Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5-mN2_pQoqWETa4v6QiBEvxBQGc.roa
File: 5-mN2_pQoqWETa4v6QiBEvxBQGc.roa (raw, json)
Hash identifier: 2nQ+3nlgssnjb3/j9MOA7PM6YFwRR0qbt+yRqqtrdek=
Subject key identifier: E7:E9:8D:DB:FA:50:A2:A5:84:4D:AE:2F:E9:08:81:12:FC:41:40:67
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019F1C5ADCB48A23F44DEF3C16C2EA058104
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5-mN2_pQoqWETa4v6QiBEvxBQGc.roa
Signing time: Wed 01 Jul 2026 06:25:44 +0000
ROA not before: Wed 01 Jul 2026 06:25:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8708
IP address blocks: 80.96.12.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.57.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.69.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.166.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
80.97.22.0/23 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.24.0/23 maxlen: 24
81.181.30.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
81.181.147.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
81.181.246.0/24 maxlen: 24
85.120.20.0/24 maxlen: 24
85.120.23.0/24 maxlen: 24
85.121.12.0/23 maxlen: 24
193.226.16.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
193.230.171.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
193.231.75.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.194.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
194.102.132.0/23 maxlen: 24
194.102.134.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
194.153.227.0/24 maxlen: 24
194.153.228.0/23 maxlen: 24
217.156.14.0/24 maxlen: 24
217.156.41.0/24 maxlen: 24
217.156.78.0/23 maxlen: 24
217.156.92.0/24 maxlen: 24
217.156.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:5a:dc:b4:8a:23:f4:4d:ef:3c:16:c2:ea:05:81:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 1 06:25:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7e98ddbfa50a2a5844dae2fe9088112fc414067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c0:88:75:a6:fe:c2:ff:4e:86:9c:a0:e9:0e:
85:2a:ba:02:26:a4:8a:4b:d8:4c:07:ad:82:53:19:
f6:7a:dd:97:94:0a:ba:fd:8a:f8:05:df:ca:2e:06:
81:2f:40:63:ba:20:cd:27:01:07:bb:2e:00:01:e2:
1c:24:4e:dc:e6:bd:65:6e:65:5e:d3:9c:64:b8:1b:
b3:f6:93:aa:ab:8b:1f:f4:d8:45:88:f0:f6:9c:b3:
c1:20:c6:88:e4:47:00:c1:6c:69:cd:4f:e5:4b:e8:
cc:3d:d5:d8:0c:3d:ba:4d:1d:71:17:65:87:fd:43:
08:4e:d0:28:d8:4b:54:c1:5d:94:c6:ca:f5:44:69:
32:14:c8:14:4a:d9:5a:cb:9f:ba:14:2f:3c:bf:51:
5a:ca:10:96:b0:0a:aa:2c:32:eb:e9:22:ee:8b:aa:
3d:4d:2c:c5:2f:c6:19:21:cc:16:dc:8d:90:04:98:
f7:d5:11:96:73:d5:54:7f:ac:a1:5f:d1:e2:37:a9:
8f:19:4a:55:ca:73:a0:ea:a7:60:4e:c6:bf:e1:d6:
53:d7:d1:9e:6b:af:46:e0:2c:f5:4d:d8:21:15:72:
5c:9a:b1:22:01:9a:42:2e:80:6b:31:0e:8e:e3:89:
b5:22:d9:c9:15:c2:d6:23:48:88:5b:ea:ae:84:66:
ab:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E9:8D:DB:FA:50:A2:A5:84:4D:AE:2F:E9:08:81:12:FC:41:40:67
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5-mN2_pQoqWETa4v6QiBEvxBQGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.43.0/24
80.96.47.0/24
80.96.51.0/24
80.96.57.0/24
80.96.67.0/24
80.96.69.0/24
80.96.72.0/24
80.96.79.0/24
80.96.166.0/24
80.96.219.0/24
80.97.22.0/23
80.97.147.0-80.97.148.255
81.180.27.0/24
81.181.24.0/23
81.181.30.0/24
81.181.112.0/24
81.181.128.0/24
81.181.147.0/24
81.181.167.0/24
81.181.246.0/24
85.120.20.0/24
85.120.23.0/24
85.121.12.0/23
193.226.16.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.171.0/24
193.230.229.0/24
193.231.75.0/24
193.231.108.0/24
193.231.184.0/24
193.231.194.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.132.0-194.102.134.255
194.102.229.0/24
194.153.224.0/24
194.153.227.0-194.153.229.255
217.156.14.0/24
217.156.41.0/24
217.156.78.0/23
217.156.92.0/24
217.156.97.0/24
Signature Algorithm: sha256WithRSAEncryption
73:97:98:d5:70:ce:cd:66:8a:85:c9:34:3f:25:80:ee:b8:9e:
b2:1f:2d:b7:fb:d0:c1:d7:5a:79:5c:60:1e:41:48:d5:cc:c3:
bf:59:9a:f7:e3:29:80:87:20:62:f7:1a:22:1e:af:b5:a3:ca:
9c:bf:47:2e:48:f6:6d:c1:c0:08:52:96:72:aa:09:ef:44:37:
3d:bc:d5:f7:66:a1:13:63:88:d2:23:c8:ed:9d:fe:d1:8a:88:
02:a1:c7:ff:23:bf:31:02:6d:5a:8c:0a:c7:36:e8:dd:1b:1d:
c9:b5:65:94:5b:b2:bb:41:2b:26:72:aa:a4:dc:cf:77:f9:14:
72:bd:af:dc:fb:cf:99:4d:19:1b:91:d5:1b:d5:69:bd:d7:c7:
d8:7d:64:30:ae:5b:71:92:9b:76:39:0e:b0:10:05:b9:01:22:
c0:38:c9:bd:a3:c7:74:d9:fc:b2:56:55:3c:a5:41:68:ee:c3:
f5:34:6d:4c:fe:56:fe:0f:89:2f:e7:50:fe:48:7e:55:8e:cf:
c4:c5:11:f4:c0:27:d6:2a:c7:76:19:c0:d3:33:c5:73:81:56:
82:3a:20:c4:12:9d:3f:c5:03:a6:02:59:dc:94:a6:5b:80:5b:
43:19:1b:f2:74:7b:6e:e1:14:a0:48:54:f9:33:b1:b5:49:a9:
0c:b1:11:e3
-----BEGIN CERTIFICATE-----
MIIGPzCCBSegAwIBAgISAZ8cWty0iiP0Te88FsLqBYEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwNzAxMDYyNTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2U5OGRkYmZhNTBhMmE1ODQ0ZGFlMmZlOTA4ODExMmZjNDE0MDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cCIdab+wv9Ohpyg6Q6FKroCJqSK
S9hMB62CUxn2et2XlAq6/Yr4Bd/KLgaBL0BjuiDNJwEHuy4AAeIcJE7c5r1lbmVe
05xkuBuz9pOqq4sf9NhFiPD2nLPBIMaI5EcAwWxpzU/lS+jMPdXYDD26TR1xF2WH
/UMITtAo2EtUwV2Uxsr1RGkyFMgUStlay5+6FC88v1FayhCWsAqqLDLr6SLui6o9
TSzFL8YZIcwW3I2QBJj31RGWc9VUf6yhX9HiN6mPGUpVynOg6qdgTsa/4dZT19Ge
a69G4Cz1TdghFXJcmrEiAZpCLoBrMQ6O44m1ItnJFcLWI0iIW+quhGarqQIDAQAB
o4IDSzCCA0cwHQYDVR0OBBYEFOfpjdv6UKKlhE2uL+kIgRL8QUBnMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvNS1tTjJfcFFvcVdFVGE0djZRaUJFdnhCUUdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXwYIKwYBBQUHAQcBAf8EggFOMIIBSjCCAUYEAgABMIIB
PgMEAFBgDAMEAFBgKwMEAFBgLwMEAFBgMwMEAFBgOQMEAFBgQwMEAFBgRQMEAFBg
SAMEAFBgTwMEAFBgpgMEAFBg2wMEAVBhFjAMAwQAUGGTAwQAUGGUAwQAUbQbAwQB
UbUYAwQAUbUeAwQAUbVwAwQAUbWAAwQAUbWTAwQAUbWnAwQAUbX2AwQAVXgUAwQA
VXgXAwQBVXkMAwQAweIQAwQAweJ0AwQAweJ9AwQAweJ/AwQAweaeAwQAwearAwQA
weblAwQAwedLAwQAwedsAwQAwee4AwQAwefCAwQAwefpAwQAwefsAwQAwefuAwQA
wef8AwQAwmZiMAwDBALCZoQDBADCZoYDBADCZuUDBADCmeAwDAMEAMKZ4wMEAcKZ
5AMEANmcDgMEANmcKQMEAdmcTgMEANmcXAMEANmcYTANBgkqhkiG9w0BAQsFAAOC
AQEAc5eY1XDOzWaKhck0PyWA7riesh8tt/vQwddaeVxgHkFI1czDv1ma9+MpgIcg
YvcaIh6vtaPKnL9HLkj2bcHACFKWcqoJ70Q3PbzV92ahE2OI0iPI7Z3+0YqIAqHH
/yO/MQJtWowKxzbo3RsdybVllFuyu0ErJnKqpNzPd/kUcr2v3PvPmU0ZG5HVG9Vp
vdfH2H1kMK5bcZKbdjkOsBAFuQEiwDjJvaPHdNn8slZVPKVBaO7D9TRtTP5W/g+J
L+dQ/kh+VY7PxMUR9MAn1irHdhnA0zPFc4FWgjogxBKdP8UDpgJZ3JSmW4BbQxkb
8nR7buEUoEhU+TOxtUmpDLER4w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:32 2026 by rpki-client