Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bIVaPJUrJZFWPfe5ZHjIqy7GlbU.roa
File: bIVaPJUrJZFWPfe5ZHjIqy7GlbU.roa (raw, json)
Hash identifier: IrRTCwj6dXxHAEmXdmn26l55lVn/+GX1LVQy4ef835o=
Subject key identifier: 6C:85:5A:3C:95:2B:25:91:56:3D:F7:B9:64:78:C8:AB:2E:C6:95:B5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019F029AF385411C49049B58B151E00FBC83
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bIVaPJUrJZFWPfe5ZHjIqy7GlbU.roa
Signing time: Fri 26 Jun 2026 06:25:37 +0000
ROA not before: Fri 26 Jun 2026 06:25:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 80.96.58.0/23 maxlen: 24
80.96.68.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.112.0/24 maxlen: 24
80.96.113.0/24 maxlen: 24
80.97.124.0/24 maxlen: 24
80.97.128.0/20 maxlen: 20
81.180.92.0/23 maxlen: 24
85.120.81.0/24 maxlen: 24
85.120.216.0/23 maxlen: 24
85.120.252.0/24 maxlen: 24
85.120.253.0/24 maxlen: 24
85.120.254.0/24 maxlen: 24
85.121.4.0/23 maxlen: 24
85.121.149.0/24 maxlen: 24
85.121.176.0/22 maxlen: 24
85.121.183.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
194.102.105.0/24 maxlen: 24
217.156.8.0/23 maxlen: 24
217.156.64.0/24 maxlen: 24
217.156.65.0/24 maxlen: 24
217.156.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:9a:f3:85:41:1c:49:04:9b:58:b1:51:e0:0f:bc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 26 06:25:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c855a3c952b2591563df7b96478c8ab2ec695b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:e0:c2:e3:31:69:35:c9:01:66:d6:9b:68:
df:0d:38:0d:76:fe:2f:03:2f:88:3b:00:0f:b4:e8:
33:ea:7f:c9:10:23:04:bb:6a:62:ee:e7:4a:c4:a5:
17:7b:ce:fc:2e:87:b0:e5:06:72:e1:73:36:87:96:
ff:a8:82:8c:ef:fc:7c:80:e0:04:33:8c:e0:97:bc:
34:b0:32:7f:a2:58:d0:d6:29:cc:3e:63:7d:09:fc:
42:34:b8:3b:bf:9b:c6:21:db:3c:d3:6f:cc:53:06:
a1:71:4c:7b:1b:75:b9:19:41:bd:ed:a2:f4:a4:1a:
8e:7d:5f:f5:8f:1e:dd:6b:75:85:79:d1:c6:c3:a6:
ac:af:0a:3b:d7:4e:99:f1:9d:68:1f:c5:bd:c6:4f:
90:8b:c1:05:c9:b9:8c:e5:39:a8:73:4f:77:1d:be:
7d:0b:9f:cd:29:07:58:e5:f1:92:8a:cb:3b:ca:39:
d4:04:64:dd:46:bf:f1:bb:51:41:11:34:77:fe:90:
61:f9:a2:9e:86:58:9e:c5:da:3c:e8:ba:08:bb:3d:
ec:e1:7a:6b:9f:9f:5c:6b:08:a0:40:44:95:d2:90:
ab:3a:b2:d0:0c:84:90:a7:53:5e:25:ae:12:79:16:
c7:81:da:98:63:2a:85:8c:aa:ff:24:fe:06:8e:87:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:85:5A:3C:95:2B:25:91:56:3D:F7:B9:64:78:C8:AB:2E:C6:95:B5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bIVaPJUrJZFWPfe5ZHjIqy7GlbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.58.0/23
80.96.68.0/24
80.96.108.0/24
80.96.112.0/23
80.97.124.0/24
80.97.128.0/20
81.180.92.0/23
85.120.81.0/24
85.120.216.0/23
85.120.252.0-85.120.254.255
85.121.4.0/23
85.121.149.0/24
85.121.176.0/22
85.121.183.0/24
85.122.114.0/24
194.102.105.0/24
217.156.8.0/23
217.156.64.0/23
217.156.123.0/24
Signature Algorithm: sha256WithRSAEncryption
25:88:91:19:db:19:f4:bf:1c:52:80:a9:22:52:89:d4:ff:81:
2d:ab:10:ca:88:fd:62:22:84:bf:58:0e:f4:0a:df:ef:ff:bf:
94:71:b7:65:e4:41:21:29:38:50:43:cb:1b:38:f8:90:8b:e3:
58:5c:90:08:d8:d8:ef:42:0f:5b:3b:98:c5:59:c1:ce:32:e1:
ad:96:58:86:1a:47:be:95:05:c0:0b:73:2c:6f:a3:2c:f6:43:
80:19:a6:fe:c7:03:9e:11:c8:5f:07:65:76:28:dd:b5:de:19:
1a:a5:37:70:4a:61:72:2a:ef:13:48:36:59:89:07:b7:cd:3e:
90:92:e5:ce:a4:97:c7:84:95:d6:09:a8:c9:04:e1:87:d5:a1:
6c:e5:78:f9:6a:27:f2:20:1d:51:57:2b:03:ba:b9:37:73:b5:
3d:b6:58:7c:4f:71:ea:09:2d:74:7b:df:15:7a:95:13:67:79:
43:5e:00:cd:13:a9:97:51:c4:f5:b8:1c:d8:27:0d:e8:02:97:
42:04:50:11:12:3b:85:89:c8:19:91:82:b7:cd:0e:db:7f:c1:
67:6b:83:c5:7a:57:5c:d8:47:c2:20:59:92:1d:1f:aa:14:53:
f9:e8:d8:72:ec:1b:a8:07:7a:29:98:75:d2:b2:ea:15:fd:4b:
cc:0f:c2:c6
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgISAZ8CmvOFQRxJBJtYsVHgD7yDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwNjI2MDYyNTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzg1NWEzYzk1MmIyNTkxNTYzZGY3Yjk2NDc4YzhhYjJlYzY5NWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FPgwuMxaTXJAWbWm2jfDTgNdv4v
Ay+IOwAPtOgz6n/JECMEu2pi7udKxKUXe878Loew5QZy4XM2h5b/qIKM7/x8gOAE
M4zgl7w0sDJ/oljQ1inMPmN9CfxCNLg7v5vGIds802/MUwahcUx7G3W5GUG97aL0
pBqOfV/1jx7da3WFedHGw6asrwo7106Z8Z1oH8W9xk+Qi8EFybmM5Tmoc093Hb59
C5/NKQdY5fGSiss7yjnUBGTdRr/xu1FBETR3/pBh+aKehliexdo86LoIuz3s4Xpr
n59cawigQESV0pCrOrLQDISQp1NeJa4SeRbHgdqYYyqFjKr/JP4GjocuoQIDAQAB
o4ICgTCCAn0wHQYDVR0OBBYEFGyFWjyVKyWRVj33uWR4yKsuxpW1MB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvYklWYVBKVXJKWkZXUGZlNVpIaklxeTdHbGJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzCBgAQCAAEwegMEAVBg
OgMEAFBgRAMEAFBgbAMEAVBgcAMEAFBhfAMEBFBhgAMEAVG0XAMEAFV4UQMEAVV4
2DAMAwQCVXj8AwQAVXj+AwQBVXkEAwQAVXmVAwQCVXmwAwQAVXm3AwQAVXpyAwQA
wmZpAwQB2ZwIAwQB2ZxAAwQA2Zx7MA0GCSqGSIb3DQEBCwUAA4IBAQAliJEZ2xn0
vxxSgKkiUonU/4EtqxDKiP1iIoS/WA70Ct/v/7+Ucbdl5EEhKThQQ8sbOPiQi+NY
XJAI2NjvQg9bO5jFWcHOMuGtlliGGke+lQXAC3Msb6Ms9kOAGab+xwOeEchfB2V2
KN213hkapTdwSmFyKu8TSDZZiQe3zT6QkuXOpJfHhJXWCajJBOGH1aFs5Xj5aify
IB1RVysDurk3c7U9tlh8T3HqCS10e98VepUTZ3lDXgDNE6mXUcT1uBzYJw3oApdC
BFAREjuFicgZkYK3zQ7bf8Fna4PFeldc2EfCIFmSHR+qFFP56Nhy7BuoB3opmHXS
suoV/UvMD8LG
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:34 2026 by rpki-client