Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/MmBVZEE7t1F48zydxhG4fXjDIDA.roa
File: MmBVZEE7t1F48zydxhG4fXjDIDA.roa (raw, json)
Hash identifier: Tu0M9jJH2KR5834+WYzpJt906XWa6+v9oxkO56rujmo=
Subject key identifier: 32:60:55:64:41:3B:B7:51:78:F3:3C:9D:C6:11:B8:7D:78:C3:20:30
Certificate issuer: /CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Certificate serial: 019DCE7BB514261D1EFB591B20B6229CAA6A
Authority key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/MmBVZEE7t1F48zydxhG4fXjDIDA.roa
Signing time: Mon 27 Apr 2026 10:28:26 +0000
ROA not before: Mon 27 Apr 2026 10:28:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197704
IP address blocks: 5.63.188.0/23 maxlen: 23
93.157.64.0/24 maxlen: 24
193.200.190.0/24 maxlen: 24
195.242.138.0/24 maxlen: 24
195.242.139.0/24 maxlen: 24
217.114.34.0/24 maxlen: 24
2a0d:a040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:7b:b5:14:26:1d:1e:fb:59:1b:20:b6:22:9c:aa:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Validity
Not Before: Apr 27 10:28:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32605564413bb75178f33c9dc611b87d78c32030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:cf:4d:4c:10:56:c6:43:f2:5b:5c:cb:87:
7d:7e:90:4e:63:17:26:5b:e4:38:7e:40:54:58:29:
52:a6:25:bb:b2:7c:1e:7b:21:60:bd:7b:2e:a3:20:
6e:5d:23:c9:aa:73:47:f6:6a:f9:ba:cc:d0:b1:5a:
c0:4d:56:4f:25:a8:f3:28:6a:fc:36:e9:02:e5:71:
60:5f:3e:54:fe:36:b1:4d:3f:00:fb:73:15:d4:3b:
75:c7:e9:fd:b8:3d:35:bb:be:fe:11:1b:4b:e6:48:
a4:93:d9:68:55:76:77:ed:d3:5f:3a:bc:39:8b:12:
65:3b:46:7c:ac:07:3e:83:3f:44:68:13:9f:f1:fe:
00:2c:2a:0b:fe:68:be:ae:77:6f:1b:fb:8b:ed:14:
dc:fa:15:63:d0:9e:11:3a:c2:ae:8a:1d:67:04:17:
46:94:4f:b4:5e:3b:65:f4:33:c9:ca:bc:95:bc:c3:
1d:75:76:59:67:44:43:69:34:54:7e:61:72:28:b5:
0b:6c:b5:a9:e6:12:1a:24:31:cd:86:0b:58:48:eb:
de:ec:d7:5a:91:2c:f1:5f:e6:04:f0:79:1c:b7:7b:
35:9f:26:1e:54:30:c3:b0:7c:d0:50:3e:ad:1c:a4:
4c:73:45:96:6e:42:a1:a0:c4:b7:bd:71:a3:7d:d2:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:60:55:64:41:3B:B7:51:78:F3:3C:9D:C6:11:B8:7D:78:C3:20:30
X509v3 Authority Key Identifier:
keyid:64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/MmBVZEE7t1F48zydxhG4fXjDIDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.188.0/23
93.157.64.0/24
193.200.190.0/24
195.242.138.0/23
217.114.34.0/24
IPv6:
2a0d:a040::/29
Signature Algorithm: sha256WithRSAEncryption
4d:9f:c0:49:f7:82:e8:62:e0:8e:12:ef:13:e1:37:7c:57:51:
ca:60:40:96:a1:50:c3:96:d2:dc:5d:1c:b8:8b:f0:8e:2a:7e:
ff:c8:ea:01:0f:a3:fb:37:2d:2f:66:c7:17:71:47:64:a2:02:
b3:cb:b0:38:c3:bc:18:23:0e:49:d5:01:f9:ff:57:bf:7d:0b:
d5:4f:f0:f2:7a:59:e0:c2:e9:28:db:2a:c4:5b:e7:6e:18:08:
44:59:c3:b8:e6:52:38:76:6a:f9:bd:bf:d6:b8:95:a4:8f:57:
92:d4:02:04:c9:df:69:4b:92:da:d3:f8:58:b6:5d:54:3c:2a:
ad:8d:83:0e:f0:62:9e:de:c3:e0:02:9b:3f:ae:50:2a:b6:a2:
86:4f:07:4c:72:19:b4:33:4c:9d:05:98:ef:ae:e2:a4:89:52:
bc:4b:eb:ef:d2:aa:30:dd:7a:e0:48:00:31:85:8e:86:52:be:
f2:ad:dd:d7:30:fd:1b:be:05:46:8e:0c:de:2b:f6:f7:22:aa:
1e:17:f7:01:bf:f8:a2:10:e1:5c:f0:fa:62:cf:b3:84:a3:9c:
73:13:fb:79:bc:18:fd:50:9c:6b:75:7d:eb:cf:61:c0:66:53:
df:48:90:80:f1:95:03:4b:b2:1d:5d:ec:39:48:a8:10:4e:84:
d6:aa:60:c4
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZ3Oe7UUJh0e+1kbILYinKpqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDlmYjNmMmNhZmVkNTk0ZTA2OGFkZWRjNzhhOTdjODgy
OWMxMDEwHhcNMjYwNDI3MTAyODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjYwNTU2NDQxM2JiNzUxNzhmMzNjOWRjNjExYjg3ZDc4YzMyMDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoHPTUwQVsZD8ltcy4d9fpBOYxcm
W+Q4fkBUWClSpiW7snweeyFgvXsuoyBuXSPJqnNH9mr5uszQsVrATVZPJajzKGr8
NukC5XFgXz5U/jaxTT8A+3MV1Dt1x+n9uD01u77+ERtL5kikk9loVXZ37dNfOrw5
ixJlO0Z8rAc+gz9EaBOf8f4ALCoL/mi+rndvG/uL7RTc+hVj0J4ROsKuih1nBBdG
lE+0Xjtl9DPJyryVvMMddXZZZ0RDaTRUfmFyKLULbLWp5hIaJDHNhgtYSOve7Nda
kSzxX+YE8Hkct3s1nyYeVDDDsHzQUD6tHKRMc0WWbkKhoMS3vXGjfdJAvwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFDJgVWRBO7dRePM8ncYRuH14wyAwMB8GA1UdIwQY
MBaAFGTZ+z8sr+1ZTgaK3tx4qXyIKcEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5uN1B5eXY3VmxPQm9yZTNIaXBmSWdwd1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85OWExZGEtMjBkYS00YTY4LWIzMjYt
MjYxN2EwZWNiYzE0LzEvTW1CVlpFRTd0MUY0OHp5ZHhoRzRmWGpESURBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85OWExZGEtMjBkYS00YTY4LWIzMjYtMjYxN2EwZWNiYzE0
LzEvWk5uN1B5eXY3VmxPQm9yZTNIaXBmSWdwd1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBBT+8AwQA
XZ1AAwQAwci+AwQBw/KKAwQA2XIiMA0EAgACMAcDBQMqDaBAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNn8BJ94LoYuCOEu8T4Td8V1HKYECWoVDDltLcXRy4i/COKn7/yOoB
D6P7Ny0vZscXcUdkogKzy7A4w7wYIw5J1QH5/1e/fQvVT/Dyelngwuko2yrEW+du
GAhEWcO45lI4dmr5vb/WuJWkj1eS1AIEyd9pS5La0/hYtl1UPCqtjYMO8GKe3sPg
Aps/rlAqtqKGTwdMchm0M0ydBZjvruKkiVK8S+vv0qow3XrgSAAxhY6GUr7yrd3X
MP0bvgVGjgzeK/b3IqoeF/cBv/iiEOFc8Ppiz7OEo5xzE/t5vBj9UJxrdX3rz2HA
ZlPfSJCA8ZUDS7IdXew5SKgQToTWqmDE
-----END CERTIFICATE-----
Generated at Mon Apr 27 17:57:44 2026 by rpki-client