Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MxQCFbu-Uh8dYvhRqXEliZKTJyo.roa
File: MxQCFbu-Uh8dYvhRqXEliZKTJyo.roa (raw, json)
Hash identifier: Hkc4zn9joW45UZmrSl979zezVRKqvSYOnqH9DeVEMH8=
Subject key identifier: 33:14:02:15:BB:BE:52:1F:1D:62:F8:51:A9:71:25:89:92:93:27:2A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C48540BA24363D1D15CF132AA4739EAFE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MxQCFbu-Uh8dYvhRqXEliZKTJyo.roa
Signing time: Tue 10 Feb 2026 16:13:13 +0000
ROA not before: Tue 10 Feb 2026 16:13:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 77.90.59.0/24 maxlen: 24
85.118.167.0/24 maxlen: 24
89.106.92.0/24 maxlen: 24
94.103.170.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.172.0/24 maxlen: 24
94.249.177.0/24 maxlen: 24
94.249.233.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.245.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:54:0b:a2:43:63:d1:d1:5c:f1:32:aa:47:39:ea:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 10 16:13:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33140215bbbe521f1d62f851a97125899293272a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6c:81:a1:66:64:b3:ac:75:34:d0:2c:72:14:
18:ea:e4:4f:70:19:99:ab:28:cb:75:22:74:9c:1d:
2e:7d:25:8f:b8:26:29:92:20:46:80:14:8d:91:4b:
7e:91:0e:cd:00:fd:ee:d1:1b:74:9d:94:62:f9:4a:
87:9f:ed:ce:0e:65:aa:36:fd:e6:ad:2f:42:8c:de:
f5:fa:2d:c5:aa:1d:f2:9b:a7:68:6f:e8:e2:81:0b:
ec:35:7d:ea:99:19:5a:dd:f9:74:12:1c:eb:14:e5:
da:be:67:61:03:1a:a0:e0:36:6c:5e:89:8a:4a:04:
35:2b:fb:39:aa:84:45:52:28:30:cf:d6:19:1b:1b:
0b:7d:00:f0:16:ee:38:33:ae:0f:cf:6e:34:02:69:
17:c8:c5:e2:5a:ad:e5:fd:c9:ef:3d:cc:e1:a1:bf:
6f:71:e3:6a:dc:2d:17:d7:b9:ee:a1:9c:37:6d:6f:
6f:a7:c8:76:29:53:f7:03:8e:c1:80:a3:8b:91:47:
f3:6a:f4:e4:f3:a3:c2:73:f4:8c:9e:29:7f:ec:36:
67:2a:29:c9:c7:f9:5e:42:a5:9b:10:15:8e:b9:1e:
a6:55:2f:20:25:32:a6:28:95:19:80:49:78:9b:bb:
87:c7:a8:8e:b8:3e:80:f5:76:5e:83:5c:cc:8b:26:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:14:02:15:BB:BE:52:1F:1D:62:F8:51:A9:71:25:89:92:93:27:2A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MxQCFbu-Uh8dYvhRqXEliZKTJyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.59.0/24
85.118.167.0/24
89.106.92.0/24
94.103.170.0/24
94.249.158.0/24
94.249.169.0/24
94.249.172.0/24
94.249.177.0/24
94.249.233.0/24
94.249.238.0/24
94.249.245.0/24
178.18.144.0/24
Signature Algorithm: sha256WithRSAEncryption
98:05:98:ba:06:bf:e4:8d:c4:27:ad:89:a0:74:99:8f:fe:8d:
ad:d4:69:bd:13:ac:6d:65:4b:cb:c7:17:b2:26:62:b0:e8:27:
b7:f6:7b:4f:42:06:e7:77:1b:17:26:a2:a7:7f:86:9d:c1:03:
60:70:f0:1e:3c:b3:36:7b:07:f5:3e:c1:b4:50:32:14:91:9a:
c1:15:29:47:db:c4:06:01:ed:d9:d9:22:d4:42:4b:f7:4d:a8:
f0:c2:f4:1a:7b:08:c3:29:a0:89:b6:4c:b5:59:a4:8c:f9:b6:
04:2a:74:1a:53:48:f9:a7:c9:3f:e7:95:c4:98:ce:62:cc:a2:
88:08:43:15:00:82:6b:89:72:71:79:b2:7c:6c:a2:41:6e:e7:
fb:b9:11:2c:53:d3:ff:b2:27:ed:a0:90:9f:fb:cb:bd:77:f2:
af:c5:be:c9:23:7b:f2:d1:a3:62:bc:ce:de:f9:1b:2c:a2:91:
87:0b:ba:b7:1d:5e:41:cb:19:62:89:08:25:96:3b:f7:4b:27:
28:d6:50:6b:a6:e1:86:69:dc:fd:93:50:6d:cd:90:96:fb:01:
98:44:95:46:7f:b0:80:31:46:37:d8:72:1e:75:8f:1a:5a:d4:
95:11:33:a8:e7:3a:4d:e8:26:0c:c9:f2:2d:a5:78:b9:c9:c7:
17:8d:40:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:09:45 2026 by rpki-client