Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MRRoDS0KWjHd1Z1KnMvE6wudqos.roa
File: MRRoDS0KWjHd1Z1KnMvE6wudqos.roa (raw, json)
Hash identifier: gc6CmxMGb/JWj8mQY8AgM1bzwdrwZy7zFKpPzjECmI8=
Subject key identifier: 31:14:68:0D:2D:0A:5A:31:DD:D5:9D:4A:9C:CB:C4:EB:0B:9D:AA:8B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F702D799728A3849DE0A36EC6767AF7C4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MRRoDS0KWjHd1Z1KnMvE6wudqos.roa
Signing time: Fri 17 Jul 2026 13:04:16 +0000
ROA not before: Fri 17 Jul 2026 13:04:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214927
IP address blocks: 45.155.69.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.242.245.0/24 maxlen: 24
2a0c:7886:105::/48 maxlen: 48
2a0f:e7c6:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:2d:79:97:28:a3:84:9d:e0:a3:6e:c6:76:7a:f7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 17 13:04:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3114680d2d0a5a31ddd59d4a9ccbc4eb0b9daa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:0a:27:57:56:61:a0:e7:d0:8f:63:eb:6d:
ca:74:84:f5:db:7c:59:ab:fd:76:3f:6f:52:66:ea:
a9:1d:46:46:f5:f2:ab:d8:07:8b:4a:9f:66:87:08:
1a:d3:4b:01:36:bd:14:25:b7:bc:6f:70:93:d0:a0:
15:53:54:2b:b8:18:98:48:a6:c2:25:0b:91:cc:b4:
87:cc:fc:fb:92:29:f5:00:88:a4:cb:8d:a6:0a:6b:
25:73:7d:b8:18:e1:ad:1f:a7:ea:1b:55:6c:2e:57:
1f:54:c7:e3:c9:fa:38:e2:b6:f4:3f:68:b8:09:7d:
0a:84:f0:71:88:4a:5f:9c:04:6b:1c:e7:c1:a5:96:
5f:93:36:36:b3:f8:dd:84:79:87:d7:6a:7f:5d:97:
ba:e3:f1:e5:66:d9:84:06:df:48:ef:2c:b6:d0:d6:
a8:0c:8a:06:17:9c:1f:df:0c:84:72:a1:ed:83:8a:
51:42:3a:22:f0:6f:1a:62:bb:bb:1a:47:41:13:1f:
92:f2:27:01:a1:43:63:4a:05:9a:70:7c:c3:87:4b:
f3:75:a1:a3:57:5c:0f:e0:73:6d:2e:56:59:b9:f6:
60:7f:f5:51:04:e6:97:85:b0:e9:2b:d6:32:a1:dd:
ff:50:47:6f:0f:57:bd:3d:01:11:10:d7:c8:12:86:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:14:68:0D:2D:0A:5A:31:DD:D5:9D:4A:9C:CB:C4:EB:0B:9D:AA:8B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MRRoDS0KWjHd1Z1KnMvE6wudqos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.69.0/24
85.209.128.0/24
103.114.43.0/24
185.122.171.0/24
185.242.245.0/24
IPv6:
2a0c:7886:105::/48
2a0f:e7c6:1000::/48
Signature Algorithm: sha256WithRSAEncryption
09:4b:9e:93:e9:75:dc:6a:f0:18:10:5d:65:0e:5a:f7:20:ee:
17:21:51:a1:6a:58:37:6d:70:b6:68:57:2a:aa:3d:b2:31:7d:
7b:be:9a:23:1a:48:69:aa:bd:b3:09:d4:2a:27:26:32:58:15:
3a:ad:33:0b:40:56:9e:80:c4:56:8a:39:87:54:ae:f9:f8:73:
88:51:65:fe:fe:ac:0f:0c:e4:0c:0c:98:1d:af:4a:4c:32:b8:
58:b0:9e:05:9f:c6:f1:68:4d:a2:bc:0a:c7:33:b1:00:7d:3a:
ec:d9:bf:d6:92:37:b2:48:ac:fc:eb:e3:e7:40:5e:70:16:53:
3d:de:f7:53:1f:b9:43:02:45:af:8d:e3:ad:ad:ad:45:33:9a:
f0:40:24:fe:23:f8:73:b4:30:ac:50:d4:cf:20:16:1b:bd:64:
71:8c:a7:46:48:aa:63:5e:ad:d3:82:7c:e9:3b:07:04:e5:50:
8b:aa:bd:6e:c1:60:dc:c1:7c:db:0b:00:4a:48:04:52:a1:af:
ac:f9:65:14:a4:d6:4d:a0:62:4d:d5:78:5b:6e:57:c0:71:ef:
5b:4d:db:00:c1:c0:61:94:f5:e2:ae:16:86:d8:5c:e9:35:15:
98:b2:0a:78:75:25:d8:da:0a:8a:6d:fe:ad:33:a3:d0:d4:f4:
5e:b0:21:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:41 2026 by rpki-client