Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/M8f5aqTdOeDi73LZ4XB61y7mpPM.roa
File: M8f5aqTdOeDi73LZ4XB61y7mpPM.roa (raw, json)
Hash identifier: 3Qr6448vOsbWXQ3mKIx9C6NLyjGU/ceVGpBtequgmvM=
Subject key identifier: 33:C7:F9:6A:A4:DD:39:E0:E2:EF:72:D9:E1:70:7A:D7:2E:E6:A4:F3
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1789B976A7F2BCD0A6A1A12B5086761CE
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/M8f5aqTdOeDi73LZ4XB61y7mpPM.roa
Signing time: Mon 26 Oct 2026 14:27:05 +0000
ROA not before: Mon 26 Oct 2026 14:27:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 45.131.3.0/24 maxlen: 24
91.208.204.0/24 maxlen: 24
141.98.48.0/24 maxlen: 24
176.96.130.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
217.18.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:9b:97:6a:7f:2b:cd:0a:6a:1a:12:b5:08:67:61:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:27:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33c7f96aa4dd39e0e2ef72d9e1707ad72ee6a4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ff:8d:7d:3f:a4:ef:72:7f:3b:72:87:56:f9:
cf:fb:67:f2:12:19:fb:59:2f:20:fc:1b:7f:97:c7:
cc:84:38:be:1a:e3:6d:5c:3b:5d:85:33:f6:fe:8c:
dd:3a:8a:41:a9:a3:59:57:6b:66:08:d3:aa:d9:c3:
8c:92:93:81:74:fc:02:40:13:a6:7e:fb:95:98:44:
34:3f:d5:b9:68:ed:c5:14:b3:86:39:fd:47:ea:1c:
82:8a:79:4a:d4:fd:aa:fb:62:70:d4:98:9d:c4:4b:
cf:05:29:98:ff:33:f6:24:7b:d4:af:58:2c:70:78:
a4:4d:3d:4c:cf:28:d0:52:75:20:e1:c5:2a:66:71:
8c:21:2c:b4:e8:32:44:74:38:ba:1a:67:3a:c4:aa:
09:d4:c0:58:de:27:62:b7:b9:2b:1b:62:e9:6c:84:
e6:ae:39:db:e0:cf:80:dd:a7:89:29:6f:78:d8:bc:
61:18:bf:a3:99:be:94:aa:fd:72:cd:73:7b:f3:30:
81:c3:cd:43:ee:da:01:98:72:13:91:85:69:b0:28:
03:c7:a1:30:3c:8e:6c:12:c7:36:3e:53:7f:de:dd:
b7:45:3d:c5:f4:24:fc:e4:d7:13:29:6c:df:e7:d4:
84:e6:ca:d7:cc:3e:80:5c:6d:79:8b:6c:6b:fe:3d:
ac:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C7:F9:6A:A4:DD:39:E0:E2:EF:72:D9:E1:70:7A:D7:2E:E6:A4:F3
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/M8f5aqTdOeDi73LZ4XB61y7mpPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.3.0/24
91.208.204.0/24
141.98.48.0/24
176.96.130.0/24
185.254.29.0/24
193.35.152.0/24
193.35.155.0/24
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:b1:92:4a:09:dc:fc:3f:56:be:06:b7:d3:02:2d:b5:e7:df:
bd:80:59:a2:80:85:0c:52:0c:12:c6:e6:3c:05:05:04:e4:5e:
b5:2b:60:08:67:51:c2:bb:e2:bf:5e:ba:2b:95:91:b7:89:aa:
56:c2:b6:b3:0d:b6:0f:81:ad:bb:d7:3f:0a:95:a6:12:14:24:
04:a2:4e:26:62:e9:85:f9:86:9c:80:62:af:93:7d:29:eb:a5:
1d:fa:73:d3:78:2c:47:86:fe:6e:91:65:0a:04:87:28:15:b2:
c0:1d:06:d2:f2:1a:3c:2a:26:72:0e:5c:16:39:a1:66:d0:d5:
44:e2:26:a0:fb:1e:72:8c:63:66:ba:97:77:f8:a7:82:14:ff:
df:e0:4a:38:6c:02:e8:0f:3f:67:8e:af:1b:91:a9:ff:0a:f4:
ab:73:55:ef:40:a3:8e:1c:fd:23:fa:4d:03:4f:b1:35:35:40:
ce:4b:72:ef:f7:b3:0b:ad:db:08:5e:29:55:57:e5:e4:1d:7f:
c0:bd:98:e7:d6:53:90:2c:57:0f:03:4d:a0:73:78:af:b4:f7:
45:db:16:3c:59:f4:34:a2:9d:f2:e7:d2:2d:b1:63:e6:75:71:
5e:2a:de:c0:08:f5:3c:e3:9f:a0:11:03:8a:c7:b0:0e:cd:6b:
5d:61:ed:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:49 2026 by rpki-client