Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/M1XRE6GRj_AzMU1VEZiSR9p4ImE.roa
File: M1XRE6GRj_AzMU1VEZiSR9p4ImE.roa (raw, json)
Hash identifier: ATfe7+ANJbtAMjOjk4TM3EqV2a8wLzCrvVw1pG0nCz8=
Subject key identifier: 33:55:D1:13:A1:91:8F:F0:33:31:4D:55:11:98:92:47:DA:78:22:61
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E06912B4910EAC44C1C347EC4F253B4E1
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/M1XRE6GRj_AzMU1VEZiSR9p4ImE.roa
Signing time: Fri 08 May 2026 07:50:37 +0000
ROA not before: Fri 08 May 2026 07:50:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 147.90.200.0/24 maxlen: 24
155.2.218.0/24 maxlen: 24
155.2.219.0/24 maxlen: 24
192.253.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:91:2b:49:10:ea:c4:4c:1c:34:7e:c4:f2:53:b4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 8 07:50:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3355d113a1918ff033314d5511989247da782261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:e3:c8:77:8c:ae:55:d4:4d:c5:f4:d0:84:
eb:31:df:b6:c5:6d:08:ed:99:ba:17:4c:f3:49:c3:
44:ef:6f:d7:a0:c8:84:b3:a2:5d:c4:bb:65:67:e7:
79:22:3c:3d:7c:1e:78:6a:fd:2d:4c:74:bb:93:ce:
0b:df:5c:5e:d0:a7:92:01:65:f0:d7:e2:8d:8b:25:
22:8f:fd:48:de:eb:39:39:aa:54:f6:0e:28:1b:58:
16:26:13:c1:88:38:18:49:4e:68:22:92:1a:9f:4f:
44:c8:de:d8:ab:a5:a1:9b:a8:bf:93:1f:65:d4:e7:
54:22:77:90:58:f2:10:64:95:b6:7c:b1:1b:5e:47:
5e:3f:79:5e:dc:0d:95:b8:cf:c2:b2:6d:dd:76:c5:
ad:6e:f0:84:31:6d:ec:11:5d:6a:0f:ba:00:cf:92:
5b:08:b3:e8:43:87:e8:ad:74:04:7f:a7:53:84:c8:
af:88:a2:e0:f2:02:2d:7d:ea:6d:16:7a:73:ea:1b:
2f:c8:40:6d:89:0c:0c:ac:0f:32:b5:65:ea:11:f6:
9e:f4:95:7c:d6:b4:79:94:a9:70:2d:ec:6c:c6:bb:
28:22:01:1b:41:98:be:4b:ed:41:a0:90:25:ee:0a:
9f:2b:97:70:f2:3f:c9:54:e3:0a:b5:ae:8b:60:3a:
40:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:55:D1:13:A1:91:8F:F0:33:31:4D:55:11:98:92:47:DA:78:22:61
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/M1XRE6GRj_AzMU1VEZiSR9p4ImE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.200.0/24
155.2.218.0/23
192.253.210.0/24
Signature Algorithm: sha256WithRSAEncryption
63:63:1c:53:bf:2f:8c:7f:a4:b0:d2:d0:89:65:26:32:c7:c6:
18:4c:8b:b3:24:d0:8f:57:39:72:85:ff:66:f0:6b:80:f2:a4:
99:96:df:72:ed:24:44:5b:03:17:98:4b:29:94:73:54:7e:d2:
48:b6:5c:08:28:6e:c7:24:76:c9:06:32:02:b3:f6:d9:09:24:
11:00:3d:31:e6:04:32:fd:c6:13:e6:c4:fe:63:0e:20:df:fd:
a0:95:75:46:98:d8:86:e6:a8:c1:79:0f:72:ff:90:62:16:83:
08:11:a0:a7:cb:db:4c:2e:26:48:ae:24:f1:83:32:5e:36:e7:
eb:ed:7a:e1:c3:bb:d1:17:6d:a4:33:b5:56:91:6c:75:6b:ae:
5e:8c:35:6c:8a:1f:0e:c1:f3:a2:1c:87:70:c6:d3:d7:d5:11:
76:6d:e3:b3:d0:d5:f8:95:45:6e:22:41:23:10:01:a0:11:ee:
88:c0:1f:cf:91:3b:78:6a:a9:7c:bb:63:26:82:92:2d:11:2b:
08:42:f0:bc:fd:a3:14:78:26:08:6b:45:99:4c:03:83:32:8f:
85:25:a3:ed:fe:6a:ae:61:f5:9e:1e:63:1a:b8:7e:d8:32:31:
a0:4c:88:04:f2:80:bb:0e:65:75:ec:b0:1d:ed:79:0a:a7:88:
f8:c9:0e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:17 2026 by rpki-client