Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/M2zIxC99QbRxfnET-6NXsK5UatI.roa
File: M2zIxC99QbRxfnET-6NXsK5UatI.roa (raw, json)
Hash identifier: rntTwdXiHDwjJTZclnHejjzBJUzAiOfJIRV0G//u/Fo=
Subject key identifier: 33:6C:C8:C4:2F:7D:41:B4:71:7E:71:13:FB:A3:57:B0:AE:54:6A:D2
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 019B7F154B4C99F9BABCDAC4381CBF504AFC
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/M2zIxC99QbRxfnET-6NXsK5UatI.roa
Signing time: Fri 02 Jan 2026 14:21:00 +0000
ROA not before: Fri 02 Jan 2026 14:21:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42035
IP address blocks: 185.199.140.0/22 maxlen: 22
2a0b:2b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:4b:4c:99:f9:ba:bc:da:c4:38:1c:bf:50:4a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Jan 2 14:21:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=336cc8c42f7d41b4717e7113fba357b0ae546ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:82:a3:99:41:74:b3:06:82:9c:64:8e:a6:94:
25:63:11:e2:a3:f7:9a:df:b2:44:c3:82:72:30:26:
1f:a1:c0:8e:c9:ec:0b:70:64:d1:9d:5e:97:49:f9:
0c:f2:19:fb:ef:6a:66:70:26:89:c8:c0:15:5b:06:
97:6a:48:38:6a:4a:b3:fd:51:12:25:07:b0:5b:8e:
bc:01:56:c3:b2:78:9b:da:8f:d8:db:a7:87:b7:1c:
76:60:66:20:43:4f:6d:34:c1:ff:0e:2b:b8:53:e9:
f0:60:9a:c4:22:17:b8:f1:04:9b:50:bb:2d:b6:cf:
7b:8f:de:ca:8d:14:62:02:4a:44:b2:60:0a:9e:3b:
8f:db:88:dd:ba:23:df:e7:2b:a9:8b:92:41:e8:3e:
fe:2b:b4:03:aa:89:47:0b:26:eb:10:2c:3d:10:80:
80:f2:48:91:1d:ae:15:58:41:0d:6f:98:51:55:6f:
77:b0:7a:10:cb:c9:74:c0:bf:bb:64:2d:15:ef:7c:
e4:33:9a:20:b3:68:41:29:3d:8c:20:c3:33:5c:2a:
58:19:f1:1c:0c:72:60:fd:76:18:b7:ba:c6:64:27:
a2:af:9d:79:c1:c9:4c:fe:b8:31:5d:0c:c4:1f:50:
06:e4:2a:63:f2:0a:40:0d:f8:52:1f:37:77:2c:f9:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6C:C8:C4:2F:7D:41:B4:71:7E:71:13:FB:A3:57:B0:AE:54:6A:D2
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/M2zIxC99QbRxfnET-6NXsK5UatI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.140.0/22
IPv6:
2a0b:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
39:d4:56:92:80:29:72:7c:c5:a6:e2:e8:52:c5:2c:03:24:99:
d4:ed:b1:b5:19:47:53:f0:4d:65:ba:ac:35:e2:85:44:63:0a:
73:e7:0b:b6:9f:c6:c2:4c:c6:dd:53:fb:d9:63:ce:af:61:a7:
45:30:aa:b5:9a:fd:7d:07:f8:47:f0:2a:5f:a2:fb:cf:f2:8d:
cd:0f:ad:5a:37:95:24:bb:15:ef:19:0a:29:f2:73:b1:48:ea:
fa:a9:dc:bb:5d:57:1d:7e:b8:78:1d:f9:53:11:99:2d:48:68:
c8:b7:a4:27:0f:d9:ee:a6:50:66:fc:83:24:34:e5:57:7e:c3:
69:c0:b2:36:46:72:97:a4:a4:80:c0:b6:33:c6:b6:ac:d3:98:
35:e3:df:22:e2:5c:df:59:fb:d0:cb:12:f6:47:8b:36:59:61:
64:9d:d3:74:8f:24:4a:83:70:f3:85:3a:d1:d2:31:4e:c7:53:
d1:a5:74:50:e3:0a:52:98:6f:30:a2:10:f6:7f:e2:96:75:0d:
45:e1:ed:14:25:29:d0:02:ff:b4:39:1d:a2:bf:85:3e:ba:1f:
08:a1:56:6f:1b:83:30:88:62:22:53:e1:8b:04:68:3a:4b:d8:
16:b5:17:32:80:f8:12:e3:8c:db:28:b8:61:c1:ef:e6:69:df:
a2:4d:83:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:13:26 2026 by rpki-client