Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/M9ax9l0laUEjnhXkM43Nvpixeik.roa
File: M9ax9l0laUEjnhXkM43Nvpixeik.roa (raw, json)
Hash identifier: t1RbO74R4hsWeUQvzA4vASWK5Zon0d9gMItCMdrxHlU=
Subject key identifier: 33:D6:B1:F6:5D:25:69:41:23:9E:15:E4:33:8D:CD:BE:98:B1:7A:29
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1D1BC124029D7F8236ADD93D5779D7819
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/M9ax9l0laUEjnhXkM43Nvpixeik.roa
Signing time: Thu 12 Nov 2026 21:48:45 +0000
ROA not before: Thu 12 Nov 2026 21:48:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 9.247.151.0/24 maxlen: 24
78.17.184.0/24 maxlen: 24
78.17.199.0/24 maxlen: 24
78.17.217.0/24 maxlen: 24
89.37.195.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
89.125.127.0/24 maxlen: 24
89.125.143.0/24 maxlen: 24
89.125.173.0/24 maxlen: 24
89.125.180.0/24 maxlen: 24
89.125.236.0/24 maxlen: 24
93.115.173.0/24 maxlen: 24
104.143.193.0/24 maxlen: 24
104.143.202.0/24 maxlen: 24
104.143.212.0/24 maxlen: 24
104.143.213.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
153.76.200.0/24 maxlen: 24
153.76.211.0/24 maxlen: 24
162.35.225.0/24 maxlen: 24
162.35.244.0/24 maxlen: 24
167.17.35.0/24 maxlen: 24
167.17.38.0/24 maxlen: 24
167.17.39.0/24 maxlen: 24
167.17.41.0/24 maxlen: 24
167.17.46.0/24 maxlen: 24
167.17.60.0/24 maxlen: 24
167.17.61.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d1:bc:12:40:29:d7:f8:23:6a:dd:93:d5:77:9d:78:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 12 21:48:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33d6b1f65d256941239e15e4338dcdbe98b17a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:64:dd:3d:bc:47:4d:90:8a:81:6f:69:9f:
a1:8d:ff:67:f0:43:bc:3c:18:8b:d6:ad:8c:30:ad:
96:c6:94:75:bc:bf:82:e5:06:5d:20:f2:7c:76:fb:
dc:0a:b6:a9:cd:a9:78:dc:f8:35:ca:f1:98:68:79:
ef:7d:38:67:6f:68:da:50:ab:7d:27:d3:c8:96:09:
7a:e7:32:04:f9:40:f4:4c:32:ce:9d:15:a5:90:12:
3a:96:7a:c1:5a:8e:ac:35:2c:e6:b0:8b:eb:15:11:
78:20:65:1c:43:74:0d:07:6b:5f:ad:91:6a:a4:a4:
8d:93:00:8c:c3:ec:00:ed:d1:26:aa:c3:1a:7f:0c:
91:fb:8e:c4:0b:2c:1c:89:5f:ec:71:c5:7c:e8:6d:
13:78:5d:5c:88:d4:ef:24:71:33:75:68:45:cb:95:
10:a2:0b:23:42:fe:fb:8b:69:62:8d:df:e6:5b:a3:
7d:e1:75:0a:70:e5:4f:2e:22:b6:bb:54:07:0f:86:
77:07:2e:bf:1d:ed:ea:52:f5:68:51:2b:81:06:16:
3d:30:d8:7c:3a:2e:ae:91:0b:fd:c9:b0:84:f3:8d:
09:57:34:8e:84:93:60:f4:e0:24:89:1f:74:d8:8a:
f9:42:f6:eb:d4:10:f3:d5:0d:9c:39:69:81:e4:87:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D6:B1:F6:5D:25:69:41:23:9E:15:E4:33:8D:CD:BE:98:B1:7A:29
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/M9ax9l0laUEjnhXkM43Nvpixeik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.151.0/24
78.17.184.0/24
78.17.199.0/24
78.17.217.0/24
89.37.195.0/24
89.43.62.0/24
89.45.162.0/24
89.125.127.0/24
89.125.143.0/24
89.125.173.0/24
89.125.180.0/24
89.125.236.0/24
93.115.173.0/24
104.143.193.0/24
104.143.202.0/24
104.143.212.0/23
128.0.41.0/24
153.76.200.0/24
153.76.211.0/24
162.35.225.0/24
162.35.244.0/24
167.17.35.0/24
167.17.38.0/23
167.17.41.0/24
167.17.46.0/24
167.17.60.0/23
194.135.18.0/24
212.192.7.0/24
Signature Algorithm: sha256WithRSAEncryption
44:90:aa:4c:57:7c:80:95:8a:9f:7e:71:62:e5:78:71:8e:5f:
a3:a1:36:5e:a8:0e:f0:c4:7f:22:18:0a:92:a6:f5:5a:e4:c6:
55:75:62:45:7b:ee:ab:11:81:16:84:18:e1:6b:08:3e:2e:e8:
2b:75:db:ec:fc:e4:26:d6:f1:4d:0b:27:d6:4f:2f:57:4e:dc:
9a:34:c1:be:27:c8:54:46:d4:d3:f0:34:51:b0:c6:00:34:f1:
ff:1f:b3:30:d8:27:c1:b4:b7:69:70:3b:77:d0:29:f2:9c:85:
d8:ab:70:50:f2:b0:17:1e:21:e5:7b:cd:28:7e:43:f2:2f:b0:
fa:40:cd:de:06:27:1c:f8:65:0e:82:9b:86:72:8a:34:ca:95:
d1:22:a5:a8:39:54:11:af:45:25:9c:51:73:2e:a2:d9:70:62:
af:67:82:f5:56:37:61:49:4d:26:7d:ec:cc:5b:af:d2:bd:a0:
53:ff:79:19:b1:50:a1:7b:fc:a1:7a:93:d4:bb:7a:1d:5e:14:
10:ef:2d:b7:2c:57:03:87:64:14:f7:6d:e8:a2:87:e0:46:79:
43:af:9b:35:96:1b:00:a9:aa:7d:2f:e7:1f:c0:8d:e9:d3:f8:
c4:f1:af:48:cd:ea:87:ae:f6:6e:46:7a:f1:04:29:7e:08:15:
25:9e:db:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:22:21 2026 by rpki-client