Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/M_Pe4kPwufyP_7D5pkcCD9_LCdY.roa
File: M_Pe4kPwufyP_7D5pkcCD9_LCdY.roa (raw, json)
Hash identifier: xe4YBSaFNrSAbOu74w58XW4Su4kogyqAQm6dN9suUj4=
Subject key identifier: 33:F3:DE:E2:43:F0:B9:FC:8F:FF:B0:F9:A6:47:02:0F:DF:CB:09:D6
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 019C9448384F6883FB9B4DEEB67018BCAF53
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/M_Pe4kPwufyP_7D5pkcCD9_LCdY.roa
Signing time: Wed 25 Feb 2026 10:11:26 +0000
ROA not before: Wed 25 Feb 2026 10:11:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208414
IP address blocks: 45.138.104.0/24 maxlen: 29
45.138.105.0/24 maxlen: 29
45.138.106.0/24 maxlen: 24
45.138.107.0/24 maxlen: 24
89.221.208.0/24 maxlen: 24
89.221.209.0/24 maxlen: 24
89.221.210.0/24 maxlen: 24
89.221.211.0/24 maxlen: 24
185.8.236.0/22 maxlen: 24
2a0e:acc0::/29 maxlen: 48
2a0e:acc0:ac00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:48:38:4f:68:83:fb:9b:4d:ee:b6:70:18:bc:af:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Feb 25 10:11:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33f3dee243f0b9fc8fffb0f9a647020fdfcb09d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:33:ac:52:a1:16:df:26:46:be:4d:9a:25:
fd:4f:24:38:69:1b:57:46:95:55:26:61:29:a3:37:
ed:0e:71:eb:a3:09:e0:bf:e4:e3:92:b0:22:13:e2:
20:94:fd:85:96:63:c7:e6:2a:61:68:e0:7f:40:4e:
9d:c2:6d:bd:9b:8c:1a:13:30:a6:93:ee:d8:54:a6:
8c:5f:15:a5:cf:cb:e0:ce:f1:60:a2:e5:d0:b4:21:
25:e6:f3:26:16:3f:57:58:2a:03:1f:2c:28:e7:1c:
49:9e:21:49:82:4f:8c:7d:10:c3:7f:c7:6a:ed:df:
11:99:11:03:69:8b:93:fc:c2:72:75:32:3f:f1:72:
af:82:5e:e1:f9:63:14:51:f4:9e:db:a3:35:e5:34:
14:b7:ad:30:36:1c:40:5c:5d:83:53:01:1d:72:ab:
86:0c:37:b7:1b:a4:0d:4b:5f:8b:50:9f:e6:10:b2:
21:1e:70:66:ad:ee:97:bc:7b:15:dd:af:f5:d8:ec:
95:3f:6d:08:f1:9c:d4:d6:e6:83:f4:69:ec:b6:ba:
75:c6:8c:79:dc:cb:0e:63:8e:e5:2f:40:75:9b:bd:
b5:2b:b4:9d:b8:33:c6:9d:a3:39:28:97:53:ce:43:
d7:fa:34:c2:c0:15:fe:89:f4:97:17:75:f9:b3:1a:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F3:DE:E2:43:F0:B9:FC:8F:FF:B0:F9:A6:47:02:0F:DF:CB:09:D6
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/M_Pe4kPwufyP_7D5pkcCD9_LCdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.104.0/22
89.221.208.0/22
185.8.236.0/22
IPv6:
2a0e:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
59:5f:8d:97:2f:97:1b:fb:fd:4d:61:c6:24:53:c0:69:94:28:
af:e0:ed:b5:01:57:c1:44:e8:dd:44:2b:0f:95:03:a1:0f:01:
6c:61:cd:bd:41:f0:25:ce:77:0e:61:75:64:f0:eb:41:08:8a:
61:bb:71:ba:ca:5e:5e:7e:a2:33:13:91:13:e6:16:29:46:ac:
79:0c:c2:9b:b6:90:2b:c2:2e:9c:ec:08:3e:64:76:60:20:60:
ba:25:8b:22:69:cf:17:3b:53:5b:41:25:f9:13:23:b5:26:9a:
e4:b1:45:05:18:42:51:05:5d:fa:f3:bc:02:75:c3:38:b2:52:
7b:a5:8c:2c:66:6f:9d:81:46:06:5a:02:e3:a1:c7:54:51:f2:
8d:c9:30:e2:22:51:6b:7e:f8:d8:6f:b8:f8:b2:ad:82:43:a7:
25:75:d9:01:da:54:9b:a1:6e:e9:2f:27:f8:ad:97:86:cf:9d:
79:b1:37:8b:d1:ff:9b:23:4d:6a:60:98:71:43:86:88:f7:c0:
f3:d7:25:cd:d3:f0:32:cd:48:b5:33:f4:36:1e:92:5a:b7:7d:
ce:9c:80:21:d1:ba:97:48:1b:26:02:08:58:72:ee:57:1b:18:
98:cd:1f:5c:8b:4f:b6:67:9a:b7:e6:d1:c2:4b:7e:79:75:9e:
1f:65:2a:23
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZyUSDhPaIP7m03utnAYvK9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjlkZjdlOThmNmYzOWZlMmJhNDAyMmRhMjc3ZDI4MTk4
MjgwMjEwHhcNMjYwMjI1MTAxMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2YzZGVlMjQzZjBiOWZjOGZmZmIwZjlhNjQ3MDIwZmRmY2IwOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfAzrFKhFt8mRr5NmiX9TyQ4aRtX
RpVVJmEpozftDnHrowngv+TjkrAiE+IglP2FlmPH5iphaOB/QE6dwm29m4waEzCm
k+7YVKaMXxWlz8vgzvFgouXQtCEl5vMmFj9XWCoDHywo5xxJniFJgk+MfRDDf8dq
7d8RmREDaYuT/MJydTI/8XKvgl7h+WMUUfSe26M15TQUt60wNhxAXF2DUwEdcquG
DDe3G6QNS1+LUJ/mELIhHnBmre6XvHsV3a/12OyVP20I8ZzU1uaD9Gnstrp1xox5
3MsOY47lL0B1m721K7SduDPGnaM5KJdTzkPX+jTCwBX+ifSXF3X5sxqBJwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFDPz3uJD8Ln8j/+w+aZHAg/fywnWMB8GA1UdIwQY
MBaAFKW5336Y9vOf4rpAItonfSgZgoAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAt
MGFjN2I3ZWRlNDJiLzEvTV9QZTRrUHd1ZnlQXzdENXBrY0NEOV9MQ2RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAtMGFjN2I3ZWRlNDJi
LzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLYpoAwQC
Wd3QAwQCuQjsMA0EAgACMAcDBQMqDqzAMA0GCSqGSIb3DQEBCwUAA4IBAQBZX42X
L5cb+/1NYcYkU8BplCiv4O21AVfBROjdRCsPlQOhDwFsYc29QfAlzncOYXVk8OtB
CIphu3G6yl5efqIzE5ET5hYpRqx5DMKbtpArwi6c7Ag+ZHZgIGC6JYsiac8XO1Nb
QSX5EyO1JprksUUFGEJRBV3687wCdcM4slJ7pYwsZm+dgUYGWgLjocdUUfKNyTDi
IlFrfvjYb7j4sq2CQ6clddkB2lSboW7pLyf4rZeGz515sTeL0f+bI01qYJhxQ4aI
98Dz1yXN0/AyzUi1M/Q2HpJat33OnIAh0bqXSBsmAghYcu5XGxiYzR9ci0+2Z5q3
5tHCS355dZ4fZSoj
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:05:08 2026 by rpki-client