Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/mVq-RheS9loKkvNE-HJP6Bl44Xs.roa
File: mVq-RheS9loKkvNE-HJP6Bl44Xs.roa (raw, json)
Hash identifier: FXO6rXJTO+B39ttTEvJ84SLgGjNXsixgoobfbc73mKg=
Subject key identifier: 99:5A:BE:46:17:92:F6:5A:0A:92:F3:44:F8:72:4F:E8:19:78:E1:7B
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01A176C1AA2887277DAE4B7A89E08253D0B7
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/mVq-RheS9loKkvNE-HJP6Bl44Xs.roa
Signing time: Mon 26 Oct 2026 05:49:25 +0000
ROA not before: Mon 26 Oct 2026 05:49:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 2.182.172.0/24 maxlen: 24
2.188.40.0/22 maxlen: 24
2.188.72.0/22 maxlen: 24
2.188.160.0/21 maxlen: 24
2.188.160.0/22 maxlen: 22
2.188.161.0/24 maxlen: 24
2.188.164.0/22 maxlen: 22
2.188.165.0/24 maxlen: 24
2.188.170.0/24 maxlen: 24
2.188.176.0/23 maxlen: 23
2.188.192.0/19 maxlen: 24
2.188.224.0/20 maxlen: 24
2.188.225.0/24 maxlen: 24
2.188.232.0/23 maxlen: 23
2.188.234.0/24 maxlen: 24
2.188.236.0/23 maxlen: 23
2.188.240.0/20 maxlen: 24
2.188.243.0/24 maxlen: 24
2.189.48.0/21 maxlen: 24
2.189.64.0/22 maxlen: 24
2.189.80.0/21 maxlen: 24
2.189.88.0/21 maxlen: 24
2.189.160.0/21 maxlen: 24
2.189.168.0/21 maxlen: 24
78.38.25.0/24 maxlen: 24
78.38.243.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.43.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.59.0/24 maxlen: 24
78.39.62.0/23 maxlen: 24
78.39.155.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:c1:aa:28:87:27:7d:ae:4b:7a:89:e0:82:53:d0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Oct 26 05:49:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=995abe461792f65a0a92f344f8724fe81978e17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:eb:09:18:67:20:cc:df:2a:82:eb:a6:9d:64:
c5:d5:af:c6:fc:3b:7c:36:55:8d:58:bd:70:9f:fe:
a5:05:e2:bf:56:6d:ab:b3:1b:5c:0b:d2:55:47:22:
ef:df:db:64:14:b0:12:6f:5e:bb:b7:97:a3:9c:5f:
67:53:6b:80:f0:cc:36:67:7c:b5:22:31:e7:ce:2a:
6b:d7:5e:25:ba:8a:34:42:54:0e:75:77:ef:4c:8b:
71:8b:93:2b:35:96:15:ed:8d:1f:3d:bd:ea:7f:00:
be:b5:00:b5:2e:32:98:e8:b4:e1:5a:82:96:fc:c0:
33:ab:22:5a:6e:26:d3:09:35:3c:64:a3:d3:ab:15:
9f:8d:be:c1:b6:b2:7b:a0:c8:e2:8f:25:7a:90:ea:
94:35:0c:53:ba:e0:ef:2c:6d:73:75:fa:4e:94:2e:
30:cc:e5:a9:3e:f0:79:d0:b9:d0:eb:7f:72:53:71:
26:12:0f:35:25:a8:29:80:00:a2:1f:9d:7a:6b:02:
a4:2e:e9:4f:24:b5:ae:a0:fa:4b:17:3d:97:cb:99:
21:39:5d:46:77:71:93:fc:51:f1:a0:4f:e9:2e:e8:
8b:fb:6b:ff:a7:c7:7c:9c:f7:2a:66:6f:bb:bc:b1:
69:45:68:d1:ca:c7:e8:b8:bd:60:fe:5b:f0:38:f2:
40:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5A:BE:46:17:92:F6:5A:0A:92:F3:44:F8:72:4F:E8:19:78:E1:7B
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/mVq-RheS9loKkvNE-HJP6Bl44Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.182.172.0/24
2.188.40.0/22
2.188.72.0/22
2.188.160.0/21
2.188.170.0/24
2.188.176.0/23
2.188.192.0/18
2.189.48.0/21
2.189.64.0/22
2.189.80.0/20
2.189.160.0/20
78.38.25.0/24
78.38.243.0/24
78.38.246.0/24
78.38.248.0/24
78.38.250.0/23
78.38.254.0/24
78.39.40.0/24
78.39.43.0/24
78.39.46.0-78.39.51.255
78.39.53.0-78.39.59.255
78.39.62.0/23
78.39.155.0-78.39.156.255
Signature Algorithm: sha256WithRSAEncryption
99:e7:92:0f:44:80:f9:00:9f:57:40:3b:5d:28:8e:9d:64:d0:
e1:89:d0:ee:8f:c6:91:fb:c4:23:e8:a0:71:ef:8b:d2:c6:dd:
73:61:fe:f9:e1:b4:25:f9:38:5b:7a:53:86:75:b0:a7:38:57:
ea:ce:bf:3e:86:1b:1e:05:e6:7e:2d:35:db:aa:fe:d0:5b:02:
4d:d1:b5:fc:7d:fb:c4:b4:9f:ec:bf:97:76:7b:97:13:92:0f:
ba:a4:6c:4e:36:06:59:f4:ea:94:4b:37:e2:5f:5d:d5:54:1e:
da:43:42:b2:6c:9c:93:a9:15:ac:7a:98:1a:d2:c3:80:78:fa:
00:63:94:27:b9:95:f8:32:cc:e1:77:07:06:d2:91:92:a7:41:
ad:de:d4:b6:fd:6e:2a:b7:02:39:82:eb:4a:82:f1:8a:1d:16:
cd:17:c3:7e:9d:a5:e3:40:6d:cb:d5:44:8c:86:b8:50:36:0f:
e1:27:bc:81:bc:84:e6:67:3c:18:2b:68:a0:8e:08:3b:0a:9d:
db:92:7d:20:b1:0a:3c:6d:dc:4a:32:73:a4:da:e5:81:4d:ef:
1e:07:1b:5f:ef:12:db:ee:f3:04:57:1d:a6:99:35:b2:07:f8:
2b:a2:78:3c:a4:15:8d:d9:cd:a7:6a:be:71:a7:c2:e1:8c:35:
17:5a:80:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:04:53 2026 by rpki-client