Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/mp-VpswUBjza82Vpf1GOWZIhrlQ.roa
File: mp-VpswUBjza82Vpf1GOWZIhrlQ.roa (raw, json)
Hash identifier: ae9rTRwpHTYdLNVU2WmOKxDNxm6rN9lNU5zvZm8mMAI=
Subject key identifier: 9A:9F:95:A6:CC:14:06:3C:DA:F3:65:69:7F:51:8E:59:92:21:AE:54
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019FB36913C84F7B1F7BD1450D5F8B5AF5C6
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/mp-VpswUBjza82Vpf1GOWZIhrlQ.roa
Signing time: Thu 30 Jul 2026 14:23:55 +0000
ROA not before: Thu 30 Jul 2026 14:23:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214155
IP address blocks: 186.247.32.0/24 maxlen: 24
186.247.33.0/24 maxlen: 24
186.247.34.0/24 maxlen: 24
187.40.80.0/24 maxlen: 24
187.40.81.0/24 maxlen: 24
187.40.82.0/24 maxlen: 24
187.40.83.0/24 maxlen: 24
187.40.84.0/24 maxlen: 24
187.40.85.0/24 maxlen: 24
187.40.86.0/24 maxlen: 24
187.40.87.0/24 maxlen: 24
187.40.88.0/24 maxlen: 24
187.40.89.0/24 maxlen: 24
187.40.90.0/24 maxlen: 24
187.40.91.0/24 maxlen: 24
187.40.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:69:13:c8:4f:7b:1f:7b:d1:45:0d:5f:8b:5a:f5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jul 30 14:23:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a9f95a6cc14063cdaf365697f518e599221ae54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:62:03:b4:1a:3f:54:03:4d:0e:57:39:b0:
dc:af:06:8b:a4:cd:0e:f6:29:9a:99:3c:bd:a2:b0:
15:3b:a9:86:5d:2c:80:f0:f4:fd:51:13:24:5a:7d:
4d:5e:84:38:fd:ef:e8:51:d8:c8:a8:e7:8b:bb:61:
97:2f:b2:b1:fe:b3:09:4e:a7:51:4f:62:70:3f:de:
f5:db:98:ed:c2:c7:2f:48:27:51:05:59:8c:b1:e2:
5b:1a:d8:bc:d8:66:90:11:b1:e6:c1:28:08:88:a7:
9e:33:01:b4:49:02:65:48:ab:df:ee:0e:a2:f0:e5:
1e:5c:8e:a0:a6:78:f0:fd:55:28:69:f9:52:50:53:
5c:db:3a:a6:f0:1b:8d:db:30:8b:d6:bf:5b:12:5c:
cf:60:14:40:c5:1d:e4:4d:51:0d:95:22:e2:29:5b:
bf:5a:63:ba:bd:28:41:33:3e:8f:86:a2:25:b5:82:
15:c3:14:39:a7:c9:84:09:dd:54:2d:b4:e1:62:9d:
36:07:85:25:f7:a4:8d:72:b0:f8:83:0f:00:59:75:
91:82:1e:3f:e1:b6:ca:7c:68:5a:af:07:a7:3d:81:
0d:f4:6a:bb:6a:e4:a2:cd:12:43:82:cf:a6:38:e6:
06:2d:eb:5f:e3:ec:6f:15:71:85:12:24:64:3a:b0:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9F:95:A6:CC:14:06:3C:DA:F3:65:69:7F:51:8E:59:92:21:AE:54
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/mp-VpswUBjza82Vpf1GOWZIhrlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.247.32.0-186.247.34.255
187.40.80.0-187.40.92.255
Signature Algorithm: sha256WithRSAEncryption
22:39:c1:97:37:a5:0b:1c:0e:4c:d2:03:b7:43:47:53:85:5b:
74:f2:4a:89:cb:3a:f7:c8:f3:ce:f8:61:4a:f2:4d:71:57:81:
6d:f3:a4:d0:74:d5:4b:c3:1a:ec:9f:e4:77:92:7f:4e:46:d2:
5c:d0:48:8a:72:3f:07:33:fd:dd:49:88:bb:22:14:16:cf:6c:
68:55:8a:74:16:eb:71:df:cf:85:9f:e7:69:68:aa:18:06:7d:
ba:cb:80:0b:d1:b7:d9:3f:7c:cf:5b:be:64:6b:08:86:a2:fb:
30:92:76:41:3f:b6:9f:85:74:c2:57:34:ad:7d:72:40:56:6f:
03:b6:bc:93:2f:4c:65:66:c0:03:ea:0c:24:aa:23:67:93:78:
ef:f4:c2:59:6f:ba:f9:06:93:ab:e8:49:57:e2:ed:d3:07:10:
54:ed:61:93:a3:59:5b:87:a6:d8:c7:d5:cc:d5:f4:9c:8c:84:
1d:68:cc:62:51:c1:25:e4:76:20:5d:24:0a:9d:a9:9e:a9:66:
4c:53:be:4f:55:fb:5a:b7:bd:67:e1:e0:7e:5c:33:d8:22:41:
19:a7:f4:58:61:fe:ad:ed:38:42:88:51:a2:d5:b6:dd:93:f7:
3e:79:0c:79:f6:78:1f:9c:a0:77:fd:6b:1c:19:21:48:ef:e3:
ad:5b:17:7b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZ+zaRPIT3sfe9FFDV+LWvXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3
Mjk3Y2EwHhcNMjYwNzMwMTQyMzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTlmOTVhNmNjMTQwNjNjZGFmMzY1Njk3ZjUxOGU1OTkyMjFhZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApddiA7QaP1QDTQ5XObDcrwaLpM0O
9imamTy9orAVO6mGXSyA8PT9URMkWn1NXoQ4/e/oUdjIqOeLu2GXL7Kx/rMJTqdR
T2JwP97125jtwscvSCdRBVmMseJbGti82GaQEbHmwSgIiKeeMwG0SQJlSKvf7g6i
8OUeXI6gpnjw/VUoaflSUFNc2zqm8BuN2zCL1r9bElzPYBRAxR3kTVENlSLiKVu/
WmO6vShBMz6PhqIltYIVwxQ5p8mECd1ULbThYp02B4Ul96SNcrD4gw8AWXWRgh4/
4bbKfGharwenPYEN9Gq7auSizRJDgs+mOOYGLetf4+xvFXGFEiRkOrDofwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFJqflabMFAY82vNlaX9RjlmSIa5UMB8GA1UdIwQY
MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt
NTM1ODQwMWZiNzk2LzEvbXAtVnBzd1VCanphODJWcGYxR09XWklocmxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2
LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAW69yAD
BAC69yIwDAMEBLsoUAMEALsoXDANBgkqhkiG9w0BAQsFAAOCAQEAIjnBlzelCxwO
TNIDt0NHU4VbdPJKics698jzzvhhSvJNcVeBbfOk0HTVS8Ma7J/kd5J/TkbSXNBI
inI/BzP93UmIuyIUFs9saFWKdBbrcd/PhZ/naWiqGAZ9usuAC9G32T98z1u+ZGsI
hqL7MJJ2QT+2n4V0wlc0rX1yQFZvA7a8ky9MZWbAA+oMJKojZ5N47/TCWW+6+QaT
q+hJV+Lt0wcQVO1hk6NZW4em2MfVzNX0nIyEHWjMYlHBJeR2IF0kCp2pnqlmTFO+
T1X7Wre9Z+Hgflwz2CJBGaf0WGH+re04QohRotW23ZP3PnkMefZ4H5ygd/1rHBkh
SO/jrVsXew==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:57:40 2026 by rpki-client