Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/pyMmPiyFBVEcpAFu8BS9uRp5Uw8.roa
File: pyMmPiyFBVEcpAFu8BS9uRp5Uw8.roa (raw, json)
Hash identifier: C8etRVkdvpzZnpJ/5uCibkOtHku0DBM1Z5FvpwY5MNY=
Subject key identifier: A7:23:26:3E:2C:85:05:51:1C:A4:01:6E:F0:14:BD:B9:1A:79:53:0F
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019C479C0476EBA5C1A5E11F650DAF47F9AB
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/pyMmPiyFBVEcpAFu8BS9uRp5Uw8.roa
Signing time: Tue 10 Feb 2026 12:52:12 +0000
ROA not before: Tue 10 Feb 2026 12:52:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 109.229.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:9c:04:76:eb:a5:c1:a5:e1:1f:65:0d:af:47:f9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Feb 10 12:52:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a723263e2c8505511ca4016ef014bdb91a79530f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:0a:3c:63:5f:99:97:0c:b2:ae:81:5b:35:
9a:a7:92:27:d4:99:91:08:5e:69:8e:ee:65:f0:f6:
1b:77:fa:55:4e:39:26:42:bd:2a:60:73:d7:55:be:
f4:1a:8f:a2:1a:f6:95:9a:39:d9:65:ec:43:81:ba:
b3:12:a4:88:80:f9:a4:e1:d1:85:1c:e2:34:fe:89:
2d:dd:5c:06:15:e5:e4:c4:15:de:1a:61:ae:e8:ff:
46:b3:91:4a:2c:2e:ac:16:61:d9:df:a9:6a:96:e8:
93:43:7f:95:53:e5:a8:0a:c5:2c:44:e4:33:e4:b9:
83:73:31:67:96:51:dc:fd:74:ab:c7:27:f5:5c:00:
65:d5:58:01:28:9f:76:86:b7:99:cb:5e:5b:80:78:
bf:fe:48:4d:e5:99:0e:c5:9b:04:12:b3:6e:f8:4e:
f2:b0:48:58:5a:79:84:fc:66:f1:23:ad:0d:af:6a:
b0:72:63:33:61:b3:09:56:ad:31:86:49:a4:2a:67:
2c:19:c0:d2:54:2e:69:61:c4:b2:1d:c2:e9:73:07:
be:a4:ef:fd:b0:77:e9:1c:b1:15:62:d1:39:26:a6:
31:a3:9c:da:4f:b0:d4:87:1f:5b:8e:c6:f0:56:9c:
c0:fb:7f:66:d0:00:d4:e8:68:4c:db:6e:73:f2:08:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:23:26:3E:2C:85:05:51:1C:A4:01:6E:F0:14:BD:B9:1A:79:53:0F
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/pyMmPiyFBVEcpAFu8BS9uRp5Uw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.216.0/23
Signature Algorithm: sha256WithRSAEncryption
29:4c:03:48:71:7a:a9:ab:91:d5:62:8c:1f:b8:57:3e:4f:e6:
de:9a:30:6c:58:4a:78:78:a6:06:d1:50:68:dd:04:72:c6:fb:
71:fd:80:99:39:66:22:96:f2:bc:a4:08:65:e4:65:72:0a:56:
8d:6f:62:38:35:72:e5:72:84:68:e4:3f:25:af:ec:78:8a:9a:
51:5a:2e:ca:c5:19:7c:86:1a:43:6d:3b:a0:7c:28:25:9f:60:
73:d8:f2:3f:82:dd:ce:d8:06:09:5f:6e:b5:a5:68:74:b2:02:
4e:a6:c6:f2:10:22:94:4f:a7:af:d2:d5:ee:b6:53:0e:75:4e:
59:72:a2:31:2e:14:e9:6e:24:a2:89:fd:cb:40:d3:21:c8:ac:
09:aa:ce:39:bb:05:20:72:0b:0c:e0:38:d1:d5:b1:b3:bf:b9:
35:65:49:51:2d:b6:02:db:c6:1a:4a:92:9c:19:45:ca:66:68:
da:3e:9f:34:66:7a:ec:5b:5c:89:3f:a7:e3:fb:f1:f7:56:66:
60:72:0e:cd:78:8e:c7:e2:35:dc:94:b8:85:bb:05:7b:0d:05:
73:c1:24:b4:64:62:09:2e:0b:6e:27:c5:83:2a:08:58:79:a5:
da:89:7b:a1:aa:85:23:36:9c:a6:be:55:3c:e7:3f:2f:26:4d:
15:3b:df:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:47:27 2026 by rpki-client