Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/mcnbsGgom3nQNmEDy6cdmP7Xnu8.roa
File: mcnbsGgom3nQNmEDy6cdmP7Xnu8.roa (raw, json)
Hash identifier: OD/pABDaq2M9ctb18nBvVzCkNT8JS1u+DVfD1NqwFng=
Subject key identifier: 99:C9:DB:B0:68:28:9B:79:D0:36:61:03:CB:A7:1D:98:FE:D7:9E:EF
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01A1783D4B230D18965B9E77A9FE0019F464
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/mcnbsGgom3nQNmEDy6cdmP7Xnu8.roa
Signing time: Mon 26 Oct 2026 12:44:05 +0000
ROA not before: Mon 26 Oct 2026 12:44:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24631
IP address blocks: 5.200.64.0/19 maxlen: 24
31.24.200.0/21 maxlen: 24
31.25.104.0/21 maxlen: 24
31.217.208.0/21 maxlen: 24
31.217.208.0/22 maxlen: 22
31.217.212.0/22 maxlen: 22
37.191.64.0/19 maxlen: 24
37.191.92.0/22 maxlen: 24
46.32.0.0/19 maxlen: 24
46.32.0.0/21 maxlen: 21
46.32.0.0/22 maxlen: 22
46.32.2.0/24 maxlen: 24
46.32.3.0/24 maxlen: 24
46.32.4.0/24 maxlen: 24
46.32.6.0/23 maxlen: 23
46.32.6.0/24 maxlen: 24
46.32.7.0/24 maxlen: 24
46.32.8.0/21 maxlen: 21
46.32.8.0/24 maxlen: 24
46.32.10.0/23 maxlen: 23
46.32.12.0/24 maxlen: 24
46.32.13.0/24 maxlen: 24
46.32.15.0/24 maxlen: 24
46.32.16.0/20 maxlen: 24
46.32.20.0/24 maxlen: 24
46.32.21.0/24 maxlen: 24
46.32.23.0/24 maxlen: 24
46.32.25.0/24 maxlen: 24
46.32.26.0/24 maxlen: 24
46.32.27.0/24 maxlen: 24
46.32.30.0/24 maxlen: 24
46.34.164.0/22 maxlen: 24
46.34.168.0/21 maxlen: 24
46.34.176.0/20 maxlen: 24
46.34.176.0/23 maxlen: 23
46.34.177.0/24 maxlen: 24
46.34.180.0/22 maxlen: 24
46.34.184.0/22 maxlen: 24
46.34.188.0/22 maxlen: 24
46.34.190.0/23 maxlen: 24
46.34.190.0/24 maxlen: 24
78.111.8.0/21 maxlen: 21
78.111.8.0/23 maxlen: 23
78.111.8.0/24 maxlen: 24
78.111.9.0/24 maxlen: 24
78.111.10.0/23 maxlen: 24
78.111.14.0/24 maxlen: 24
78.154.32.0/19 maxlen: 24
78.158.160.0/19 maxlen: 24
78.158.161.0/24 maxlen: 24
78.158.163.0/24 maxlen: 24
78.158.165.0/24 maxlen: 24
78.158.166.0/24 maxlen: 24
78.158.167.0/24 maxlen: 24
78.158.169.0/24 maxlen: 24
78.158.171.0/24 maxlen: 24
78.158.173.0/24 maxlen: 24
78.158.177.0/24 maxlen: 24
78.158.178.0/24 maxlen: 24
78.158.179.0/24 maxlen: 24
78.158.182.0/24 maxlen: 24
78.158.183.0/24 maxlen: 24
79.132.200.0/21 maxlen: 24
79.132.204.0/22 maxlen: 22
79.132.205.0/24 maxlen: 24
79.132.208.0/20 maxlen: 24
79.174.160.0/21 maxlen: 24
80.71.112.0/20 maxlen: 20
80.71.112.0/23 maxlen: 23
80.71.112.0/24 maxlen: 24
80.71.114.0/24 maxlen: 24
80.71.115.0/24 maxlen: 24
80.71.116.0/22 maxlen: 22
80.71.120.0/21 maxlen: 21
80.71.120.0/22 maxlen: 22
80.71.120.0/23 maxlen: 23
80.71.121.0/24 maxlen: 24
80.71.126.0/24 maxlen: 24
80.71.127.0/24 maxlen: 24
80.253.128.0/19 maxlen: 24
80.253.129.0/24 maxlen: 24
80.253.133.0/24 maxlen: 24
80.253.135.0/24 maxlen: 24
80.253.136.0/24 maxlen: 24
80.253.139.0/24 maxlen: 24
80.253.145.0/24 maxlen: 24
80.253.147.0/24 maxlen: 24
80.253.148.0/24 maxlen: 24
80.253.151.0/24 maxlen: 24
80.253.152.0/24 maxlen: 24
81.29.240.0/20 maxlen: 20
81.29.240.0/24 maxlen: 24
81.29.241.0/24 maxlen: 24
81.29.242.0/24 maxlen: 24
81.29.243.0/24 maxlen: 24
81.29.244.0/22 maxlen: 22
81.29.244.0/24 maxlen: 24
81.29.246.0/24 maxlen: 24
81.29.252.0/23 maxlen: 23
81.29.253.0/24 maxlen: 24
81.29.255.0/24 maxlen: 24
86.109.32.0/19 maxlen: 24
86.109.35.0/24 maxlen: 24
87.247.179.0/24 maxlen: 24
87.247.180.0/22 maxlen: 23
89.235.68.0/22 maxlen: 24
89.235.68.0/24 maxlen: 24
89.235.70.0/24 maxlen: 24
89.235.71.0/24 maxlen: 24
89.235.72.0/21 maxlen: 24
89.235.76.0/24 maxlen: 24
89.235.77.0/24 maxlen: 24
89.235.78.0/23 maxlen: 24
109.201.0.0/19 maxlen: 24
109.201.11.0/24 maxlen: 24
109.201.18.0/23 maxlen: 23
109.201.18.0/24 maxlen: 24
109.201.19.0/24 maxlen: 24
109.201.21.0/24 maxlen: 24
109.201.27.0/24 maxlen: 24
109.230.72.0/21 maxlen: 24
109.230.72.0/22 maxlen: 22
109.230.76.0/22 maxlen: 22
176.221.64.0/21 maxlen: 24
176.221.66.0/23 maxlen: 23
176.221.70.0/24 maxlen: 24
178.248.40.0/21 maxlen: 21
178.248.40.0/22 maxlen: 22
178.248.41.0/24 maxlen: 24
178.248.42.0/24 maxlen: 24
178.248.43.0/24 maxlen: 24
178.248.44.0/22 maxlen: 22
178.248.44.0/24 maxlen: 24
185.4.16.0/22 maxlen: 24
185.4.17.0/24 maxlen: 24
185.12.60.0/22 maxlen: 22
185.12.60.0/23 maxlen: 23
185.12.60.0/24 maxlen: 24
185.12.62.0/24 maxlen: 24
185.12.63.0/24 maxlen: 24
185.21.68.0/22 maxlen: 22
185.21.76.0/22 maxlen: 22
185.21.78.0/23 maxlen: 23
185.40.240.0/22 maxlen: 24
185.45.188.0/22 maxlen: 24
185.70.60.0/22 maxlen: 22
185.82.164.0/22 maxlen: 24
185.85.68.0/22 maxlen: 24
185.101.228.0/22 maxlen: 22
185.101.228.0/24 maxlen: 24
185.101.231.0/24 maxlen: 24
185.104.228.0/22 maxlen: 22
185.104.229.0/24 maxlen: 24
185.104.230.0/23 maxlen: 23
185.133.154.0/24 maxlen: 24
185.142.232.0/22 maxlen: 23
185.142.232.0/24 maxlen: 24
185.153.184.0/22 maxlen: 22
185.153.185.0/24 maxlen: 24
185.190.21.0/24 maxlen: 24
185.190.22.0/24 maxlen: 24
185.190.23.0/24 maxlen: 24
185.208.148.0/22 maxlen: 24
185.208.148.0/23 maxlen: 23
188.75.64.0/18 maxlen: 24
188.75.80.0/21 maxlen: 21
188.75.84.0/24 maxlen: 24
188.75.86.0/23 maxlen: 23
188.75.92.0/23 maxlen: 24
188.75.93.0/24 maxlen: 24
188.75.95.0/24 maxlen: 24
188.75.96.0/22 maxlen: 22
188.75.98.0/24 maxlen: 24
188.75.100.0/23 maxlen: 23
188.75.104.0/24 maxlen: 24
188.75.106.0/24 maxlen: 24
188.75.107.0/24 maxlen: 24
188.75.108.0/22 maxlen: 22
188.75.108.0/24 maxlen: 24
188.75.109.0/24 maxlen: 24
188.75.127.0/24 maxlen: 24
188.136.128.0/21 maxlen: 24
188.136.140.0/22 maxlen: 24
188.136.144.0/20 maxlen: 24
188.136.160.0/19 maxlen: 24
188.136.192.0/22 maxlen: 24
188.136.196.0/22 maxlen: 24
188.136.200.0/21 maxlen: 24
188.136.208.0/24 maxlen: 24
188.136.209.0/24 maxlen: 24
188.136.210.0/23 maxlen: 24
188.136.212.0/22 maxlen: 24
188.136.216.0/22 maxlen: 24
188.136.218.0/23 maxlen: 24
188.136.222.0/23 maxlen: 24
213.195.0.0/20 maxlen: 24
213.195.1.0/24 maxlen: 24
213.195.16.0/21 maxlen: 24
217.66.192.0/19 maxlen: 24
217.66.203.0/24 maxlen: 24
217.66.204.0/24 maxlen: 24
217.66.206.0/23 maxlen: 23
217.66.209.0/24 maxlen: 24
217.66.210.0/24 maxlen: 24
217.66.212.0/22 maxlen: 22
217.66.212.0/24 maxlen: 24
217.66.216.0/22 maxlen: 22
217.66.216.0/24 maxlen: 24
217.66.218.0/24 maxlen: 24
217.146.208.0/20 maxlen: 24
2a06:db80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 12:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:3d:4b:23:0d:18:96:5b:9e:77:a9:fe:00:19:f4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Oct 26 12:44:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99c9dbb068289b79d0366103cba71d98fed79eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:6c:1f:44:8b:e3:a3:bb:10:23:fd:34:57:
37:81:c3:b3:fe:9f:12:2b:3f:1e:b8:56:45:19:c0:
c4:2b:e0:62:3c:37:6b:7d:19:77:bc:80:c5:7f:85:
7c:9f:94:ff:0b:63:0d:90:15:f7:f1:e4:bc:bd:0e:
ba:75:48:4e:69:a8:c7:4e:51:dc:15:56:e5:8b:4f:
de:8f:4a:87:db:74:ff:0c:d4:6c:b3:e4:de:12:fb:
bf:f8:1f:50:b9:85:08:11:af:95:07:b1:d5:ef:a5:
dd:d0:a1:eb:0f:0f:eb:bb:7f:8c:64:de:00:6b:8b:
2a:19:05:ab:39:ea:b8:6f:5a:e9:40:5f:31:d1:a6:
42:c7:4e:c0:fd:03:54:f5:9c:7e:7f:8b:26:00:00:
a4:73:1a:a3:1a:75:d7:46:e3:87:a6:8d:2a:18:f3:
f0:e2:1d:c1:a7:6c:df:c7:da:3f:4b:4a:48:fa:f7:
3b:e5:5b:12:90:a4:c3:7e:b7:d7:3b:36:bc:5e:bc:
62:db:ae:03:4a:db:c8:b3:4b:d5:3e:da:62:a4:5d:
9e:46:d9:73:d9:e8:b4:f9:be:39:7f:55:17:db:98:
88:12:08:b0:c7:df:97:4c:27:3f:b2:2b:7d:fa:cd:
b1:c2:57:a6:8d:de:c3:4e:b1:f5:cb:49:f2:91:f7:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C9:DB:B0:68:28:9B:79:D0:36:61:03:CB:A7:1D:98:FE:D7:9E:EF
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/mcnbsGgom3nQNmEDy6cdmP7Xnu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.200.64.0/19
31.24.200.0/21
31.25.104.0/21
31.217.208.0/21
37.191.64.0/19
46.32.0.0/19
46.34.164.0-46.34.191.255
78.111.8.0/21
78.154.32.0/19
78.158.160.0/19
79.132.200.0-79.132.223.255
79.174.160.0/21
80.71.112.0/20
80.253.128.0/19
81.29.240.0/20
86.109.32.0/19
87.247.179.0-87.247.183.255
89.235.68.0-89.235.79.255
109.201.0.0/19
109.230.72.0/21
176.221.64.0/21
178.248.40.0/21
185.4.16.0/22
185.12.60.0/22
185.21.68.0/22
185.21.76.0/22
185.40.240.0/22
185.45.188.0/22
185.70.60.0/22
185.82.164.0/22
185.85.68.0/22
185.101.228.0/22
185.104.228.0/22
185.133.154.0/24
185.142.232.0/22
185.153.184.0/22
185.190.21.0-185.190.23.255
185.208.148.0/22
188.75.64.0/18
188.136.128.0/21
188.136.140.0-188.136.219.255
188.136.222.0/23
213.195.0.0-213.195.23.255
217.66.192.0/19
217.146.208.0/20
IPv6:
2a06:db80::/29
Signature Algorithm: sha256WithRSAEncryption
3e:eb:6c:46:3e:75:bc:1c:06:e7:3e:b8:d6:51:e9:34:ad:d5:
6c:e3:5b:2a:f8:41:86:9d:ce:f1:d0:94:8f:ed:9d:e0:04:d8:
c6:03:04:43:1b:d0:f0:3d:13:6c:25:00:31:dd:4f:24:24:40:
68:af:4b:9f:9f:d0:be:c3:73:27:06:f3:82:06:ed:95:7c:01:
5f:60:84:c1:2f:08:87:4d:1e:14:de:d0:cb:be:7d:05:5b:1a:
d8:18:c3:2c:29:b5:f4:af:93:be:88:8b:11:20:52:44:41:4b:
b1:8f:71:40:4d:22:17:20:96:9c:f6:fa:f1:96:a7:81:45:09:
e4:bf:f6:96:51:d8:0b:29:c7:33:c1:46:4d:13:a1:74:2a:f3:
26:1d:f9:9a:d5:f9:c8:56:6b:5b:7c:bc:65:bc:01:1d:06:9d:
70:d2:d3:0d:34:8b:00:21:61:68:23:23:0d:b6:5a:b7:08:4b:
d7:e3:eb:c0:00:d7:95:2f:af:dd:45:c6:cd:c6:47:bf:c6:fd:
ef:5c:5e:22:8c:ac:b4:1c:9e:3b:6f:00:99:de:79:5a:82:62:
cd:fa:79:5a:55:7d:ff:8a:61:6f:b4:cf:dc:6c:b4:74:0f:15:
e7:12:21:1b:b2:3a:ab:ad:9a:15:15:73:a4:a9:8b:0a:aa:3d:
53:07:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:43 2026 by rpki-client