Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/m3t-0Hv26IwOGuurlSyOeHqwSIE.roa
File: m3t-0Hv26IwOGuurlSyOeHqwSIE.roa (raw, json)
Hash identifier: a2kbBzW7rvDNZYE6hJOHPO0qraK0Q8B1MIkCERSYzD8=
Subject key identifier: 9B:7B:7E:D0:7B:F6:E8:8C:0E:1A:EB:AB:95:2C:8E:78:7A:B0:48:81
Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial: 01A0A0774BCAE9A8A7E3C40424C7B4F135BF
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/m3t-0Hv26IwOGuurlSyOeHqwSIE.roa
Signing time: Mon 14 Sep 2026 15:09:27 +0000
ROA not before: Mon 14 Sep 2026 15:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199116
IP address blocks: 137.194.8.0/22 maxlen: 22
195.14.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:77:4b:ca:e9:a8:a7:e3:c4:04:24:c7:b4:f1:35:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
Validity
Not Before: Sep 14 15:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b7b7ed07bf6e88c0e1aebab952c8e787ab04881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:0f:b1:80:66:74:2b:d0:c2:85:86:a4:92:
ee:fd:24:78:31:8b:46:60:55:d0:75:d8:e1:06:48:
54:04:6d:de:b2:0c:95:63:c9:cf:e1:4b:28:99:36:
1a:f8:19:95:fa:46:54:e6:cf:ff:e6:7d:06:11:2d:
43:32:64:aa:cc:a6:0b:2f:2a:6b:43:a8:6b:3f:e8:
cf:98:65:5f:58:75:80:ff:83:e7:1b:7d:4e:07:c3:
87:6b:3c:8d:1e:c0:d7:5f:67:b4:a3:d9:51:5f:78:
e3:5a:80:7e:a4:a9:22:99:3a:82:80:eb:ab:c4:cb:
f8:c8:8d:ce:e4:10:87:c0:c7:d6:a3:ee:74:e7:25:
96:b1:89:89:f1:5d:32:4a:97:0a:7a:1e:31:84:3f:
8f:94:54:72:4a:d4:c1:58:ef:f6:b1:73:14:18:2f:
c6:36:3f:5b:fe:06:14:f8:b1:da:7e:46:5b:fb:b0:
c1:86:fc:ee:b3:c1:60:13:14:1c:bf:11:15:14:be:
69:58:11:a7:96:4f:0d:02:a3:8a:d0:c1:16:a2:aa:
c3:1d:95:52:7f:d5:f0:57:4c:79:00:89:6a:a7:63:
97:1a:2b:98:cd:90:9d:94:ab:73:3e:af:4c:8d:e0:
ee:de:08:1d:f9:64:c7:43:ce:3d:fa:74:6e:a3:bf:
72:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7B:7E:D0:7B:F6:E8:8C:0E:1A:EB:AB:95:2C:8E:78:7A:B0:48:81
X509v3 Authority Key Identifier:
keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/m3t-0Hv26IwOGuurlSyOeHqwSIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.194.8.0/22
195.14.28.0/24
Signature Algorithm: sha256WithRSAEncryption
02:6a:a7:e8:5b:07:eb:06:08:f4:3d:d7:5b:85:34:94:0d:8d:
bf:26:5a:fd:3f:df:95:e2:e6:8a:46:d0:b4:b4:50:ff:a3:69:
b1:30:8c:aa:d4:cf:23:41:e5:d4:30:2c:87:99:db:e0:96:07:
e9:6d:e9:aa:1b:c7:81:f1:a9:1b:76:e6:f1:6b:12:42:15:54:
f8:6b:83:55:24:14:d0:df:f1:7b:3e:3d:b9:69:a1:a7:a2:fe:
a8:9d:a3:d0:4e:ed:d7:c9:2c:44:ad:98:6e:07:6c:56:0e:3c:
df:73:40:21:88:8e:0a:53:b6:9c:9b:0e:3b:77:6a:14:14:3d:
c3:c4:e4:5a:d7:30:41:23:22:b1:cb:d7:6f:b2:2a:ee:00:96:
58:db:eb:c1:a4:18:3b:60:82:31:1e:7d:75:fc:e2:11:d0:0e:
97:a7:c2:b5:c4:67:ef:f4:8f:95:b1:04:da:b8:1b:2a:16:84:
40:98:4e:7f:b2:96:11:11:a9:7b:43:28:74:dc:76:e2:9a:11:
2a:4e:12:f4:49:74:33:aa:cb:40:67:1e:59:e0:97:cd:85:58:
e8:c5:4d:6c:ae:8f:39:3b:0f:91:3b:a1:d8:42:e7:86:9f:4d:
a5:8f:dd:da:91:09:ed:67:e1:3c:92:e6:75:65:4f:c6:96:ed:
4c:e6:26:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:22:44 2026 by rpki-client