Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/m8DsMRRmqjUhbjdLK1P2fypd1lc.roa
File: m8DsMRRmqjUhbjdLK1P2fypd1lc.roa (raw, json)
Hash identifier: dRnaDsVjilKL4hnV0JTyurBqFfCG5m2Q/af7J+DYYf8=
Subject key identifier: 9B:C0:EC:31:14:66:AA:35:21:6E:37:4B:2B:53:F6:7F:2A:5D:D6:57
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 01A08048A9AAAE617518378168010BCAD4E5
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/m8DsMRRmqjUhbjdLK1P2fypd1lc.roa
Signing time: Tue 08 Sep 2026 09:10:40 +0000
ROA not before: Tue 08 Sep 2026 09:10:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 45.152.32.0/24 maxlen: 24
45.152.33.0/24 maxlen: 24
136.176.240.0/24 maxlen: 24
2a10:5a81::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:48:a9:aa:ae:61:75:18:37:81:68:01:0b:ca:d4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Sep 8 09:10:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bc0ec311466aa35216e374b2b53f67f2a5dd657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:8a:01:d3:6b:bd:3e:26:06:30:a1:68:f6:
9b:bc:4f:27:21:7b:29:6e:42:61:41:24:56:28:e6:
6d:4f:82:bc:0e:2e:37:78:2a:cd:01:ed:b7:78:09:
dc:f8:97:53:bd:21:22:cb:5b:4b:a9:5a:c3:e2:17:
ab:1b:30:ac:70:6b:e8:22:c1:de:40:80:2b:f8:37:
d8:50:d0:f2:e3:48:15:c8:5a:57:d7:54:09:a3:04:
ae:19:53:87:ea:67:4e:66:0c:04:1b:de:bf:a2:60:
8e:9e:7f:3b:de:b5:8b:b8:a2:1a:98:1b:97:6f:3a:
30:03:c2:18:f3:86:b7:0e:ba:2b:74:70:be:d3:c0:
48:6e:9c:69:c7:9d:e5:8a:da:74:b8:89:f1:9d:13:
58:ab:b5:7e:ae:f8:4b:49:d6:fa:97:d4:4f:ab:8f:
e0:b9:cc:97:7e:cc:2f:81:26:fd:05:8f:ff:94:bd:
b0:c0:3a:b9:17:f2:4e:e1:a8:93:ae:3a:00:fc:e5:
3e:28:e4:10:c1:9b:4f:e5:62:f5:ea:59:e6:fc:73:
ac:a1:67:1c:a9:30:62:1f:bd:a8:77:45:b9:36:37:
fe:fb:0d:dd:fe:38:3c:e6:42:a1:a7:39:77:d1:31:
1d:a5:72:b4:e5:db:df:50:70:8e:91:f4:d5:08:1e:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C0:EC:31:14:66:AA:35:21:6E:37:4B:2B:53:F6:7F:2A:5D:D6:57
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/m8DsMRRmqjUhbjdLK1P2fypd1lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.32.0/23
136.176.240.0/24
IPv6:
2a10:5a81::/32
Signature Algorithm: sha256WithRSAEncryption
04:c0:fa:c0:99:eb:ff:ed:41:c5:c2:09:ed:02:03:37:ef:ab:
85:c1:b8:17:96:0e:a5:a8:69:22:d9:93:49:99:3a:21:95:07:
8b:66:b2:f8:0e:d1:da:28:78:1c:24:6c:62:22:49:74:70:51:
34:cd:78:d6:21:42:fa:7c:96:2e:46:13:63:6f:e0:ed:42:09:
d0:84:c0:76:b8:c6:75:5e:eb:43:1a:90:5e:be:58:f9:de:52:
43:36:45:41:55:59:43:97:83:24:41:3b:bb:a2:50:3f:61:75:
fb:5e:c4:9f:22:00:c3:a7:13:49:dc:2c:21:c1:0f:ad:46:64:
39:43:f0:fd:9f:72:48:e6:ca:d8:9c:bc:66:77:f8:4f:d3:e9:
14:a9:1e:5b:77:dc:fe:73:36:a4:cb:cb:2b:7e:d4:43:09:a1:
02:7a:50:08:d6:0f:d9:fd:ce:a6:12:1e:6d:ae:5b:07:27:cd:
f5:e0:c4:c4:f3:a2:ea:5f:2d:5d:44:b4:ad:84:81:d1:71:cc:
81:b2:4e:5e:07:cd:93:37:33:d5:19:38:a6:0f:0e:57:32:73:
76:13:4b:85:ee:b6:6c:75:85:c4:8e:c2:0c:39:cb:7f:81:95:
f6:87:f3:2c:d0:3f:0c:d3:11:e7:d4:ef:fb:fe:a7:e6:a2:a4:
22:5f:72:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:30 2026 by rpki-client