Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nMQKMoVnZpbsZ2yw-NWAFExsDN4.roa
File: nMQKMoVnZpbsZ2yw-NWAFExsDN4.roa (raw, json)
Hash identifier: 9+QemB7OpFwyZFHsrvVitPilikvYPUpiL4jlz2d2WG8=
Subject key identifier: 9C:C4:0A:32:85:67:66:96:EC:67:6C:B0:F8:D5:80:14:4C:6C:0C:DE
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019E2A2C28E41B1D6E735BA30BCA5253C49B
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nMQKMoVnZpbsZ2yw-NWAFExsDN4.roa
Signing time: Fri 15 May 2026 05:46:37 +0000
ROA not before: Fri 15 May 2026 05:46:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 80.96.58.0/23 maxlen: 24
80.96.68.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.112.0/24 maxlen: 24
80.96.113.0/24 maxlen: 24
80.97.124.0/24 maxlen: 24
80.97.128.0/20 maxlen: 20
81.180.92.0/23 maxlen: 24
85.120.81.0/24 maxlen: 24
85.120.252.0/24 maxlen: 24
85.120.253.0/24 maxlen: 24
85.120.254.0/24 maxlen: 24
85.121.4.0/23 maxlen: 24
85.121.149.0/24 maxlen: 24
85.121.183.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
194.102.105.0/24 maxlen: 24
217.156.8.0/23 maxlen: 24
217.156.64.0/24 maxlen: 24
217.156.65.0/24 maxlen: 24
217.156.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:2c:28:e4:1b:1d:6e:73:5b:a3:0b:ca:52:53:c4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 15 05:46:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cc40a3285676696ec676cb0f8d580144c6c0cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:ad:d7:59:fd:fd:5d:00:8f:f0:df:52:bc:
ef:5e:ac:76:02:17:e4:05:19:96:ff:04:04:b5:87:
a7:15:10:d7:57:66:ba:46:b5:dc:55:ac:19:f5:d9:
47:af:b4:70:e7:7c:61:75:31:3b:ec:ed:e2:7e:73:
de:16:23:09:9d:d6:cb:dd:54:df:84:5b:a9:a9:2e:
fb:9d:c9:e9:57:1c:5c:3f:65:35:eb:07:de:a5:67:
57:85:83:23:ea:5e:db:57:73:74:da:63:63:50:6f:
80:e8:a5:f0:c1:1a:23:12:8e:22:2f:f4:f8:dd:65:
02:29:e0:7f:a6:e8:d6:dd:b5:51:02:f0:6f:93:e7:
8a:b1:87:bc:c3:a7:ac:c2:87:2e:4c:df:ec:12:28:
85:cb:3e:4e:5b:03:79:5a:ab:b9:ed:88:fa:6f:88:
40:d8:56:a5:11:8b:6e:69:a2:1f:95:18:d7:23:5a:
1b:c9:2d:6f:9a:5e:e7:96:06:15:66:1a:ea:be:1e:
b1:14:15:9f:af:73:9b:3e:69:3f:92:a6:8f:1f:10:
80:38:53:c9:f1:60:97:11:7f:c0:42:1d:e0:fb:a3:
7d:8a:7e:ce:c1:a8:11:b4:43:49:47:98:dd:7a:5c:
45:fb:b7:7f:ad:a6:ca:7f:9a:e3:42:2b:3c:61:d8:
8a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C4:0A:32:85:67:66:96:EC:67:6C:B0:F8:D5:80:14:4C:6C:0C:DE
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/nMQKMoVnZpbsZ2yw-NWAFExsDN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.58.0/23
80.96.68.0/24
80.96.108.0/24
80.96.112.0/23
80.97.124.0/24
80.97.128.0/20
81.180.92.0/23
85.120.81.0/24
85.120.252.0-85.120.254.255
85.121.4.0/23
85.121.149.0/24
85.121.183.0/24
85.122.114.0/24
194.102.105.0/24
217.156.8.0/23
217.156.64.0/23
217.156.123.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:72:69:bd:a4:cf:a7:22:25:32:a6:09:06:be:6e:53:91:9b:
2c:68:d4:7c:db:65:9a:55:5e:a9:38:f5:04:5a:02:03:20:87:
b1:98:08:15:fa:b9:d5:72:4c:57:c7:77:38:d7:34:d8:c7:21:
ae:c2:24:0b:69:ae:bb:76:a4:7a:1b:ea:b5:3a:c0:08:ee:be:
6a:1c:06:53:17:a2:ca:10:39:c3:05:9d:ab:97:1b:6f:cd:f8:
8c:1c:92:01:e3:e8:a2:9b:fb:eb:03:fc:18:4d:c0:29:59:55:
40:0b:b6:17:e4:aa:7f:7b:e1:ed:bd:0a:ba:bb:13:c2:29:14:
7a:d4:f4:9c:70:3c:1c:71:05:e8:78:08:0b:30:f7:b2:52:ec:
94:e6:3e:15:4b:02:24:c4:0c:e8:2a:50:c0:cb:59:e9:fd:bc:
a3:f9:72:cc:80:04:61:7d:1a:15:7b:43:7e:4a:33:e8:91:d1:
b7:13:c1:09:7a:e0:be:1c:3b:fb:73:1c:68:29:15:5e:e3:1e:
e4:fc:34:7f:ec:9e:cd:84:c6:ed:49:00:4b:f9:3d:5e:0a:21:
2f:99:ff:28:ee:c3:c0:cc:60:58:c2:71:8a:36:13:71:4c:a9:
bf:21:69:e3:6c:5d:d8:f4:25:80:7c:68:7a:35:a5:cb:52:06:
08:9f:05:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:07:42 2026 by rpki-client