Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MoMOvfozEYlV6jm9P22g55Z8Ni4.roa
File: MoMOvfozEYlV6jm9P22g55Z8Ni4.roa (raw, json)
Hash identifier: j4gs0o2+h4AfhE2CLge3Cikclan2JFrb1c6OIMG44OM=
Subject key identifier: 32:83:0E:BD:FA:33:11:89:55:EA:39:BD:3F:6D:A0:E7:96:7C:36:2E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A16B3EEB9A3922E13DDEA5F21DBEAFFB89
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MoMOvfozEYlV6jm9P22g55Z8Ni4.roa
Signing time: Sat 24 Oct 2026 00:10:47 +0000
ROA not before: Sat 24 Oct 2026 00:10:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 78.154.127.0/24 maxlen: 24
82.108.127.0/24 maxlen: 24
82.109.242.0/24 maxlen: 24
82.110.224.0/24 maxlen: 24
85.189.36.0/24 maxlen: 24
87.82.62.0/24 maxlen: 24
87.82.217.0/24 maxlen: 24
87.86.18.0/24 maxlen: 24
195.72.169.0/24 maxlen: 24
212.212.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:3e:eb:9a:39:22:e1:3d:de:a5:f2:1d:be:af:fb:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 24 00:10:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32830ebdfa33118955ea39bd3f6da0e7967c362e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:cd:fb:46:d6:f1:f8:94:1d:b1:e0:57:67:
cf:8c:04:33:3f:31:14:55:78:4f:d4:a5:d5:51:a5:
13:b5:34:30:5c:e6:cb:0e:e7:b2:95:3f:86:a1:a0:
54:3d:c0:8a:ff:21:bc:aa:3e:a2:ea:7e:3a:c9:d7:
e4:dd:86:b2:40:5d:80:16:97:95:7a:27:37:4a:3f:
6c:cb:43:bc:bc:f9:c1:a5:03:c7:28:8d:10:55:ca:
1f:a7:9f:48:40:d7:2c:57:be:bb:eb:74:24:05:47:
ec:d8:5f:5f:62:b7:99:bb:8d:5d:3f:a3:95:12:db:
25:b0:77:1c:ae:47:89:72:6b:a5:36:c4:4b:a3:c8:
f5:1e:20:5f:e0:f4:32:ab:14:24:e2:e5:32:58:7b:
f8:01:3d:22:38:79:50:c4:43:e9:e1:51:1d:03:ab:
54:40:ba:1a:41:92:44:4d:b1:5b:70:c4:22:6e:e7:
0e:b4:3d:1c:c2:48:df:2f:55:e0:60:ce:ab:8d:d5:
c4:6a:46:78:81:ef:e7:6e:21:b7:c1:af:c4:5b:23:
db:62:56:fb:aa:4a:bc:6d:da:e4:27:9e:60:1d:92:
7b:a1:c0:45:26:c0:7b:ba:f2:a4:f4:10:26:04:f9:
78:18:f5:ad:82:6f:ea:ac:47:a2:2b:b1:b4:6d:01:
b2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:83:0E:BD:FA:33:11:89:55:EA:39:BD:3F:6D:A0:E7:96:7C:36:2E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MoMOvfozEYlV6jm9P22g55Z8Ni4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.127.0/24
82.108.127.0/24
82.109.242.0/24
82.110.224.0/24
85.189.36.0/24
87.82.62.0/24
87.82.217.0/24
87.86.18.0/24
195.72.169.0/24
212.212.27.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:6e:28:4d:7b:d1:47:5a:d2:be:c7:2c:77:6d:a1:4e:52:c6:
7f:66:bc:6e:90:75:44:88:5e:82:ba:ef:7d:0f:17:cd:a9:21:
75:52:3a:0c:02:30:cb:ab:22:95:92:f7:95:ce:cf:60:6f:86:
41:84:f9:eb:18:b2:1d:e4:94:69:74:3d:42:a3:8b:79:6a:33:
e5:ba:3c:35:35:8a:dc:ef:0d:d6:b5:19:e5:6a:a4:c1:3a:44:
ea:4d:8b:aa:84:0f:0a:c6:15:84:9b:01:10:ac:65:49:14:1b:
d2:0a:d1:d4:6d:d2:9f:89:4d:45:ef:9d:65:03:4a:c1:f4:3c:
72:c2:81:40:3b:ab:54:46:aa:2e:56:dd:6c:29:f4:6f:96:05:
df:91:a3:74:10:5e:16:63:ad:6d:e6:76:0b:09:41:76:50:49:
ac:2f:56:33:52:ba:b8:f2:19:62:01:d1:8f:96:21:f2:c3:e1:
d0:26:0c:76:41:f5:42:8e:f2:4b:32:a0:e6:22:18:10:15:16:
4a:37:39:3f:a3:85:bd:2b:17:18:45:16:f8:0b:2e:1d:a2:41:
94:a0:50:10:e6:f3:25:7d:78:76:a7:cf:1b:d1:34:2d:73:0b:
95:22:ae:9c:fd:cb:4c:e9:d3:ff:fd:bd:18:07:37:47:f0:57:
73:59:3a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:05:23 2026 by rpki-client