d:99:99:7c:4c:41:aa:66:64:ca:c5:f5:a8:6d:fa:ea:92:b6:
32:6c:08:50:db:a7:dc:22:53:ea:0e:cf:c2:25:ac:30:bd:7b:
0d:af:de:88:bb:ed:7e:b1:5e:07:a2:69:00:66:51:70:32:4b:
65:35:75:29:3a:7d:df:fd:59:54:2d:b1:39:d5:3e:66:15:cf:
01:fb:2d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:25:43 2026 by rpki-client