Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/m8PlNDAQHC3idY8uVMRzRb5JFP0.roa
File: m8PlNDAQHC3idY8uVMRzRb5JFP0.roa (raw, json)
Hash identifier: 5yqUGtimGeRzn9nj9OwiHOsAqD12upNJIeZtFKL031A=
Subject key identifier: 9B:C3:E5:34:30:10:1C:2D:E2:75:8F:2E:54:C4:73:45:BE:49:14:FD
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019DFC1202F586206F85C3B010D47BB04ABC
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/m8PlNDAQHC3idY8uVMRzRb5JFP0.roa
Signing time: Wed 06 May 2026 06:55:32 +0000
ROA not before: Wed 06 May 2026 06:55:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198605
IP address blocks: 95.142.115.0/24 maxlen: 24
95.142.116.0/24 maxlen: 24
95.142.118.0/24 maxlen: 24
95.142.121.0/24 maxlen: 24
95.142.124.0/24 maxlen: 24
159.242.227.0/24 maxlen: 24
159.242.234.0/24 maxlen: 24
159.242.239.0/24 maxlen: 24
185.54.230.0/24 maxlen: 24
194.99.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:12:02:f5:86:20:6f:85:c3:b0:10:d4:7b:b0:4a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: May 6 06:55:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bc3e53430101c2de2758f2e54c47345be4914fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:92:34:8c:a1:60:43:51:80:d9:ef:bc:1e:
91:29:ae:9e:53:51:1b:a8:7a:48:79:ec:f1:f2:98:
8a:e4:68:f6:5b:3e:6f:05:87:28:73:51:db:61:b6:
24:1a:dd:52:78:5c:a1:5d:6b:d7:49:84:13:cd:f0:
31:bb:72:df:f1:cf:1f:12:54:46:a0:37:93:f5:e1:
b4:d6:55:56:cc:1b:0a:6f:41:c8:18:cb:41:b4:ca:
a2:fa:7e:5b:c4:fb:c7:24:3c:d7:6f:94:88:a7:d6:
9a:d6:ac:5e:8d:b4:fb:2c:95:03:a6:f1:b5:c5:87:
f1:ea:c0:43:d9:df:b7:96:86:af:15:64:93:c8:52:
29:ff:d2:e9:3c:b0:59:79:86:d2:af:1a:74:5f:b3:
3a:7b:7b:ec:ca:02:4f:67:8e:d0:7c:4a:2c:5a:f2:
25:b2:5c:5c:31:c1:ff:e9:37:b8:9b:06:61:7f:dc:
60:df:52:52:6a:c1:a1:58:96:b5:d4:a8:ca:8b:9e:
ef:b6:61:ca:d0:75:f8:6b:89:4d:36:16:85:c0:72:
25:e2:63:d6:75:94:4f:8b:42:19:ae:2b:98:49:45:
1e:0e:da:9e:7a:83:c9:d7:11:b5:c9:49:b2:d9:6c:
21:d6:eb:df:ec:3a:19:49:d5:bf:c7:6c:49:fa:74:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C3:E5:34:30:10:1C:2D:E2:75:8F:2E:54:C4:73:45:BE:49:14:FD
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/m8PlNDAQHC3idY8uVMRzRb5JFP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.115.0-95.142.116.255
95.142.118.0/24
95.142.121.0/24
95.142.124.0/24
159.242.227.0/24
159.242.234.0/24
159.242.239.0/24
185.54.230.0/24
194.99.28.0/22
Signature Algorithm: sha256WithRSAEncryption
80:8e:f4:f5:00:e4:35:b3:33:3e:19:ad:2c:55:97:70:5b:11:
20:d1:2e:6f:2a:76:f3:cb:26:44:f0:63:03:d1:77:f8:01:9c:
8b:d4:32:5f:85:ea:3c:be:79:7d:c2:7a:d2:93:96:c6:39:53:
8d:c3:81:1e:0f:8a:76:39:a4:81:5c:14:62:80:89:29:53:73:
aa:db:2e:a3:75:ca:4d:9c:94:53:fa:17:18:b3:a5:83:d0:07:
c6:bd:80:f5:91:a3:76:82:86:13:48:62:b1:76:13:87:e8:21:
5f:2c:52:3e:50:94:17:f4:e1:02:22:9c:70:c9:b4:d3:12:0f:
54:31:0c:e4:9f:5b:6e:11:f8:7b:98:d1:27:ef:d7:e9:a8:35:
63:c1:8f:ee:79:1a:c0:aa:2b:f0:67:63:21:5a:25:6e:b4:aa:
7c:a8:31:97:d5:6a:08:c8:42:28:85:9d:b0:df:13:18:f2:1b:
f1:ea:8f:ac:b5:15:40:0a:82:38:ac:f4:51:d4:b4:45:e5:2c:
87:a7:26:c2:2e:99:c7:e3:97:04:7e:e5:f4:ae:85:b0:26:cb:
4d:be:5b:e6:9e:9c:d7:71:23:fb:ce:76:4d:77:35:01:58:ff:
12:c0:49:f8:99:d8:be:4a:3d:d1:ae:34:5b:ab:e6:5e:d3:60:
68:bf:83:b0
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZ38EgL1hiBvhcOwENR7sEq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMGQ5ZDZiNjk3Y2ExYzg2NTcwYzI1Njg2MmU2ODU4YjQ3
OTljODUwHhcNMjYwNTA2MDY1NTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmMzZTUzNDMwMTAxYzJkZTI3NThmMmU1NGM0NzM0NWJlNDkxNGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/+SNIyhYENRgNnvvB6RKa6eU1Eb
qHpIeezx8piK5Gj2Wz5vBYcoc1HbYbYkGt1SeFyhXWvXSYQTzfAxu3Lf8c8fElRG
oDeT9eG01lVWzBsKb0HIGMtBtMqi+n5bxPvHJDzXb5SIp9aa1qxejbT7LJUDpvG1
xYfx6sBD2d+3loavFWSTyFIp/9LpPLBZeYbSrxp0X7M6e3vsygJPZ47QfEosWvIl
slxcMcH/6Te4mwZhf9xg31JSasGhWJa11KjKi57vtmHK0HX4a4lNNhaFwHIl4mPW
dZRPi0IZriuYSUUeDtqeeoPJ1xG1yUmy2Wwh1uvf7DoZSdW/x2xJ+nT9qQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFJvD5TQwEBwt4nWPLlTEc0W+SRT9MB8GA1UdIwQY
MBaAFN4NnWtpfKHIZXDCVoYuaFi0eZyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYt
MDFjYmZjMGU5NGU3LzEvbThQbE5EQVFIQzNpZFk4dVZNUnpSYjVKRlAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYtMDFjYmZjMGU5NGU3
LzEvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+MAwDBABfjnMD
BABfjnQDBABfjnYDBABfjnkDBABfjnwDBACf8uMDBACf8uoDBACf8u8DBAC5NuYD
BALCYxwwDQYJKoZIhvcNAQELBQADggEBAICO9PUA5DWzMz4ZrSxVl3BbESDRLm8q
dvPLJkTwYwPRd/gBnIvUMl+F6jy+eX3CetKTlsY5U43DgR4PinY5pIFcFGKAiSlT
c6rbLqN1yk2clFP6FxizpYPQB8a9gPWRo3aChhNIYrF2E4foIV8sUj5QlBf04QIi
nHDJtNMSD1QxDOSfW24R+HuY0Sfv1+moNWPBj+55GsCqK/BnYyFaJW60qnyoMZfV
agjIQiiFnbDfExjyG/Hqj6y1FUAKgjis9FHUtEXlLIenJsIumcfjlwR+5fSuhbAm
y02+W+aenNdxI/vOdk13NQFY/xLASfiZ2L5KPdGuNFur5l7TYGi/g7A=
-----END CERTIFICATE-----
Generated at Wed May 13 02:34:42 2026 by rpki-client