Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/MJepyquS9E6KKTp64WQEFPauAqg.roa
File: MJepyquS9E6KKTp64WQEFPauAqg.roa (raw, json)
Hash identifier: KD2+61eHx9tX+jm1mruKzUQeep47WKEjlTIYbyJURPQ=
Subject key identifier: 30:97:A9:CA:AB:92:F4:4E:8A:29:3A:7A:E1:64:04:14:F6:AE:02:A8
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 01990EBE208C869E9B40028C99CD6D94C428
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/MJepyquS9E6KKTp64WQEFPauAqg.roa
Signing time: Wed 03 Sep 2025 08:42:45 +0000
ROA not before: Wed 03 Sep 2025 08:42:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20804
IP address blocks: 81.15.128.0/17 maxlen: 17
81.15.136.0/23 maxlen: 23
81.15.156.0/24 maxlen: 24
81.15.174.0/24 maxlen: 24
81.15.175.0/24 maxlen: 24
81.15.182.0/23 maxlen: 23
81.15.187.0/24 maxlen: 24
81.15.191.0/24 maxlen: 24
81.15.194.0/24 maxlen: 24
81.15.195.0/24 maxlen: 24
81.15.198.0/23 maxlen: 23
81.15.198.0/24 maxlen: 24
81.15.199.0/24 maxlen: 24
81.15.201.0/24 maxlen: 24
81.15.202.0/24 maxlen: 24
81.15.203.0/24 maxlen: 24
81.15.204.0/23 maxlen: 23
81.15.209.0/24 maxlen: 24
81.15.214.0/23 maxlen: 23
81.15.216.0/24 maxlen: 24
81.15.217.0/24 maxlen: 24
81.15.218.0/23 maxlen: 23
81.15.218.0/24 maxlen: 24
81.15.222.0/23 maxlen: 23
81.15.222.0/24 maxlen: 24
81.15.224.0/22 maxlen: 22
81.15.225.0/24 maxlen: 24
81.15.227.0/24 maxlen: 24
81.15.230.0/24 maxlen: 24
81.15.232.0/22 maxlen: 22
81.15.232.0/24 maxlen: 24
81.15.236.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
81.15.238.0/24 maxlen: 24
81.15.239.0/24 maxlen: 24
81.15.240.0/23 maxlen: 23
81.15.242.0/24 maxlen: 24
81.15.244.0/23 maxlen: 23
81.15.254.0/23 maxlen: 23
81.15.254.0/24 maxlen: 24
81.15.255.0/24 maxlen: 24
82.177.0.0/16 maxlen: 16
82.177.0.0/23 maxlen: 23
82.177.2.0/24 maxlen: 24
82.177.4.0/22 maxlen: 22
82.177.9.0/24 maxlen: 24
82.177.10.0/23 maxlen: 23
82.177.14.0/23 maxlen: 23
82.177.16.0/24 maxlen: 24
82.177.27.0/24 maxlen: 24
82.177.35.0/24 maxlen: 24
82.177.37.0/24 maxlen: 24
82.177.48.0/21 maxlen: 21
82.177.48.0/24 maxlen: 24
82.177.50.0/24 maxlen: 24
82.177.52.0/23 maxlen: 23
82.177.54.0/24 maxlen: 24
82.177.59.0/24 maxlen: 24
82.177.68.0/22 maxlen: 22
82.177.72.0/21 maxlen: 21
82.177.80.0/21 maxlen: 21
82.177.102.0/23 maxlen: 24
82.177.108.0/23 maxlen: 23
82.177.112.0/22 maxlen: 22
82.177.140.0/23 maxlen: 23
82.177.164.0/24 maxlen: 24
82.177.192.0/24 maxlen: 24
82.177.194.0/24 maxlen: 24
82.177.195.0/24 maxlen: 24
82.177.196.0/22 maxlen: 22
82.177.196.0/24 maxlen: 24
82.177.199.0/24 maxlen: 24
82.177.206.0/24 maxlen: 24
82.177.249.0/24 maxlen: 24
82.177.252.0/24 maxlen: 24
88.220.0.0/17 maxlen: 17
88.220.60.0/23 maxlen: 23
88.220.81.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
88.220.107.0/24 maxlen: 24
88.220.113.0/24 maxlen: 24
88.220.114.0/24 maxlen: 24
88.220.116.0/24 maxlen: 24
88.220.117.0/24 maxlen: 24
88.220.120.0/22 maxlen: 22
88.220.128.0/18 maxlen: 18
88.220.132.0/23 maxlen: 23
88.220.152.0/23 maxlen: 23
88.220.165.0/24 maxlen: 24
88.220.181.0/24 maxlen: 24
88.220.185.0/24 maxlen: 24
88.220.192.0/20 maxlen: 20
88.220.208.0/20 maxlen: 20
88.220.224.0/19 maxlen: 19
88.220.252.0/24 maxlen: 24
88.220.253.0/24 maxlen: 24
194.183.32.0/19 maxlen: 19
194.183.32.0/23 maxlen: 23
194.183.34.0/23 maxlen: 23
194.183.54.0/24 maxlen: 24
194.183.55.0/24 maxlen: 24
194.183.56.0/23 maxlen: 23
195.136.0.0/16 maxlen: 16
195.136.4.0/22 maxlen: 22
195.136.16.0/22 maxlen: 22
195.136.21.0/24 maxlen: 24
195.136.25.0/24 maxlen: 24
195.136.27.0/24 maxlen: 24
195.136.32.158/32 maxlen: 32
195.136.32.201/32 maxlen: 32
195.136.34.0/23 maxlen: 23
195.136.38.0/23 maxlen: 23
195.136.65.0/24 maxlen: 24
195.136.88.0/22 maxlen: 22
195.136.113.0/24 maxlen: 24
195.136.148.0/22 maxlen: 22
195.136.156.0/23 maxlen: 23
195.136.164.0/23 maxlen: 23
195.136.174.0/23 maxlen: 23
195.136.176.0/22 maxlen: 22
213.172.160.0/19 maxlen: 19
2a00:4120::/32 maxlen: 32
2a00:4120:8000:2::/64 maxlen: 64
2a00:4120:8000:4::/64 maxlen: 64
2a00:4120:8000:5::/64 maxlen: 64
2a00:4120:8000:70::/65 maxlen: 65
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 21:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:be:20:8c:86:9e:9b:40:02:8c:99:cd:6d:94:c4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Sep 3 08:42:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3097a9caab92f44e8a293a7ae1640414f6ae02a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:9c:12:7e:f9:b0:ad:df:a2:b5:39:c1:86:
0f:cb:30:7d:7a:12:3e:04:8c:99:2c:5d:ab:ca:74:
44:36:13:3a:49:e8:86:e1:61:21:5f:71:2b:8a:2f:
6b:12:6b:47:c9:83:b5:38:9d:ea:25:9a:18:e4:8f:
9c:16:db:a1:46:6c:ec:29:1d:34:0b:5f:d7:91:93:
e6:e1:5d:3c:4e:57:c3:ca:ba:06:17:5d:ef:8a:67:
52:67:be:8f:cb:33:18:b8:b5:1e:d8:92:ea:a6:2b:
ff:e3:61:7b:44:46:ed:24:66:5e:29:af:a7:a3:b1:
2d:56:a4:e5:b5:78:2e:16:17:34:ae:27:a4:7c:0d:
6d:e2:63:c5:dd:ab:a7:25:ea:82:9b:57:40:dc:22:
5b:4d:1b:a6:82:fd:23:97:d2:8e:20:9a:36:56:05:
0d:cc:aa:0b:12:a9:eb:cc:6b:85:42:51:aa:9a:5d:
97:b3:00:11:13:a6:6c:9e:33:92:29:7c:bd:54:61:
95:17:a4:ae:9b:7d:9e:bf:ba:ad:af:e8:70:5b:4d:
7c:d0:57:ce:63:17:3e:32:62:af:76:c7:59:3c:87:
ed:62:2d:57:4d:43:37:56:71:2b:e4:04:4c:21:e0:
86:84:6a:7a:51:73:a9:b1:63:6f:62:50:50:ac:5e:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:97:A9:CA:AB:92:F4:4E:8A:29:3A:7A:E1:64:04:14:F6:AE:02:A8
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/MJepyquS9E6KKTp64WQEFPauAqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.128.0/17
82.177.0.0/16
88.220.0.0/16
194.183.32.0/19
195.136.0.0/16
213.172.160.0/19
IPv6:
2a00:4120::/32
Signature Algorithm: sha256WithRSAEncryption
12:6d:5c:0d:e7:15:14:9d:64:ec:38:08:55:a2:86:e7:fc:24:
4b:8d:11:da:b2:33:4e:89:4e:3d:98:ce:c5:fe:0a:c2:cb:8e:
cf:66:d2:63:ee:9f:da:b8:1c:42:21:19:f9:14:53:6e:fd:4c:
b6:8a:5d:f8:e3:45:4f:40:5d:8b:69:17:33:78:c1:ea:8f:cf:
1d:a8:62:85:5b:6b:90:11:e4:3a:61:1e:92:f2:bc:94:55:66:
b3:22:d5:4f:f6:32:e5:28:70:99:5a:4e:14:c8:43:54:b9:e8:
28:99:fb:d6:9e:0f:0f:f3:61:65:66:b8:c2:ef:48:31:cb:ad:
b7:50:e7:bc:ce:22:a8:eb:94:6b:73:57:07:85:71:b2:62:4d:
70:1f:35:55:db:e2:01:8a:a0:03:98:4b:92:71:b2:cc:bb:57:
32:fc:dd:7f:0a:ab:80:7f:a3:56:05:66:c9:04:a4:7c:5f:03:
d5:ad:63:1c:70:fd:2d:99:b3:b4:f8:1d:6e:5a:af:b2:8b:95:
c0:17:c9:43:f1:87:f6:73:58:7c:63:ae:8a:28:a4:18:0f:11:
78:2b:6b:4f:5f:19:09:5c:27:0f:8b:27:37:85:cc:60:40:fb:
9b:48:2a:3b:27:25:22:5e:85:fc:11:8f:99:7a:c0:b5:a5:60:
2f:1d:8e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 00:40:22 2025 by rpki-client