Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/M0gW80SQeN8-sWeK4V4IiUTNncs.roa
File: M0gW80SQeN8-sWeK4V4IiUTNncs.roa (raw, json)
Hash identifier: 5lMZVBWnzilRk6pbxwjn0M4dlZP9bPyruzS+ojF0eMI=
Subject key identifier: 33:48:16:F3:44:90:78:DF:3E:B1:67:8A:E1:5E:08:89:44:CD:9D:CB
Certificate issuer: /CN=f90588ca22897c69a102949a682f9f1a35835bab
Certificate serial: 019D0C66147403959F54BB1A12110CEBF24E
Authority key identifier: F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/M0gW80SQeN8-sWeK4V4IiUTNncs.roa
Signing time: Fri 20 Mar 2026 17:58:29 +0000
ROA not before: Fri 20 Mar 2026 17:58:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 195.160.238.0/24 maxlen: 24
195.160.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:66:14:74:03:95:9f:54:bb:1a:12:11:0c:eb:f2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90588ca22897c69a102949a682f9f1a35835bab
Validity
Not Before: Mar 20 17:58:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=334816f3449078df3eb1678ae15e088944cd9dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:30:4f:11:05:09:91:78:25:12:e5:81:3a:
16:7d:cf:92:ea:c1:d4:cf:8c:bc:2b:3c:43:ad:d3:
46:e3:52:b4:93:6b:7f:f5:b3:07:e5:89:b7:0d:9d:
99:27:68:46:68:11:09:9d:5a:fc:14:53:c1:04:63:
55:3d:2e:39:9d:fc:1b:c3:4f:01:56:af:e9:a5:3b:
bb:b7:4e:33:9e:2a:b9:c7:f6:78:88:c7:74:62:7e:
81:59:43:0a:6a:82:39:a8:b8:57:16:db:cd:52:47:
4c:75:fb:96:07:87:b8:4f:8c:40:21:4b:eb:7b:60:
02:46:10:75:dc:ac:5f:c9:2a:e3:2a:9e:46:1f:c2:
b8:e3:76:d9:e9:1b:9d:ff:4b:62:81:a8:56:75:4a:
34:20:15:f0:b2:51:b6:5e:34:13:50:d4:b1:9d:05:
e2:72:c7:75:97:bd:60:a6:ce:6b:ba:bb:7b:b1:c4:
c6:81:99:c8:5e:52:f8:c0:b0:0a:59:66:1c:00:59:
21:27:7d:6a:9e:3f:29:17:29:93:1d:58:b8:b9:15:
47:a9:38:1c:c8:3a:2e:a9:3e:cb:1d:54:16:ee:ac:
11:35:05:af:d3:49:8d:f2:6f:fe:28:b0:51:91:02:
ac:a8:18:4c:0f:1d:4e:f5:79:a0:ec:93:84:86:16:
ed:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:48:16:F3:44:90:78:DF:3E:B1:67:8A:E1:5E:08:89:44:CD:9D:CB
X509v3 Authority Key Identifier:
keyid:F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/M0gW80SQeN8-sWeK4V4IiUTNncs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.238.0/23
Signature Algorithm: sha256WithRSAEncryption
66:93:d5:51:10:48:a2:99:23:5b:14:eb:be:48:3e:40:de:f5:
68:a0:ea:1c:45:30:2d:f1:06:6c:10:06:8d:85:a4:6f:57:a0:
e4:ed:d8:69:d8:15:ec:cf:d7:d0:56:1e:75:b1:8b:14:54:f3:
9b:ab:1c:13:cf:50:d3:5f:d6:5e:27:6e:93:f7:b8:30:da:de:
2f:01:a1:71:6d:97:dd:0e:82:e8:cb:a0:63:a0:1a:98:03:fc:
7d:d7:01:a5:47:43:0f:8a:18:2e:5d:d8:41:d4:6a:e7:e5:89:
f9:eb:bd:bb:3c:c4:cf:73:2a:3a:08:a7:78:2b:66:cf:98:6d:
da:14:2d:8e:c3:17:3c:47:95:4b:0f:f4:b8:6b:7f:1c:cd:3f:
e4:dc:b2:f0:15:3a:d2:68:a6:ca:16:0a:33:35:42:db:9d:c0:
81:62:2a:ed:ad:f6:2d:aa:38:13:66:1c:f0:f5:de:da:58:a1:
cd:25:12:59:fd:40:03:e7:03:36:f3:f6:17:e0:d7:04:8b:38:
c8:0e:52:79:ce:0b:e8:9c:b6:91:1f:bb:9d:b6:ce:a1:22:e4:
57:21:23:b4:d0:74:2a:de:01:da:38:5a:02:09:39:18:d0:88:
7c:af:7a:39:ae:1d:b8:a5:01:08:09:62:9c:21:5a:13:68:62:
7d:4e:13:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:04 2026 by rpki-client