Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/M_9w-B6amWAtEWWBdT8xhPlpSJY.roa
File: M_9w-B6amWAtEWWBdT8xhPlpSJY.roa (raw, json)
Hash identifier: QpoV2PmZW0MkrzBziH0oYNczfMtHHnF/R8IgfOkkErM=
Subject key identifier: 33:FF:70:F8:1E:9A:99:60:2D:11:65:81:75:3F:31:84:F9:69:48:96
Certificate issuer: /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial: 01A15D9AB9A9927053EB433E0992262CF3BD
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/M_9w-B6amWAtEWWBdT8xhPlpSJY.roa
Signing time: Wed 21 Oct 2026 08:36:23 +0000
ROA not before: Wed 21 Oct 2026 08:36:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20771
IP address blocks: 37.233.128.0/17 maxlen: 17
78.139.128.0/18 maxlen: 18
80.241.184.0/24 maxlen: 24
80.241.244.0/22 maxlen: 22
80.241.252.0/24 maxlen: 24
85.117.32.0/19 maxlen: 19
85.117.32.0/20 maxlen: 20
85.117.48.0/20 maxlen: 20
88.210.192.0/18 maxlen: 18
89.232.0.0/19 maxlen: 19
89.232.2.0/24 maxlen: 24
134.90.0.0/17 maxlen: 17
176.73.0.0/16 maxlen: 16
185.19.96.0/22 maxlen: 22
185.19.96.0/23 maxlen: 23
185.19.98.0/23 maxlen: 23
212.72.130.0/24 maxlen: 24
2a02:23f0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:9a:b9:a9:92:70:53:eb:43:3e:09:92:26:2c:f3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Validity
Not Before: Oct 21 08:36:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33ff70f81e9a99602d116581753f3184f9694896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:2d:f7:4e:7e:c9:1d:e5:a9:54:22:db:26:
57:d2:aa:7f:9f:c6:17:0a:0e:79:29:4f:1e:2d:49:
f9:7b:18:ee:ae:27:fb:3b:55:d4:68:45:03:3f:64:
24:e9:db:22:fa:b8:7a:98:b5:e6:d3:10:ee:ce:8d:
d5:a7:d1:64:8d:09:84:3d:55:ca:f0:1d:21:27:5e:
b3:61:5d:fd:72:64:fa:91:41:f2:ed:af:d5:67:7e:
86:84:a5:fe:3e:97:d1:a7:c1:bd:8b:99:66:ad:28:
57:c0:01:be:b7:15:d0:90:8d:11:99:46:8f:b1:38:
59:b6:f2:22:b1:99:37:da:c9:1a:80:85:d1:a2:56:
9d:06:96:86:81:10:bb:59:26:a0:c2:03:ba:24:d0:
e3:b4:a7:a6:ff:4f:6a:35:62:7d:11:6d:1e:6f:e4:
d1:a4:43:47:31:a4:ff:31:c5:f6:a8:b8:13:cd:ab:
83:dd:23:d1:2d:92:7e:ff:24:28:6c:e3:3b:3c:c9:
0f:93:aa:5f:8c:84:a7:ef:61:fb:eb:ba:5e:21:35:
92:a9:b2:e1:fe:de:4d:2a:0e:c1:b7:62:19:ea:65:
df:d0:09:e5:31:32:7a:01:63:18:84:39:4c:ff:95:
04:73:5e:55:54:51:af:c5:cf:a8:67:f9:5e:54:33:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FF:70:F8:1E:9A:99:60:2D:11:65:81:75:3F:31:84:F9:69:48:96
X509v3 Authority Key Identifier:
keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/M_9w-B6amWAtEWWBdT8xhPlpSJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.233.128.0/17
78.139.128.0/18
80.241.184.0/24
80.241.244.0/22
80.241.252.0/24
85.117.32.0/19
88.210.192.0/18
89.232.0.0/19
134.90.0.0/17
176.73.0.0/16
185.19.96.0/22
212.72.130.0/24
IPv6:
2a02:23f0::/32
Signature Algorithm: sha256WithRSAEncryption
2c:d6:a3:70:c1:90:2a:c3:74:4c:43:c8:dd:3a:12:fc:86:b6:
a1:65:a7:3f:d3:58:d3:37:bf:d3:02:87:a3:91:41:31:95:7b:
78:eb:db:98:5d:23:49:cb:bf:38:6a:f2:64:6a:a0:89:f1:41:
da:0f:0b:46:a0:94:65:50:a8:83:99:70:78:85:ff:ec:1d:7e:
a1:7b:85:58:c9:bc:d7:94:7f:00:75:ae:bf:59:8f:26:64:3e:
f5:98:f9:65:56:41:22:40:06:e4:d8:7d:3c:7b:ee:14:a7:9f:
7d:01:ec:d6:b8:65:30:e5:e0:b6:50:35:20:4a:f6:e2:5e:29:
e3:cc:84:de:03:8b:42:7a:d6:04:5c:2c:f9:dc:c1:98:56:e0:
22:18:77:49:c7:c4:d2:64:e8:f0:1a:ba:f7:18:f6:1f:05:54:
f9:b8:72:ae:39:25:f6:0e:b4:67:25:b3:45:9f:2d:a6:9c:a8:
92:7a:d2:8f:65:bc:e7:21:4b:4b:af:03:7b:fa:08:77:f6:d5:
d0:b2:67:ea:4b:6c:b4:9d:07:a8:a7:dd:55:74:63:78:07:80:
29:61:86:78:7b:88:5c:55:26:40:50:33:f8:39:79:83:fe:01:
fb:b7:58:02:0d:0b:f0:d3:1d:cd:f6:50:5e:1e:e7:b0:b1:03:
0a:02:f5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:41 2026 by rpki-client