Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/M4o5M8yNKRAugsRS799y9UUFN8s.roa
File: M4o5M8yNKRAugsRS799y9UUFN8s.roa (raw, json)
Hash identifier: ih1DvS4oaEPr5tXlb17aqqmEewqpb/5NtoAV7lZpF6c=
Subject key identifier: 33:8A:39:33:CC:8D:29:10:2E:82:C4:52:EF:DF:72:F5:45:05:37:CB
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 01A0CA6A1F89D899D571A14F23113E6F7B3A
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/M4o5M8yNKRAugsRS799y9UUFN8s.roa
Signing time: Tue 22 Sep 2026 18:39:07 +0000
ROA not before: Tue 22 Sep 2026 18:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208673
IP address blocks: 178.214.97.0/24 maxlen: 24
178.214.99.0/24 maxlen: 24
178.214.100.0/24 maxlen: 24
178.214.101.0/24 maxlen: 24
178.214.102.0/24 maxlen: 24
178.214.103.0/24 maxlen: 24
178.214.104.0/24 maxlen: 24
178.214.107.0/24 maxlen: 24
178.214.110.0/24 maxlen: 24
178.214.111.0/24 maxlen: 24
178.214.112.0/24 maxlen: 24
178.214.113.0/24 maxlen: 24
178.214.114.0/24 maxlen: 24
185.53.88.0/24 maxlen: 24
185.53.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:6a:1f:89:d8:99:d5:71:a1:4f:23:11:3e:6f:7b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Sep 22 18:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=338a3933cc8d29102e82c452efdf72f5450537cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:30:4d:d7:1d:7f:a8:7c:b2:f9:10:ca:c2:
00:ef:91:ba:42:7b:71:29:f5:b7:ea:a3:16:48:05:
89:6d:f8:c7:9c:7d:1b:11:f1:f6:f8:6c:77:9a:11:
72:96:f3:f9:10:b8:6e:76:75:05:4b:e4:9e:e9:1f:
01:ea:17:4d:ac:68:ab:2a:13:9e:f2:2a:b9:22:0c:
42:16:f0:7d:b0:81:b6:18:92:a4:5e:d9:ce:46:f6:
8f:73:4d:9a:2d:3d:2c:d3:71:7c:e3:3f:18:b8:b7:
09:ff:e2:cc:f5:9b:23:68:5d:c0:07:b2:90:10:82:
0b:37:7a:ed:c3:43:d7:6f:ac:f6:58:24:77:17:3b:
7c:74:fe:6f:a5:0d:46:88:6b:01:85:91:0a:c3:78:
f6:9c:cd:c2:1a:66:1e:7f:08:95:24:a7:90:2e:86:
1f:01:9b:f8:d2:cc:33:f6:4e:2d:e6:f5:d9:79:a9:
07:22:f3:dc:87:96:27:94:f1:0e:db:9d:e9:81:b7:
f3:c0:95:97:40:79:b4:2d:da:4c:7f:fa:81:63:78:
31:fa:ef:0b:c9:ee:d5:ea:e7:0c:7b:e0:0d:c1:b4:
06:7d:9b:1e:17:be:8f:e6:4d:c3:31:a5:d7:e1:84:
62:7d:89:06:cc:7d:d5:ba:65:96:e8:dd:7a:c7:82:
c5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8A:39:33:CC:8D:29:10:2E:82:C4:52:EF:DF:72:F5:45:05:37:CB
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/M4o5M8yNKRAugsRS799y9UUFN8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.97.0/24
178.214.99.0-178.214.104.255
178.214.107.0/24
178.214.110.0-178.214.114.255
185.53.88.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:3f:f7:8a:59:60:63:df:f6:73:6a:c9:09:1f:9a:94:cb:f0:
1a:6b:31:fd:c8:df:53:39:ce:1b:58:1b:b4:8e:e6:29:6f:0d:
86:bf:d9:39:68:b5:4f:c1:48:e8:16:9c:57:5c:98:00:c7:a9:
83:65:41:c0:31:81:50:b8:9f:02:c2:5d:9f:90:ff:95:8a:3f:
db:64:1e:98:00:b8:61:b5:7e:bd:98:69:7b:90:e9:40:79:a3:
42:e8:74:6e:5b:99:fe:45:c3:d5:7e:f8:7a:72:e7:5f:64:2c:
05:93:e5:8c:08:ab:1c:7c:66:6e:48:6e:42:a6:7e:b5:95:b7:
69:0e:0f:de:d6:25:fe:0d:11:e8:7e:e3:bb:43:83:bc:fd:a2:
86:6b:ab:75:cf:43:71:bd:95:0b:b5:f5:e7:8b:fa:dd:be:9c:
21:24:22:17:2a:f3:5a:be:81:13:b5:ee:b6:8a:22:0a:f0:09:
d6:9c:b7:a5:17:ae:93:75:2f:44:1a:a4:0b:91:2a:af:34:f1:
7a:78:58:ec:2b:16:b2:68:59:25:d0:f2:7f:45:94:50:97:1f:
d9:6a:ef:1a:0d:1a:82:ac:7e:e8:45:56:b4:2a:99:87:20:f9:
6b:64:03:d3:62:e8:cb:4f:13:6a:cc:58:ad:a4:ce:ee:8a:ff:
65:4f:de:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:13:23 2026 by rpki-client