Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/M9uNW_AjvSRWP9leh-go_2dj3js.roa
File: M9uNW_AjvSRWP9leh-go_2dj3js.roa (raw, json)
Hash identifier: ujQsM5g8Rg+mlV0fU5GktfX3ayjJW/2OIfzqCO9iobo=
Subject key identifier: 33:DB:8D:5B:F0:23:BD:24:56:3F:D9:5E:87:E8:28:FF:67:63:DE:3B
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 01A06613ABAF85A066DF1D31E9B1EBF70ADB
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/M9uNW_AjvSRWP9leh-go_2dj3js.roa
Signing time: Thu 03 Sep 2026 07:02:40 +0000
ROA not before: Thu 03 Sep 2026 07:02:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12670
IP address blocks: 185.204.172.0/22 maxlen: 22
212.99.0.0/17 maxlen: 17
212.103.0.0/19 maxlen: 19
213.30.128.0/18 maxlen: 18
213.244.0.0/19 maxlen: 19
217.66.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:13:ab:af:85:a0:66:df:1d:31:e9:b1:eb:f7:0a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Sep 3 07:02:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33db8d5bf023bd24563fd95e87e828ff6763de3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:8b:94:a0:2e:af:cf:4b:03:9a:17:a4:4f:
68:fd:6c:5f:88:aa:d4:e0:54:7b:4b:f4:eb:47:48:
03:e6:e0:f6:85:3a:9d:4e:8e:30:30:d5:8e:88:05:
a6:28:21:e8:66:4a:0a:20:24:c5:bc:15:5f:4d:1d:
50:dd:d2:48:1a:16:62:ef:b3:83:7a:4d:0d:26:22:
66:ed:4c:e9:28:19:83:d0:b3:51:86:07:3f:8c:cc:
6f:6e:d6:e1:5c:95:20:f6:2d:ad:a4:05:45:0c:2d:
cb:16:84:0e:ba:9a:f4:4f:5d:21:15:c4:8a:c2:8f:
8d:a0:d5:2b:11:70:2b:53:d8:24:42:77:6c:ab:51:
9f:ea:93:1b:ad:8f:27:5f:fe:c4:58:c0:35:27:c7:
e2:89:28:f7:68:55:b6:c0:ed:ea:06:7a:13:19:dd:
a5:58:07:2c:8f:7e:01:f7:42:42:b3:90:9d:fc:42:
91:d3:c8:9a:ee:4f:29:3f:5d:9e:4b:56:81:91:cc:
0c:59:52:3c:32:cf:fc:5a:09:5b:b2:78:d0:3d:78:
48:f0:a1:6c:36:d9:11:ba:6e:54:58:37:1b:00:78:
4f:15:5f:ea:55:16:ae:4c:30:1e:d4:aa:f3:18:3a:
44:fe:a7:80:7b:26:c1:24:ec:dc:e6:09:4c:a5:05:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DB:8D:5B:F0:23:BD:24:56:3F:D9:5E:87:E8:28:FF:67:63:DE:3B
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/M9uNW_AjvSRWP9leh-go_2dj3js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.172.0/22
212.99.0.0/17
212.103.0.0/19
213.30.128.0/18
213.244.0.0/19
217.66.112.0/20
Signature Algorithm: sha256WithRSAEncryption
44:b4:50:78:c8:31:17:c4:85:8c:c6:d1:44:3c:c3:29:ca:a5:
2c:78:17:2f:4e:18:ed:26:15:14:14:05:d8:b3:fe:53:e5:16:
fe:1d:75:e1:8a:02:62:86:47:14:de:00:92:7d:f0:62:1e:95:
28:41:77:59:59:8b:57:11:a2:4c:58:5e:63:cd:b5:a0:8e:b1:
33:e0:17:83:e3:a0:6c:8e:d5:12:ec:01:1f:df:e0:01:62:eb:
77:7c:3d:bc:a1:15:b7:71:88:03:a2:4e:4f:cf:0d:3e:32:3a:
16:cd:60:96:ef:95:46:dc:3b:9a:85:ba:c7:8b:68:c8:57:e5:
08:4b:8d:a3:6a:04:81:9a:92:0c:cb:01:31:3c:7c:4c:17:41:
fa:13:e2:de:30:4f:c7:b5:fa:e9:12:75:7e:cb:0b:d1:e6:37:
e8:81:1c:ef:7a:2a:0a:07:a6:f8:0c:1e:2a:73:0b:98:84:38:
ac:e7:50:ee:52:7b:df:39:8b:28:8c:76:73:c7:15:f5:52:24:
1c:0f:81:0e:dc:b2:65:d9:58:bf:62:5d:67:f7:9a:e0:a2:1e:
47:7b:f5:31:42:da:3b:e8:ef:17:77:05:16:b5:2f:00:b0:4a:
eb:cf:89:7c:85:ea:58:f9:40:0d:8a:4d:a5:97:b4:ec:3c:de:
af:f9:da:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:07:52 2026 by rpki-client