Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/M9hHH-XkfEyrQ9Tgg0N_97kMBk8.roa
File: M9hHH-XkfEyrQ9Tgg0N_97kMBk8.roa (raw, json)
Hash identifier: ww0iqqt1Yfsck01DFxFXo8c6Y6NbnJ1UQGfZa6OrRsM=
Subject key identifier: 33:D8:47:1F:E5:E4:7C:4C:AB:43:D4:E0:83:43:7F:F7:B9:0C:06:4F
Certificate issuer: /CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Certificate serial: 019F23689E2FC57E287E9E73A1D7DFC4D89E
Authority key identifier: 83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/M9hHH-XkfEyrQ9Tgg0N_97kMBk8.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47810
IP address blocks: 91.208.144.0/24 maxlen: 24
91.212.213.0/24 maxlen: 24
91.239.206.0/23 maxlen: 23
185.163.201.0/24 maxlen: 24
185.163.202.0/23 maxlen: 23
195.54.178.0/23 maxlen: 23
2a0a:4400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 14:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9e:2f:c5:7e:28:7e:9e:73:a1:d7:df:c4:d8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33d8471fe5e47c4cab43d4e083437ff7b90c064f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:4d:44:e3:c5:8f:c4:f9:f3:ec:b9:14:fd:
6e:00:86:7d:3e:82:3f:32:52:a2:d9:f6:d0:35:4d:
f0:e5:5b:2a:1b:78:5d:63:d2:32:02:0d:2a:e7:ae:
36:ec:c1:ff:56:6c:e0:38:44:a3:82:70:f1:a7:19:
2b:a8:4f:43:6a:c9:6a:f0:12:31:c0:d0:f4:64:3e:
76:b3:07:a5:e8:7c:0f:ed:52:53:23:e8:bc:1d:70:
18:8c:66:71:4c:35:63:53:3f:4d:5e:c5:26:97:b6:
44:26:c6:55:02:04:aa:a5:3a:37:1a:c9:6f:dd:33:
c1:d2:d5:88:cf:1b:9e:5e:9b:8c:da:5a:c0:b1:00:
cb:e9:2b:f2:d4:9e:7b:be:b8:36:ff:05:e6:c6:be:
45:93:dc:54:11:e3:21:31:6a:21:3b:bd:52:5b:2b:
6a:44:a4:6c:a9:95:f3:c3:2f:6f:f2:77:75:74:0f:
10:8a:26:71:8b:d3:1e:61:1c:ed:33:76:b6:58:c8:
72:cc:69:1a:fe:8d:06:c6:c6:dc:aa:a7:3d:a9:93:
81:bb:8b:e6:75:40:20:54:4d:10:20:19:1d:ff:f4:
8a:a0:a9:94:19:20:07:0e:de:3c:4c:9e:75:6f:5b:
2a:40:d0:9e:3d:32:f0:46:62:9f:eb:c1:21:84:8b:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:47:1F:E5:E4:7C:4C:AB:43:D4:E0:83:43:7F:F7:B9:0C:06:4F
X509v3 Authority Key Identifier:
keyid:83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/M9hHH-XkfEyrQ9Tgg0N_97kMBk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.144.0/24
91.212.213.0/24
91.239.206.0/23
185.163.201.0-185.163.203.255
195.54.178.0/23
IPv6:
2a0a:4400::/29
Signature Algorithm: sha256WithRSAEncryption
ad:87:c4:b3:bb:43:9d:e2:47:4a:82:6d:88:77:b1:72:6a:97:
a8:2d:57:9b:89:a8:d7:48:3f:6b:bb:7e:dd:5a:7d:97:74:3b:
25:5b:31:e4:43:d0:56:a0:87:a8:6f:fa:14:16:22:b2:74:48:
5b:f8:e5:66:dd:c1:be:f6:5b:1a:67:7f:e1:8c:bf:38:38:a4:
cf:5f:87:45:38:a4:b8:35:3b:5b:f1:17:6a:47:a3:8c:2c:12:
3e:62:fe:ef:33:80:64:01:99:7c:75:4c:b2:1a:62:75:fd:11:
32:b2:00:51:c3:f3:43:3d:9c:fe:32:ec:cb:bf:79:f9:25:48:
e3:44:19:3e:31:08:5e:14:de:37:51:62:80:b2:72:5b:9f:a1:
8c:0a:d5:1b:4e:5e:16:8d:81:0a:6d:77:38:e3:cc:74:d8:67:
4b:ca:6a:41:f2:9d:11:75:8e:08:3e:d2:dc:77:70:69:96:fd:
e0:b9:e0:c5:91:d2:ef:6f:55:5a:9f:72:01:d0:7d:de:50:b2:
51:02:9e:58:76:55:5c:59:08:81:16:11:c6:c0:0d:c2:d8:3b:
d9:67:cd:23:d0:7b:0c:c4:8c:f7:46:dd:21:fc:27:5f:3f:3a:
22:5b:45:92:0b:99:b4:cc:f1:23:31:cc:90:ad:20:0d:f1:1e:
fb:b8:3c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 19:19:57 2026 by rpki-client