Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/M8eEfpXb-KitnNBcGOPoDAO-6uk.roa
File: M8eEfpXb-KitnNBcGOPoDAO-6uk.roa (raw, json)
Hash identifier: zXjD13VY9WIWSWZntHzyFG6M/omZidB1iwBjJbQNrPA=
Subject key identifier: 33:C7:84:7E:95:DB:F8:A8:AD:9C:D0:5C:18:E3:E8:0C:03:BE:EA:E9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1D38A6A2FF2DED7501C752087B0353E92
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/M8eEfpXb-KitnNBcGOPoDAO-6uk.roa
Signing time: Fri 13 Nov 2026 06:13:45 +0000
ROA not before: Fri 13 Nov 2026 06:13:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58212
IP address blocks: 5.175.161.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
2a02:2fc0:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d3:8a:6a:2f:f2:de:d7:50:1c:75:20:87:b0:35:3e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 13 06:13:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33c7847e95dbf8a8ad9cd05c18e3e80c03beeae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:e2:0b:77:b6:fc:5a:8d:82:a5:1a:ee:57:
ff:85:7b:e3:7e:93:13:9a:37:32:d9:60:e2:af:4a:
a6:5d:6b:05:c3:a4:99:d0:92:71:20:33:4d:ab:8d:
15:6d:fc:de:a8:44:d9:8e:93:5e:db:fb:e9:28:ab:
c0:ef:f9:e8:d0:51:92:a1:1f:93:a3:fe:92:69:61:
19:41:bd:72:4f:82:84:87:36:a4:81:ff:e8:bd:6d:
c1:02:0e:13:7d:8a:74:10:92:56:74:2a:08:c3:da:
33:cf:49:9c:bd:e3:f1:cb:f1:b7:54:2b:43:72:99:
63:46:05:05:4a:d2:2b:de:0b:6c:de:64:29:85:17:
6d:05:0e:a4:20:e6:e2:6d:35:44:44:b9:52:d3:74:
95:37:c4:7d:a4:79:8c:c2:7a:ea:83:70:7c:9b:ed:
22:ca:cc:31:4c:76:ef:57:11:b7:ec:d1:19:12:f4:
64:52:16:ea:3f:b8:79:9c:e4:86:96:95:ed:e7:99:
c5:db:ad:7e:d4:cc:b3:0b:6a:16:1a:21:4c:5a:e9:
ca:a2:10:03:08:3b:4a:9d:35:04:98:89:a8:06:94:
d1:8b:5f:5d:f5:49:31:68:c0:97:94:e3:32:50:ff:
1c:27:c2:cd:ab:ab:1b:20:b5:57:12:e7:d7:b8:3d:
9c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C7:84:7E:95:DB:F8:A8:AD:9C:D0:5C:18:E3:E8:0C:03:BE:EA:E9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/M8eEfpXb-KitnNBcGOPoDAO-6uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.161.0/24
5.231.70.0/24
77.90.22.0/24
IPv6:
2a02:2fc0:19::/48
Signature Algorithm: sha256WithRSAEncryption
35:56:72:51:7d:ec:12:e3:af:b2:7b:79:80:2c:8a:a7:d5:38:
c7:32:d1:56:2d:f3:20:11:2a:31:5f:ad:c2:1b:1c:dc:e9:bd:
77:bb:18:e9:45:c0:4e:6d:a7:67:c8:06:7d:1b:a2:9e:7f:38:
c8:dc:fb:e2:9f:3d:26:91:6f:e0:e0:e4:68:42:8d:ab:b8:56:
c1:26:de:bf:d6:e1:4c:56:7f:9d:ce:65:9f:b8:92:99:1f:a0:
d4:80:62:3b:ec:f4:12:41:ae:c2:e9:60:cd:9b:19:52:92:de:
71:d5:a5:81:7b:4f:79:90:70:bb:b0:5f:f5:2a:33:6f:85:db:
1a:40:b0:f4:1c:75:ff:67:4b:a5:84:bf:a8:d5:0d:04:3e:92:
84:b9:11:49:9d:71:70:dd:fa:c4:b3:3d:04:2c:ac:b8:ef:71:
13:b6:b7:6b:a2:24:0d:81:56:3e:f5:68:c7:5e:eb:15:20:7d:
6b:68:c4:80:24:c1:fd:9c:61:83:86:df:75:29:3d:ff:c4:80:
61:8f:e3:f0:d4:9a:81:a2:55:73:f4:72:6d:e7:48:5a:b7:fe:
db:66:c0:a8:51:8b:4a:3c:de:fa:4f:5a:58:9f:cd:19:b5:93:
94:8d:22:a8:93:6e:fb:4d:9f:5d:ab:45:08:c2:4e:5e:50:52:
38:8e:85:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:19:40 2026 by rpki-client