Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/M3_g9fgfhsjEU8I8kmRzcfCe_Yk.roa
File: M3_g9fgfhsjEU8I8kmRzcfCe_Yk.roa (raw, json)
Hash identifier: qojM6iwqI4nVOVu975ajhGlgZfmWqge9SdcqtpuQ+yo=
Subject key identifier: 33:7F:E0:F5:F8:1F:86:C8:C4:53:C2:3C:92:64:73:71:F0:9E:FD:89
Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial: 01A0A0774A7853C992DF14EFDC898A54EAD0
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/M3_g9fgfhsjEU8I8kmRzcfCe_Yk.roa
Signing time: Mon 14 Sep 2026 15:09:27 +0000
ROA not before: Mon 14 Sep 2026 15:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1712
IP address blocks: 137.194.0.0/16 maxlen: 16
137.194.0.0/23 maxlen: 23
137.194.2.0/23 maxlen: 23
137.194.19.0/24 maxlen: 24
137.194.20.0/24 maxlen: 24
137.194.28.0/23 maxlen: 23
137.194.30.0/24 maxlen: 24
137.194.47.0/24 maxlen: 24
137.194.52.0/23 maxlen: 23
137.194.54.0/23 maxlen: 23
137.194.57.0/24 maxlen: 24
137.194.62.0/24 maxlen: 24
137.194.68.0/24 maxlen: 24
137.194.104.0/21 maxlen: 21
137.194.112.0/21 maxlen: 21
137.194.132.0/22 maxlen: 22
137.194.136.0/22 maxlen: 22
137.194.140.0/22 maxlen: 22
137.194.144.0/20 maxlen: 20
137.194.172.0/23 maxlen: 23
137.194.174.0/23 maxlen: 23
137.194.176.0/20 maxlen: 20
137.194.192.0/23 maxlen: 23
137.194.196.0/22 maxlen: 22
137.194.206.0/23 maxlen: 23
137.194.216.0/21 maxlen: 21
137.194.224.0/21 maxlen: 21
137.194.240.0/20 maxlen: 20
2a04:8ec0::/48 maxlen: 48
2a04:8ec0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:77:4a:78:53:c9:92:df:14:ef:dc:89:8a:54:ea:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
Validity
Not Before: Sep 14 15:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=337fe0f5f81f86c8c453c23c92647371f09efd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:b8:b9:64:0d:f1:52:0a:12:d1:46:cd:6c:
17:87:c8:21:a2:64:1d:c5:f2:19:d0:77:aa:03:7b:
e4:7e:bc:f1:fd:50:8b:bd:fe:77:72:4f:79:ae:77:
03:9e:54:2e:6e:93:cb:74:85:0a:81:80:b3:59:5f:
1e:f7:4b:66:ec:54:a5:38:d5:b2:aa:71:6e:90:8e:
3f:29:3d:51:89:3f:08:81:7c:93:f9:64:62:40:43:
55:fa:f4:c2:86:b8:0b:8f:cb:1a:e7:d3:6e:30:df:
b6:90:f3:a9:52:1b:25:ea:78:9e:30:11:b9:77:f1:
f5:d9:64:fa:4d:6e:37:64:2d:91:72:f8:bd:ac:4e:
85:74:b4:87:e3:a2:09:eb:9b:54:26:14:79:5a:23:
e6:f2:a7:90:ee:6e:78:15:e8:38:d8:7f:dd:f2:3e:
62:f2:44:dd:fa:bb:8b:4c:ef:5e:5c:e0:61:9c:9c:
8e:7f:2c:c3:6f:1b:e7:91:09:7a:32:fb:0c:4d:81:
91:55:cf:88:94:42:b8:ce:1a:8e:a5:a7:37:ab:e9:
65:2b:86:e1:a5:f5:1b:a0:3b:1c:7e:95:f0:cb:37:
99:3d:77:e3:16:7f:6d:00:6a:30:23:ba:c0:16:6d:
06:18:18:46:f0:63:e6:d5:d2:40:5b:c8:ad:13:ab:
93:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7F:E0:F5:F8:1F:86:C8:C4:53:C2:3C:92:64:73:71:F0:9E:FD:89
X509v3 Authority Key Identifier:
keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/M3_g9fgfhsjEU8I8kmRzcfCe_Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.194.0.0/16
IPv6:
2a04:8ec0::/47
Signature Algorithm: sha256WithRSAEncryption
ae:04:dd:d2:af:31:de:d2:a3:5a:9d:db:f3:b0:87:e1:e7:49:
79:ba:f6:f8:de:eb:84:2a:95:8c:ec:ed:4d:5d:42:ff:5b:c6:
31:bf:4c:1c:8d:81:95:67:74:42:1b:c3:e0:66:9e:f3:75:02:
4d:0a:14:46:4e:24:e2:2d:b3:14:17:ca:66:72:96:2a:17:46:
a9:b7:3a:b6:4b:79:4d:99:0a:a6:54:67:7b:c0:26:dc:c3:32:
3b:da:b3:34:ed:2f:da:9e:cc:f0:90:3f:e7:e4:6e:34:97:da:
79:3b:a5:64:50:76:5c:5e:af:24:c2:32:f8:e0:c1:ed:28:48:
4c:16:8a:d1:56:31:94:96:ad:53:60:97:d5:62:ff:af:9f:0b:
c4:e7:74:98:08:62:4c:21:75:1c:71:9e:d9:b6:9f:da:bf:97:
7a:cb:4b:80:da:94:72:f6:54:b6:25:2c:fa:4d:1a:0b:17:37:
eb:80:23:7a:9d:ae:a2:ea:57:5a:54:11:52:0a:93:d9:06:9a:
9a:a1:ca:99:34:3e:08:8f:77:61:73:55:fc:d0:02:a0:7e:5d:
66:59:e2:3b:12:1e:11:22:fc:c3:59:47:85:23:8b:e8:00:86:
25:ba:d0:db:ab:bd:11:e3:79:73:d6:52:bd:11:28:d0:89:9f:
19:4d:4c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:37 2026 by rpki-client