Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/mw0ptyQXS_rQimhsWLBxrIMccPE.roa
File: mw0ptyQXS_rQimhsWLBxrIMccPE.roa (raw, json)
Hash identifier: 8O7ly3SBnz0h35pVqWxNg0DDS4HP88WIX5FZqzyiReA=
Subject key identifier: 9B:0D:29:B7:24:17:4B:FA:D0:8A:68:6C:58:B0:71:AC:83:1C:70:F1
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019C7B04EF4B4F0EF6BEF5B8C98FA7C17FC0
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/mw0ptyQXS_rQimhsWLBxrIMccPE.roa
Signing time: Fri 20 Feb 2026 12:27:26 +0000
ROA not before: Fri 20 Feb 2026 12:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 45.133.38.0/24 maxlen: 24
45.143.96.0/24 maxlen: 24
185.148.243.0/24 maxlen: 24
185.174.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:04:ef:4b:4f:0e:f6:be:f5:b8:c9:8f:a7:c1:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Feb 20 12:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b0d29b724174bfad08a686c58b071ac831c70f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:aa:5c:2d:a2:7b:52:af:75:85:3e:2a:db:
44:5c:d4:12:99:3a:c2:a8:b3:49:c7:e6:a0:e4:96:
8a:91:3f:73:86:6f:aa:5a:17:19:b6:76:16:14:1c:
f4:54:be:66:c6:78:e2:d9:21:17:2a:57:f6:4e:55:
ba:37:5e:d6:d5:dd:db:40:4a:a0:cf:dc:f5:7d:cc:
fe:b0:3e:0d:ac:9e:b0:59:1d:66:f9:bf:88:bd:1a:
05:3c:b1:a1:c3:47:6b:a0:a8:ad:6c:ab:17:84:32:
89:74:34:2c:c6:b0:05:ef:9a:9e:84:3c:c2:5b:b7:
ce:63:7f:d0:a4:a0:07:99:9b:57:45:f8:ec:c5:a3:
2f:c1:62:08:96:46:52:28:cb:3e:61:18:4e:36:69:
85:25:17:ea:a8:6e:a5:d5:fc:11:62:0b:f6:e1:6f:
66:75:8f:49:34:f2:8c:29:12:4d:06:ea:2c:0f:78:
d7:e0:00:63:6b:7a:1f:c9:57:6f:0b:ed:3e:bf:f1:
7b:8f:f6:20:fb:d1:09:32:a9:27:1f:1a:c4:e4:60:
a5:72:af:2c:c4:8a:b2:82:04:24:22:7b:3d:89:e3:
03:cd:36:0f:b5:7d:59:da:33:dd:f4:49:ed:59:67:
e0:86:fb:11:5a:b8:de:d1:69:c3:0c:86:85:5d:7d:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0D:29:B7:24:17:4B:FA:D0:8A:68:6C:58:B0:71:AC:83:1C:70:F1
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/mw0ptyQXS_rQimhsWLBxrIMccPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.38.0/24
45.143.96.0/24
185.148.243.0/24
185.174.23.0/24
Signature Algorithm: sha256WithRSAEncryption
19:35:35:d6:4e:43:44:64:11:8e:2a:28:90:f5:b7:4e:cb:8f:
b7:5c:df:7e:dd:87:a2:45:60:4d:ff:86:a5:0c:ae:2a:9e:07:
55:9b:1a:a3:66:98:fa:c5:9e:97:a9:b0:f1:a3:8f:91:d0:14:
8d:59:a1:ec:cf:77:bb:65:85:55:95:b9:f5:38:7f:a0:21:42:
03:81:7d:2b:17:c0:96:e7:0e:c9:78:50:60:df:43:da:5d:1d:
15:fa:4d:74:84:fc:e9:2e:37:a0:d9:f1:be:da:e3:44:bb:bc:
74:ea:6f:97:19:59:96:3f:c0:46:00:12:df:c5:16:4a:6b:c6:
33:2a:71:5b:cd:51:31:b4:4e:9c:3f:c3:29:8e:40:37:cd:7a:
96:06:f2:66:3e:d7:d6:b2:fb:5b:12:80:0f:1c:e4:70:c7:38:
fc:5d:a7:60:00:fd:59:a4:88:80:66:fc:2d:62:25:67:3f:45:
4b:77:1a:82:62:02:91:8f:7e:e4:77:23:3d:bf:0e:8f:cc:ba:
ea:96:79:f0:5d:b9:5c:f1:40:6b:a0:91:90:e9:85:50:82:a2:
33:cb:13:e5:d7:06:cf:e5:b8:15:5b:c0:c1:e4:fd:b7:a8:c7:
a7:26:27:10:33:ba:54:b1:e1:48:69:9e:e9:7e:66:bc:12:60:
12:6a:c3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:57:35 2026 by rpki-client