Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M9s051bGfYFJKtnhSXGreoRN-MQ.roa
File: M9s051bGfYFJKtnhSXGreoRN-MQ.roa (raw, json)
Hash identifier: Mnv8Zc8IBiysvyVE1aw6q0vAM05H0zDwgmaHNQnJ7kM=
Subject key identifier: 33:DB:34:E7:56:C6:7D:81:49:2A:D9:E1:49:71:AB:7A:84:4D:F8:C4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A09D3799D8552FAF0EB69216DE1AED0D03
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M9s051bGfYFJKtnhSXGreoRN-MQ.roa
Signing time: Mon 14 Sep 2026 00:01:01 +0000
ROA not before: Mon 14 Sep 2026 00:01:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 93.152.68.0/24 maxlen: 24
93.152.74.0/24 maxlen: 24
93.152.78.0/24 maxlen: 24
93.152.82.0/24 maxlen: 24
93.152.88.0/24 maxlen: 24
93.152.105.0/24 maxlen: 24
93.152.108.0/24 maxlen: 24
93.152.111.0/24 maxlen: 24
93.152.123.0/24 maxlen: 24
93.152.126.0/24 maxlen: 24
109.174.236.0/22 maxlen: 22
195.172.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9d:37:99:d8:55:2f:af:0e:b6:92:16:de:1a:ed:0d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 14 00:01:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33db34e756c67d81492ad9e14971ab7a844df8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:41:a8:23:a6:50:a5:9e:0e:59:ad:d4:45:17:
66:2c:88:41:31:5f:2c:a5:fb:54:da:2c:e7:69:02:
c8:bd:a3:41:cd:1b:a8:6e:f3:4a:db:9f:ff:18:5c:
99:85:0a:f7:a7:34:86:d5:f8:87:b7:a3:30:97:d6:
7f:4f:c5:d3:d0:4b:fb:54:83:36:a7:78:54:73:a1:
63:0a:74:af:9f:9f:8c:a8:ec:1d:f8:da:a8:87:66:
90:f9:5c:ba:2b:f9:bb:95:55:95:74:e4:6d:25:4a:
18:e8:55:80:da:bf:af:ac:b0:c5:7e:77:8d:b6:cc:
84:5b:c1:d8:a9:60:4c:c6:74:72:26:0d:4b:26:39:
1c:80:89:bd:b1:e9:a0:72:da:03:92:af:f5:55:0c:
8b:48:40:05:4c:4d:b5:57:94:1b:bf:72:3c:4e:da:
bc:3b:c3:a8:a6:8d:96:67:61:37:aa:5e:ef:6e:7e:
ad:bf:4f:25:04:a1:49:b9:b2:4b:a4:c2:79:60:5b:
f9:46:50:c6:d0:31:29:e3:00:ee:e8:a3:26:66:54:
42:fa:35:44:af:6e:9e:93:61:a8:e9:98:25:a7:85:
2a:9d:46:69:18:6d:21:fc:34:06:be:fa:78:40:7e:
ab:40:50:cd:8f:1e:1e:75:e3:d1:0c:3d:90:39:78:
02:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DB:34:E7:56:C6:7D:81:49:2A:D9:E1:49:71:AB:7A:84:4D:F8:C4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M9s051bGfYFJKtnhSXGreoRN-MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.68.0/24
93.152.74.0/24
93.152.78.0/24
93.152.82.0/24
93.152.88.0/24
93.152.105.0/24
93.152.108.0/24
93.152.111.0/24
93.152.123.0/24
93.152.126.0/24
109.174.236.0/22
195.172.206.0/23
Signature Algorithm: sha256WithRSAEncryption
35:42:ba:b2:a5:f2:c9:ea:4f:b4:a1:78:11:b3:d9:b5:4d:5e:
d6:70:29:7e:a4:f8:2c:c1:39:82:63:02:40:fa:69:a7:f6:19:
14:8a:56:26:49:5e:8b:89:4d:38:e5:d1:28:36:70:5e:d5:bd:
ad:c8:2d:bc:60:04:36:d2:1f:a8:c4:ab:2c:3c:37:1a:76:de:
3c:74:91:22:63:50:ad:58:02:4e:e0:a7:41:cc:65:51:82:f9:
ec:4e:10:6b:6c:b8:cd:7a:f5:33:dc:ff:77:19:89:af:e6:23:
cc:e7:c5:75:da:7b:a2:9c:70:ff:0c:3c:19:ff:aa:6c:8e:f7:
c2:81:2e:57:56:15:8b:8d:92:c4:21:92:38:9e:92:f8:5e:44:
24:23:81:20:18:1a:ab:0b:3f:af:0c:52:2c:d0:ca:be:a2:e3:
58:97:67:65:2d:25:35:06:e8:eb:5e:9f:e0:00:68:49:b0:8e:
21:c8:61:c6:81:50:4a:05:ac:23:af:7d:42:0b:d7:41:66:ed:
db:c1:b7:02:07:2d:a8:8c:6f:0c:64:f1:95:f4:e8:e0:b1:80:
c2:ff:73:fc:f8:81:d4:f9:a0:b1:d0:50:26:71:eb:51:c0:61:
f3:98:1a:f9:82:36:5b:f5:9d:46:ef:6f:16:86:0d:e5:b2:58:
a7:4f:a8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:21:21 2026 by rpki-client