Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/mPOsfR_EgIlXFPyTz3qJ-ms8oBE.roa
File: mPOsfR_EgIlXFPyTz3qJ-ms8oBE.roa (raw, json)
Hash identifier: SFWqGIC3QiWf99ScQ0ED4oUM7qmummOqBhR+e6cUZNI=
Subject key identifier: 98:F3:AC:7D:1F:C4:80:89:57:14:FC:93:CF:7A:89:FA:6B:3C:A0:11
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019FF77B272C44C96F7D3309FA18E69C8A7E
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/mPOsfR_EgIlXFPyTz3qJ-ms8oBE.roa
Signing time: Wed 12 Aug 2026 19:37:51 +0000
ROA not before: Wed 12 Aug 2026 19:37:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.254.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.212.0/23 maxlen: 23
185.199.213.0/24 maxlen: 24
185.199.214.0/23 maxlen: 24
185.221.24.0/24 maxlen: 24
185.221.25.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.221.27.0/24 maxlen: 24
185.225.168.0/23 maxlen: 23
185.225.168.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
185.225.170.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:7b:27:2c:44:c9:6f:7d:33:09:fa:18:e6:9c:8a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 12 19:37:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98f3ac7d1fc480895714fc93cf7a89fa6b3ca011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:49:04:07:84:a0:a0:b2:d5:3c:b1:c3:30:
1e:57:69:6b:f6:7a:29:19:6e:7a:47:69:8d:5c:fd:
b6:e1:20:1b:01:d6:48:f0:0b:e6:dc:dc:9f:ec:48:
4b:b7:37:12:fe:34:47:3d:63:14:52:21:56:cf:0c:
0c:06:18:96:06:96:ce:2a:75:2c:9f:5b:ce:7e:a7:
9b:75:ce:34:cf:cc:08:60:3d:8c:24:88:a5:9e:d4:
67:69:8f:4e:6b:3a:fd:25:b1:11:2f:98:ad:ef:16:
4a:da:ee:00:14:30:85:12:a7:d1:98:75:c0:87:dd:
fc:b2:f9:7a:18:43:97:d1:36:37:94:fa:59:8f:c1:
c8:bc:61:96:73:63:f8:20:1f:e4:d3:5b:88:ea:6c:
b9:f3:6e:7e:a6:02:35:93:39:20:e5:cd:87:05:cd:
26:d4:a1:cb:53:8d:03:30:ae:1a:e8:a6:f7:d0:5b:
e0:71:ac:fc:7e:77:3e:72:5f:4f:7d:f5:24:c6:3a:
c5:8b:a5:83:7e:28:ac:3a:3b:73:bb:29:c3:79:ca:
63:ed:ea:d0:92:26:d7:59:c3:43:93:9c:b0:99:a4:
5c:11:78:0a:ea:f7:e4:49:91:d5:dc:13:b5:e8:ab:
10:74:22:56:fc:37:fe:64:eb:67:f1:ff:55:83:3b:
70:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F3:AC:7D:1F:C4:80:89:57:14:FC:93:CF:7A:89:FA:6B:3C:A0:11
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/mPOsfR_EgIlXFPyTz3qJ-ms8oBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
45.157.209.0/24
79.98.245.0/24
176.125.250.0/24
185.199.151.0/24
185.199.212.0/22
185.221.24.0/22
185.225.168.0-185.225.170.255
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:e3:83:e6:7d:1d:e6:13:57:09:6e:0f:d0:eb:d9:63:9d:3a:
0c:f0:b2:8c:23:ed:57:31:dd:4f:1c:86:1d:db:3b:7d:e8:15:
56:8d:4c:e9:04:51:8b:55:95:7a:3a:07:25:77:ee:75:b1:ae:
3b:6b:af:92:25:60:49:69:7e:07:18:65:76:94:db:0b:89:c7:
f0:55:60:dc:5a:3b:20:a8:46:99:83:27:c4:c4:39:99:a9:bb:
b8:d9:a0:4c:01:f5:0b:d1:2c:17:dd:10:86:1e:c6:67:4d:0c:
da:fc:09:c3:24:4a:38:9a:51:3e:86:1f:15:62:ab:fc:58:88:
86:07:af:ab:0f:f6:02:3a:57:2b:d1:bb:ad:25:40:45:42:3e:
98:be:cb:e0:4e:fa:e6:d7:1b:59:e4:90:e3:dd:e9:ee:59:db:
e5:2a:a7:65:e5:ca:5e:d1:71:cd:1a:0b:c6:bd:69:0f:8a:19:
1d:82:4d:0d:11:d7:67:57:26:ba:19:07:0b:c2:60:5e:e6:ad:
13:06:7f:51:75:f8:2f:51:0e:84:1a:4c:d4:c1:f3:e4:f1:f0:
a5:7a:3c:de:36:04:12:cd:7e:26:da:8e:3b:7f:3d:98:db:5b:
95:85:74:5e:4f:cf:94:da:b4:21:e6:3d:a0:46:0d:02:d5:0c:
bf:f8:34:66
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZ/3eycsRMlvfTMJ+hjmnIp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYwODEyMTkzNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGYzYWM3ZDFmYzQ4MDg5NTcxNGZjOTNjZjdhODlmYTZiM2NhMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL1JBAeEoKCy1TyxwzAeV2lr9nop
GW56R2mNXP224SAbAdZI8Avm3Nyf7EhLtzcS/jRHPWMUUiFWzwwMBhiWBpbOKnUs
n1vOfqebdc40z8wIYD2MJIilntRnaY9Oazr9JbERL5it7xZK2u4AFDCFEqfRmHXA
h938svl6GEOX0TY3lPpZj8HIvGGWc2P4IB/k01uI6my5825+pgI1kzkg5c2HBc0m
1KHLU40DMK4a6Kb30Fvgcaz8fnc+cl9PffUkxjrFi6WDfiisOjtzuynDecpj7erQ
kibXWcNDk5ywmaRcEXgK6vfkSZHV3BO16KsQdCJW/Df+ZOtn8f9Vgztw5QIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFJjzrH0fxICJVxT8k896ifprPKARMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvbVBPc2ZSX0VnSWxYRlB5VHozcUotbXM4b0JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQALZv+AwQA
LZ3RAwQAT2L1AwQAsH36AwQAuceXAwQCucfUAwQCud0YMAwDBAO54agDBAC54aoD
BAC5+howDQYJKoZIhvcNAQELBQADggEBAK7jg+Z9HeYTVwluD9Dr2WOdOgzwsowj
7Vcx3U8chh3bO33oFVaNTOkEUYtVlXo6ByV37nWxrjtrr5IlYElpfgcYZXaU2wuJ
x/BVYNxaOyCoRpmDJ8TEOZmpu7jZoEwB9QvRLBfdEIYexmdNDNr8CcMkSjiaUT6G
HxViq/xYiIYHr6sP9gI6VyvRu60lQEVCPpi+y+BO+ubXG1nkkOPd6e5Z2+Uqp2Xl
yl7Rcc0aC8a9aQ+KGR2CTQ0R12dXJroZBwvCYF7mrRMGf1F1+C9RDoQaTNTB8+Tx
8KV6PN42BBLNfibajjt/PZjbW5WFdF5Pz5TatCHmPaBGDQLVDL/4NGY=
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:57:43 2026 by rpki-client