Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/Mm8FuvIReawHaCrGcAIQWFyfKpw.roa
File: Mm8FuvIReawHaCrGcAIQWFyfKpw.roa (raw, json)
Hash identifier: MmD8qovWUiyAoF1IiXxiIKCOfphAmevvZ+nJgSto/gI=
Subject key identifier: 32:6F:05:BA:F2:11:79:AC:07:68:2A:C6:70:02:10:58:5C:9F:2A:9C
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 01A143DC8461D85759DCB949BD2742E2F0F9
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/Mm8FuvIReawHaCrGcAIQWFyfKpw.roa
Signing time: Fri 16 Oct 2026 08:38:07 +0000
ROA not before: Fri 16 Oct 2026 08:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56911
IP address blocks: 185.47.136.0/24 maxlen: 24
185.47.137.0/24 maxlen: 24
185.47.139.0/24 maxlen: 24
185.139.180.0/24 maxlen: 24
195.177.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:dc:84:61:d8:57:59:dc:b9:49:bd:27:42:e2:f0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Oct 16 08:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=326f05baf21179ac07682ac6700210585c9f2a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:bb:55:3c:b9:31:65:e4:75:40:4f:ab:24:
a7:53:28:0d:f0:62:33:cb:c5:50:02:cb:75:63:50:
45:c5:f8:59:4b:d7:49:ac:0f:8f:e6:65:dd:09:00:
5d:59:49:ca:70:73:aa:41:88:e4:b7:e4:b8:be:42:
f9:ff:94:dd:77:c5:a0:a1:10:7a:57:ec:7b:c7:da:
92:d3:bb:d1:95:dd:8f:c9:9d:9c:3d:43:e1:c6:a0:
37:c9:fd:a8:a0:d7:13:bd:51:ce:fd:a4:2b:40:4e:
b1:87:a6:48:d9:ad:a6:93:d1:29:7b:fd:50:be:40:
5d:87:ac:8d:39:bc:02:fc:52:a4:b4:55:8a:1d:0e:
30:90:33:5d:96:aa:d7:2a:f6:05:79:d8:51:0f:f0:
ea:2f:46:5e:af:09:c8:ef:b8:6e:f8:ac:58:bf:cf:
41:68:89:cc:34:b3:cf:5d:3d:19:77:06:b3:5c:05:
a1:a3:00:01:0c:1d:39:83:fd:d1:ad:c5:bd:f0:ad:
c7:3a:38:46:cb:d5:47:c0:62:f4:88:f5:c4:6e:8d:
4d:a5:c9:f4:22:9d:74:bc:51:32:69:b6:3c:ac:21:
db:43:f1:55:39:0a:8f:6a:35:43:36:ba:be:3d:28:
78:74:d9:f7:a5:c7:18:5f:88:04:5f:65:85:6c:ba:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6F:05:BA:F2:11:79:AC:07:68:2A:C6:70:02:10:58:5C:9F:2A:9C
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/Mm8FuvIReawHaCrGcAIQWFyfKpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.136.0/23
185.47.139.0/24
185.139.180.0/24
195.177.113.0/24
Signature Algorithm: sha256WithRSAEncryption
67:30:79:26:15:2b:43:07:76:88:7d:7a:67:93:9c:5f:83:d3:
41:7a:42:a6:7e:f7:ef:aa:e2:df:67:e0:13:c0:f4:eb:f7:ec:
90:6e:a9:73:d9:92:54:1e:51:82:32:90:cc:6a:26:c8:ae:18:
d6:20:19:7a:7b:e9:3b:f0:18:08:48:70:09:96:b2:82:3c:9a:
26:fb:e2:26:38:95:f5:57:69:be:fb:bb:58:d2:5f:01:fd:a8:
e4:6a:ba:d5:20:95:2d:3a:f0:ee:39:81:59:53:44:60:c8:b0:
06:ff:2f:f3:86:cb:5f:93:6f:f0:dd:21:97:73:5f:5d:ac:1d:
4b:e7:95:5f:0c:39:33:cb:29:5d:87:ce:ba:2b:ed:20:e8:14:
6a:66:5e:0c:e4:5a:62:84:20:82:f2:7c:fb:49:ff:96:f1:52:
4f:02:c0:76:5b:bb:5b:62:d7:19:ac:6d:23:fd:e9:18:e3:a8:
b1:9b:b8:ae:81:5e:6d:a6:44:f6:f3:c5:ae:ee:c9:cd:5a:00:
e6:b0:f3:de:f0:ce:0d:44:63:92:a4:b4:a1:42:ad:33:fb:89:
ab:ba:87:16:1c:69:e8:31:54:d2:ad:16:37:2b:5b:1d:1f:53:
a3:0b:a3:ac:3f:b5:eb:1c:ad:4d:1d:c5:26:1e:fb:46:85:7f:
8f:8f:27:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:49 2026 by rpki-client