Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MJPjOmuT9SI6FC9WuGtbR5RvmZs.roa
File: MJPjOmuT9SI6FC9WuGtbR5RvmZs.roa (raw, json)
Hash identifier: aGkvva6QbHGdj2PegppqbqPHXEqm/PjiAI+g1xc2hAw=
Subject key identifier: 30:93:E3:3A:6B:93:F5:22:3A:14:2F:56:B8:6B:5B:47:94:6F:99:9B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FCD3DF05AD270F9FD80730032FBEB47FE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MJPjOmuT9SI6FC9WuGtbR5RvmZs.roa
Signing time: Tue 04 Aug 2026 14:46:56 +0000
ROA not before: Tue 04 Aug 2026 14:46:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201021
IP address blocks: 77.81.88.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
78.17.182.0/24 maxlen: 24
78.17.255.0/24 maxlen: 24
86.107.51.0/24 maxlen: 24
89.37.194.0/24 maxlen: 24
89.39.125.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
89.125.20.0/24 maxlen: 24
89.125.252.0/24 maxlen: 24
93.90.75.0/24 maxlen: 24
93.115.105.0/24 maxlen: 24
104.143.203.0/24 maxlen: 24
104.143.216.0/24 maxlen: 24
162.35.226.0/24 maxlen: 24
162.35.228.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
212.192.5.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:3d:f0:5a:d2:70:f9:fd:80:73:00:32:fb:eb:47:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 4 14:46:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3093e33a6b93f5223a142f56b86b5b47946f999b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:f4:2a:bf:f1:1f:30:f6:ad:92:3a:d1:d5:
c6:b8:3c:5f:9d:90:8d:1d:e6:eb:e7:36:1e:a2:47:
01:0b:99:c1:bc:ec:b4:10:a9:c0:5d:1e:77:ce:4d:
9c:16:3c:8f:19:a7:6c:ec:bd:18:c0:41:fa:be:a3:
65:6f:f5:8b:8c:06:d2:a1:70:99:26:63:d0:72:a2:
39:30:be:5a:90:89:4f:18:90:31:cc:1b:e8:24:41:
1c:12:3c:04:25:34:5a:38:a1:d2:e2:ff:5a:24:34:
06:72:22:b4:62:a8:9b:23:60:8f:7e:f7:3c:5b:48:
ed:b8:d6:07:91:be:49:6f:ae:a9:95:70:3e:a7:dc:
11:13:78:a2:21:9f:ac:d7:a6:0f:bd:45:be:1f:f2:
59:c5:c2:3d:10:b8:77:4e:8f:d3:fb:e3:ca:30:a2:
23:82:cf:d7:8c:89:30:1c:17:7e:a2:d1:18:92:f5:
e6:e7:c0:2d:ea:5a:6b:38:55:ab:a1:48:1b:b6:7c:
3d:66:41:88:62:50:4e:d5:6b:6d:b9:8d:ca:a2:9b:
cc:e8:8c:a2:23:75:bc:27:c4:1e:9a:1c:87:59:2e:
23:f9:5b:8d:0a:b6:db:a9:bf:bc:07:ed:dc:0e:61:
12:37:7a:76:a1:f8:2c:c2:58:c0:ba:7a:d5:1b:c4:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:E3:3A:6B:93:F5:22:3A:14:2F:56:B8:6B:5B:47:94:6F:99:9B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MJPjOmuT9SI6FC9WuGtbR5RvmZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.88.0/24
77.81.100.0/24
78.17.182.0/24
78.17.255.0/24
86.107.51.0/24
89.37.194.0/24
89.39.125.0/24
89.43.62.0/24
89.45.162.0/24
89.125.20.0/24
89.125.252.0/24
93.90.75.0/24
93.115.105.0/24
104.143.203.0/24
104.143.216.0/24
162.35.226.0/24
162.35.228.0/24
188.241.137.0/24
194.135.18.0/24
212.192.5.0/24
212.192.10.0/24
212.192.209.0/24
Signature Algorithm: sha256WithRSAEncryption
84:6a:1a:3f:06:91:59:65:36:44:d4:9e:c7:7e:55:10:46:7e:
c9:70:4a:74:a2:2f:d0:af:c8:d1:24:43:d2:39:98:0f:af:27:
89:ec:e7:5c:1b:8d:30:a1:08:87:de:cb:bb:37:ff:4b:e5:b9:
80:0b:09:4b:bb:60:97:1e:86:40:56:af:aa:98:27:ec:94:bb:
6b:2e:dd:29:8a:50:a0:0e:00:c5:e5:64:28:8f:f4:e7:57:0f:
d3:aa:9c:4f:19:e1:82:1e:24:d7:74:39:b8:bd:99:e3:18:4d:
05:93:0e:2d:4e:5d:19:01:3f:89:41:79:6c:df:39:f6:56:3f:
03:91:da:cb:f0:87:21:ee:bd:5b:74:b7:74:ba:bc:bc:65:f0:
83:d6:2a:59:50:2d:c5:84:f2:07:5d:d5:2d:e6:d8:aa:08:f1:
fd:54:3a:d0:54:7d:8b:88:39:dc:7a:b6:cc:c7:b0:a6:67:2b:
4e:2b:d8:f5:31:56:50:cb:45:74:41:5c:e4:21:7a:27:0c:aa:
8c:fe:3f:c8:51:26:b9:98:65:01:1b:b0:83:1b:86:cd:5e:9c:
e9:67:9f:3d:8a:3d:b5:a3:32:9e:e5:b9:54:ed:d6:46:d0:e6:
be:1e:bb:97:e4:c6:b0:1e:a9:1f:19:75:2c:76:65:ec:0f:0f:
16:2f:2e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:40 2026 by rpki-client