Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/M13mao2bVe6FxKIejri11pgwVas.roa
File: M13mao2bVe6FxKIejri11pgwVas.roa (raw, json)
Hash identifier: kCvmfurbnd4HhzweLeU+CzswSrqV1vjJjjxzhiTlz90=
Subject key identifier: 33:5D:E6:6A:8D:9B:55:EE:85:C4:A2:1E:8E:B8:B5:D6:98:30:55:AB
Certificate issuer: /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial: 01A18CC4E124BFAB11C78377980B8B53B484
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/M13mao2bVe6FxKIejri11pgwVas.roa
Signing time: Fri 30 Oct 2026 12:24:35 +0000
ROA not before: Fri 30 Oct 2026 12:24:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24958
IP address blocks: 37.200.112.0/21 maxlen: 21
93.91.16.0/20 maxlen: 20
109.73.112.0/20 maxlen: 20
109.73.112.0/24 maxlen: 24
109.73.124.0/23 maxlen: 23
176.65.64.0/21 maxlen: 21
185.10.12.0/22 maxlen: 22
213.129.64.0/19 maxlen: 19
213.129.84.0/24 maxlen: 24
2a00:1430::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:c4:e1:24:bf:ab:11:c7:83:77:98:0b:8b:53:b4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
Validity
Not Before: Oct 30 12:24:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=335de66a8d9b55ee85c4a21e8eb8b5d6983055ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:43:f6:a1:27:e0:76:59:74:e9:c0:56:90:
75:cb:1a:ea:f9:e7:66:ff:18:5e:e4:a0:95:02:a4:
ac:6d:08:29:c3:b5:5a:f5:b2:1c:c3:65:cb:00:24:
ae:52:8f:3f:01:1e:ee:f2:e2:dc:e5:26:30:ba:d6:
75:5c:54:28:90:92:af:56:95:a9:52:92:8d:29:ed:
34:e3:03:79:cb:30:c7:e9:7a:1e:a7:5e:d2:b1:b7:
43:16:e1:20:e1:9f:37:8a:20:eb:4c:c9:71:b6:a7:
1f:cb:41:c9:81:23:7d:e3:a0:54:84:00:b5:64:66:
ac:bd:99:68:dd:58:8f:22:92:a5:19:d1:a2:d7:12:
72:95:3a:21:7a:02:e3:28:be:75:e1:dc:9c:a8:c1:
13:4a:a1:ec:d7:b6:94:26:12:c8:da:f0:8b:63:07:
84:0e:b7:ca:d9:23:1b:53:bc:dc:9a:e0:6a:c2:4c:
e1:44:ae:49:4a:12:b3:7e:69:66:9e:17:78:46:62:
de:02:34:db:36:d7:95:85:0e:84:d4:3f:0f:38:69:
20:7f:ab:4b:53:93:bf:03:a9:8e:ed:9d:de:95:0a:
99:1c:84:c1:65:d3:bd:5f:16:38:b6:23:12:e7:8d:
65:ad:3d:36:64:16:51:1f:53:17:17:85:8b:63:1e:
91:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5D:E6:6A:8D:9B:55:EE:85:C4:A2:1E:8E:B8:B5:D6:98:30:55:AB
X509v3 Authority Key Identifier:
keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/M13mao2bVe6FxKIejri11pgwVas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.200.112.0/21
93.91.16.0/20
109.73.112.0/20
176.65.64.0/21
185.10.12.0/22
213.129.64.0/19
IPv6:
2a00:1430::/32
Signature Algorithm: sha256WithRSAEncryption
72:c3:39:e5:c2:23:41:8f:21:9a:76:c9:13:f7:56:3c:a8:7d:
88:79:da:7e:9e:44:f7:be:21:de:a4:e5:78:4f:86:1f:1e:70:
9e:07:9a:c8:4b:2e:c2:65:e4:a6:70:46:55:e8:32:ce:61:b4:
89:2e:77:2d:7e:83:4c:d9:37:33:3c:8b:29:c6:b4:4b:3d:fa:
ea:39:2f:3f:a2:0d:4f:0e:c7:d4:4d:d9:9d:38:c9:aa:3d:93:
09:b0:e2:c2:fd:ce:2b:a7:9a:63:0b:c5:a0:d8:5f:fa:ca:09:
8f:c3:85:40:86:a3:ae:dd:7f:da:69:94:9d:b7:ce:68:da:f4:
fb:3c:2a:bd:7c:25:be:6f:16:a0:09:3b:ee:c5:90:5f:ed:98:
c2:01:6d:b2:db:92:83:64:4f:d8:7c:6e:dc:82:6d:d3:6c:c9:
7e:79:98:50:81:df:c8:1c:09:5f:13:ce:f7:88:c7:16:5f:94:
a6:e0:c8:97:f0:2e:6c:9d:62:2b:2f:ba:29:a0:ff:5b:46:66:
4a:b3:34:14:ea:b3:97:fc:c6:57:3c:0a:5d:a8:dd:65:71:1b:
99:64:43:ce:78:21:0c:0b:45:6d:ec:2a:9d:0b:35:f8:4d:ca:
bf:06:d0:43:8c:12:83:fc:10:89:c5:9e:2e:6d:6f:48:f0:65:
2c:a4:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:20:13 2026 by rpki-client