Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MtS2vJ_573HTbKH0RjAuBRRBTTk.roa
File: MtS2vJ_573HTbKH0RjAuBRRBTTk.roa (raw, json)
Hash identifier: 15xFtObRSFXGzic55Sxn4VhRUOHwubbUWIsUcibqTPY=
Subject key identifier: 32:D4:B6:BC:9F:F9:EF:71:D3:6C:A1:F4:46:30:2E:05:14:41:4D:39
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0AEC9FCB27B16BA9C7FF602C96F048F38
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MtS2vJ_573HTbKH0RjAuBRRBTTk.roa
Signing time: Thu 17 Sep 2026 09:54:27 +0000
ROA not before: Thu 17 Sep 2026 09:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41745
IP address blocks: 95.215.8.0/24 maxlen: 24
193.124.33.0/24 maxlen: 24
194.87.35.0/24 maxlen: 24
194.87.62.0/24 maxlen: 24
194.87.191.0/24 maxlen: 24
194.87.219.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.133.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:c9:fc:b2:7b:16:ba:9c:7f:f6:02:c9:6f:04:8f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 17 09:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32d4b6bc9ff9ef71d36ca1f446302e0514414d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:bd:ea:ea:c8:72:b1:66:35:51:a6:d4:28:
7c:0b:95:eb:76:6e:1d:99:7d:3e:fd:df:ea:d9:a9:
f8:b0:4c:b7:48:05:47:da:20:48:28:96:f2:d7:58:
49:43:54:29:8a:80:09:47:18:3c:3e:ec:41:48:f1:
ef:36:b3:cf:ff:cf:82:93:43:5f:92:13:f1:30:c8:
18:02:bf:49:8f:af:94:1e:fa:be:83:3b:08:e0:bd:
6b:f9:54:53:d1:e2:98:3f:3e:82:e8:e1:fd:05:df:
16:cb:34:23:28:c8:2e:91:4b:c1:28:92:02:f8:77:
b7:9a:2d:a1:5f:57:37:fe:54:9f:92:5b:e0:ed:06:
3a:3c:0f:be:b3:db:ae:04:ac:72:2f:bd:50:07:26:
7e:3b:df:ea:6f:b1:c4:e3:5b:0d:c9:b0:9f:f8:af:
42:b7:d0:fb:b3:e4:7c:16:1f:37:7a:40:85:01:5b:
88:ad:97:20:f3:44:d7:0c:6b:80:a1:42:c5:8a:8d:
b9:ed:5b:bf:95:d6:50:b5:e4:98:7f:21:8c:5b:63:
c7:41:ed:a0:fd:84:78:5f:37:96:7e:d2:cd:78:3f:
1b:c1:c9:89:95:98:c3:e6:37:68:46:a5:c4:fb:e2:
16:c9:79:45:74:55:d0:bb:8a:0a:d9:7b:0a:c7:d2:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D4:B6:BC:9F:F9:EF:71:D3:6C:A1:F4:46:30:2E:05:14:41:4D:39
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MtS2vJ_573HTbKH0RjAuBRRBTTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.8.0/24
193.124.33.0/24
194.87.35.0/24
194.87.62.0/24
194.87.191.0/24
194.87.219.0/24
194.87.252.0/24
195.58.50.0/24
195.133.75.0/24
Signature Algorithm: sha256WithRSAEncryption
86:cf:ab:0a:23:09:9c:1d:48:4e:2c:cc:f3:c8:48:e1:11:b6:
b1:f9:1c:f4:43:f3:74:2e:3a:21:6a:00:2f:cb:89:32:e9:3f:
76:f2:a4:07:43:08:23:42:a2:32:63:05:f2:21:ba:63:3a:d3:
9c:fa:1b:dc:63:73:d2:6f:65:12:c9:c2:f7:e4:04:b5:9c:c5:
42:1d:b0:03:fc:ca:c0:9b:82:1a:84:2c:e0:aa:e1:88:94:42:
cd:a8:12:a8:6c:8f:e4:fc:bd:53:a4:d5:49:81:4b:9e:6a:84:
41:09:a9:18:88:3f:84:5f:12:58:67:90:16:f0:04:5a:3a:e8:
bc:b3:fa:48:2e:ba:e6:5a:93:b2:37:81:49:8d:cf:ee:fe:1e:
95:39:cc:32:db:42:33:47:84:16:93:a5:66:f1:89:ed:b5:bd:
f4:b1:3b:d2:2c:34:ec:78:36:71:3e:89:5e:31:5c:cc:8d:c2:
a3:ba:c7:24:63:7a:10:39:24:69:6f:a6:b7:ab:5e:2c:fe:45:
9a:67:c9:38:3a:bb:99:47:ff:16:44:75:bc:95:dc:f6:91:43:
b7:4b:0c:e8:b8:a1:fa:52:1d:f1:10:bb:29:5d:31:ab:20:09:
d9:16:1b:5a:90:83:c3:9d:dd:0c:aa:d4:a9:c0:c5:b8:86:e0:
6b:46:21:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:49:41 2026 by rpki-client