Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Mn_cdSX9-8vcNApIDqmQopi-zs8.roa
File: Mn_cdSX9-8vcNApIDqmQopi-zs8.roa (raw, json)
Hash identifier: vuWv6/D61zZTC43qWH2VxQYewYoM/GrmpSiGlKeBN24=
Subject key identifier: 32:7F:DC:75:25:FD:FB:CB:DC:34:0A:48:0E:A9:90:A2:98:BE:CE:CF
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368E5E4269185B8980E243BBCF00637
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Mn_cdSX9-8vcNApIDqmQopi-zs8.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20776
IP address blocks: 89.3.240.0/21 maxlen: 21
89.3.248.0/21 maxlen: 21
89.157.88.0/21 maxlen: 24
89.157.96.0/19 maxlen: 24
212.198.242.0/23 maxlen: 24
212.198.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e5:e4:26:91:85:b8:98:0e:24:3b:bc:f0:06:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=327fdc7525fdfbcbdc340a480ea990a298bececf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8c:a0:b2:68:50:60:d3:c2:2c:28:eb:d9:7f:
17:48:53:22:86:96:c1:f4:7d:e2:81:c7:1f:ea:f0:
ad:dd:dc:6a:a4:71:39:e4:45:e2:9b:46:0e:e8:58:
38:25:86:0c:08:56:de:d1:bd:04:ae:4b:54:5c:63:
35:ca:0a:24:05:a0:88:e8:46:2d:f5:23:e3:ab:5d:
6b:eb:60:eb:00:e0:48:7e:cb:57:82:33:53:0f:39:
5a:0f:7a:78:40:09:38:e0:95:b1:ee:ec:2b:80:d2:
63:a2:78:52:55:ca:3b:a5:a5:21:c7:ed:49:df:45:
e4:33:e7:5c:15:07:fc:7c:3f:a6:68:0a:b3:b4:38:
8d:eb:bd:f4:55:4c:f0:06:c6:57:42:cf:31:b6:47:
22:6c:a8:28:a7:83:6f:c1:c3:12:39:bd:5f:77:22:
01:7a:3b:95:c5:69:f1:2e:d8:23:42:93:d2:28:67:
53:1d:91:c5:e5:e4:d6:9f:63:35:5b:42:f9:31:16:
25:75:b0:61:51:43:8b:a4:f6:e1:8e:f8:85:04:4f:
ec:5d:c5:c0:18:83:39:9e:45:9c:1b:59:da:ae:d8:
0a:d8:29:9d:75:62:8e:9f:11:4d:b0:c4:af:ea:de:
f6:cf:24:2b:ed:2f:e6:2b:98:01:1e:02:46:25:19:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7F:DC:75:25:FD:FB:CB:DC:34:0A:48:0E:A9:90:A2:98:BE:CE:CF
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Mn_cdSX9-8vcNApIDqmQopi-zs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.3.240.0/20
89.157.88.0-89.157.127.255
212.198.242.0/23
212.198.254.0/23
Signature Algorithm: sha256WithRSAEncryption
43:ea:d6:5c:4a:a7:e8:ab:59:99:af:ae:5c:89:ca:b4:da:b8:
bb:a0:15:25:37:97:46:b7:e9:ed:22:54:90:49:4a:46:af:2e:
ce:bb:6a:b1:93:1c:3f:09:40:6d:46:72:b7:46:af:b5:f1:16:
a8:c0:b0:6b:d8:a4:21:16:e9:f0:e3:1a:a2:c3:11:e0:3e:97:
db:57:96:7b:c3:1f:e5:b6:41:29:2c:6c:51:ea:f8:2e:4c:11:
da:ae:f7:45:27:1b:40:64:23:6b:26:c2:d2:57:1c:a5:4a:cd:
20:ed:39:60:c1:eb:b3:d6:1a:47:25:20:0c:02:7c:5c:df:4f:
21:39:89:07:f5:ed:74:92:83:d4:e7:93:00:1f:15:72:ee:f0:
04:ac:09:27:b2:ed:6e:14:7e:5e:3e:fe:95:46:73:d3:36:5d:
91:6f:e6:a7:e0:19:a0:d5:18:7b:71:ad:b8:17:59:c7:fe:ca:
56:72:3d:d8:c5:8c:f3:ee:d0:d2:18:9d:4e:44:66:8e:ff:7b:
31:6e:7a:15:ba:4e:65:55:1e:bf:1f:47:5b:4a:cb:07:84:79:
2e:8c:e1:53:f1:2d:ac:46:0c:3d:19:1b:89:ae:e4:f5:70:27:
6d:b4:5f:52:c7:07:8a:02:50:2d:0e:24:9f:97:de:e7:67:43:
f4:38:78:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:55 2026 by rpki-client