Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/M9KT4OPTqeZ3tbB5Yw_-6p5AP4M.roa
File: M9KT4OPTqeZ3tbB5Yw_-6p5AP4M.roa (raw, json)
Hash identifier: 4TKndIvDB4Sw7bsQeB2cpG3ywgWnyRb3WdHUGpMtbw0=
Subject key identifier: 33:D2:93:E0:E3:D3:A9:E6:77:B5:B0:79:63:0F:FE:EA:9E:40:3F:83
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A0906E1127DE12966F836FA4B826FF4C76
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/M9KT4OPTqeZ3tbB5Yw_-6p5AP4M.roa
Signing time: Fri 11 Sep 2026 12:25:27 +0000
ROA not before: Fri 11 Sep 2026 12:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204457
IP address blocks: 153.56.226.0/24 maxlen: 24
153.56.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:6e:11:27:de:12:96:6f:83:6f:a4:b8:26:ff:4c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Sep 11 12:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33d293e0e3d3a9e677b5b079630ffeea9e403f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b7:d6:7c:d5:ce:5d:09:f7:0e:0c:82:73:3f:
fa:2b:5c:85:f8:0b:10:09:2d:ed:3c:77:16:65:c0:
0d:63:09:22:15:57:78:e9:b8:c5:0b:47:b4:08:9f:
e5:39:e4:c7:c9:03:b9:7e:aa:11:dc:9c:63:e0:01:
94:dd:d4:fb:a6:4b:ec:da:a7:5a:f6:b9:64:b2:79:
6c:83:a6:67:1a:a6:33:da:7e:b0:b2:65:aa:a9:2b:
99:27:7a:3e:c8:ed:16:35:ad:85:2a:fb:e4:21:c6:
7e:02:df:d2:f7:9e:19:be:4e:63:46:de:11:83:cf:
f8:8e:82:46:53:d9:84:fd:ad:1f:17:7e:ad:45:55:
36:a4:fd:d9:2c:66:4f:8e:d7:7b:ff:ff:a7:fa:28:
d3:a4:9e:3e:3c:e0:b9:5d:0a:77:6e:b8:b6:4e:f0:
10:78:8b:73:be:3d:85:8a:19:7d:c9:85:78:0d:63:
5b:4a:21:c9:3c:49:6c:62:1f:10:52:ee:63:c5:9e:
6f:35:c3:4d:72:bb:63:e4:7b:7d:be:41:8e:3b:15:
d8:ed:d2:7f:ce:75:d6:a1:f2:11:52:eb:18:18:e6:
c0:84:f9:12:27:5c:7b:77:f4:45:23:1f:88:a5:3e:
07:3a:a6:8c:ae:6e:f1:8c:63:a8:8d:d2:6e:2c:d3:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D2:93:E0:E3:D3:A9:E6:77:B5:B0:79:63:0F:FE:EA:9E:40:3F:83
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/M9KT4OPTqeZ3tbB5Yw_-6p5AP4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.226.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:07:fd:f9:b8:e0:ac:8a:10:58:ca:53:19:28:ea:c2:c0:c3:
47:0c:cb:79:bd:e3:f5:38:90:09:17:b1:ab:e9:df:64:23:d9:
30:fc:84:ab:64:8a:82:4b:03:09:88:34:58:2e:0c:7c:93:cc:
d9:b1:c6:52:3d:41:23:7a:46:8e:30:f4:6b:68:8f:91:00:1a:
c5:64:57:9c:3e:4e:9b:9d:db:40:79:4c:72:8a:d1:d1:af:ef:
6a:cb:e7:84:3c:51:3b:2a:55:98:92:b5:c0:5e:83:0e:20:17:
ff:18:c5:54:39:f8:dc:cd:2c:a1:88:fb:7e:40:6b:a7:c7:fe:
58:b6:ca:3c:1f:97:36:fb:6c:63:f6:2c:9d:63:ae:c3:28:4a:
ae:93:d5:38:6d:0e:a3:43:cd:fa:e2:40:7d:07:bc:a3:e4:82:
6e:ce:73:01:83:22:9f:3d:c4:81:84:23:9b:54:56:79:a3:11:
26:89:70:11:7e:65:e3:c8:0f:6e:e2:46:97:e5:52:d5:b5:1e:
c2:99:6c:50:7e:a5:24:02:1c:0e:72:9a:76:a6:8e:7f:bf:a3:
fe:e8:83:e3:a8:27:2d:d2:b8:21:6d:77:cb:4f:19:95:ec:a0:
f0:5a:de:05:57:dc:d7:9a:b8:68:ad:3c:36:b6:ff:18:f8:50:
57:e9:18:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:09 2026 by rpki-client