Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mCnYz1C1wCnYi24cwP-9f8_WQd0.roa
File: mCnYz1C1wCnYi24cwP-9f8_WQd0.roa (raw, json)
Hash identifier: 0xPfXh6gKq+wj/U8vzWRXSE5DIGm889Fa4UEcYEgC30=
Subject key identifier: 98:29:D8:CF:50:B5:C0:29:D8:8B:6E:1C:C0:FF:BD:7F:CF:D6:41:DD
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EF3C380E5A1E2094C97472397DF335FA6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mCnYz1C1wCnYi24cwP-9f8_WQd0.roa
Signing time: Tue 23 Jun 2026 09:15:36 +0000
ROA not before: Tue 23 Jun 2026 09:15:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 79.121.200.0/21 maxlen: 21
82.110.32.0/20 maxlen: 20
85.189.72.0/21 maxlen: 24
86.53.152.0/21 maxlen: 24
86.53.160.0/22 maxlen: 24
86.53.180.0/22 maxlen: 24
86.53.184.0/21 maxlen: 24
87.85.65.0/24 maxlen: 24
87.85.132.0/24 maxlen: 24
87.85.135.0/24 maxlen: 24
87.85.251.0/24 maxlen: 24
87.86.48.0/20 maxlen: 24
87.86.190.0/24 maxlen: 24
95.177.63.0/24 maxlen: 24
95.177.67.0/24 maxlen: 24
95.177.74.0/24 maxlen: 24
95.177.85.0/24 maxlen: 24
194.6.104.0/21 maxlen: 24
195.40.22.0/23 maxlen: 23
195.40.24.0/23 maxlen: 23
195.72.176.0/21 maxlen: 24
212.134.20.0/24 maxlen: 24
212.134.27.0/24 maxlen: 24
212.135.6.0/23 maxlen: 23
212.135.68.0/22 maxlen: 22
213.177.226.0/23 maxlen: 24
213.177.230.0/23 maxlen: 24
213.177.234.0/23 maxlen: 24
213.177.238.0/23 maxlen: 24
213.177.242.0/23 maxlen: 24
213.177.246.0/23 maxlen: 24
213.177.250.0/23 maxlen: 24
213.177.252.0/24 maxlen: 24
213.177.253.0/24 maxlen: 24
213.177.254.0/24 maxlen: 24
213.177.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:c3:80:e5:a1:e2:09:4c:97:47:23:97:df:33:5f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 23 09:15:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9829d8cf50b5c029d88b6e1cc0ffbd7fcfd641dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:e7:14:07:aa:71:7d:e9:8c:49:6e:95:dd:
16:a5:31:59:f6:51:ec:4e:6b:63:e7:28:13:96:e2:
52:fd:89:57:2a:16:17:68:24:2d:3b:db:a7:85:47:
38:15:fe:0b:cb:18:a9:1d:02:f8:ea:df:d3:a7:08:
3e:26:d5:c4:1c:31:7c:10:89:37:5b:43:b0:db:e4:
11:a6:1d:36:49:97:e6:48:81:9b:1d:c0:09:3d:2a:
b9:40:39:7b:95:bd:79:98:0d:65:1f:84:b4:b7:e8:
da:13:02:d5:62:c7:e6:20:36:e1:f2:1b:b3:a7:ce:
b1:9a:8d:57:61:31:de:68:8d:4f:d0:01:9e:b8:ef:
af:25:1f:53:d8:5a:5d:14:d2:51:d2:55:09:5b:41:
85:84:86:71:e4:cf:a4:97:40:0e:d4:c6:85:a5:23:
16:63:c3:b8:ac:dc:a8:15:aa:00:46:ac:14:2c:61:
8f:93:02:2a:56:49:6d:3b:da:e8:dd:81:0a:71:da:
17:33:ec:ca:3e:54:61:ed:46:94:c2:6f:55:cb:09:
9c:06:01:59:cd:8f:e5:ad:29:59:c9:30:cf:85:2d:
2d:16:02:15:0f:39:fb:f6:c8:c3:b3:06:79:76:ba:
26:39:85:3e:bd:ef:93:87:84:2d:4c:90:ea:5e:95:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:29:D8:CF:50:B5:C0:29:D8:8B:6E:1C:C0:FF:BD:7F:CF:D6:41:DD
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mCnYz1C1wCnYi24cwP-9f8_WQd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.200.0/21
82.110.32.0/20
85.189.72.0/21
86.53.152.0-86.53.163.255
86.53.180.0-86.53.191.255
87.85.65.0/24
87.85.132.0/24
87.85.135.0/24
87.85.251.0/24
87.86.48.0/20
87.86.190.0/24
95.177.63.0/24
95.177.67.0/24
95.177.74.0/24
95.177.85.0/24
194.6.104.0/21
195.40.22.0-195.40.25.255
195.72.176.0/21
212.134.20.0/24
212.134.27.0/24
212.135.6.0/23
212.135.68.0/22
213.177.226.0/23
213.177.230.0/23
213.177.234.0/23
213.177.238.0/23
213.177.242.0/23
213.177.246.0/23
213.177.250.0-213.177.255.255
Signature Algorithm: sha256WithRSAEncryption
13:78:cf:bc:23:72:7d:bb:7a:26:6c:a9:86:35:c0:0c:ee:f5:
8b:9b:fe:95:7e:f4:66:55:50:0e:eb:53:8b:2a:40:d2:06:bd:
d0:58:d7:be:99:dc:91:7f:8f:b3:56:6b:8d:fd:8f:00:5a:e5:
3d:ae:53:c2:42:f4:fb:39:95:f9:96:30:dd:b0:e7:9a:6d:2e:
6b:41:50:95:70:f0:c7:44:7f:99:5b:fa:79:1a:7f:fe:49:26:
f2:00:27:5e:33:e4:3d:48:4a:41:85:89:9c:6d:84:d5:9a:ea:
7d:9a:c5:8a:d9:c6:1d:ef:fd:ee:a4:c8:77:8b:57:99:1a:db:
e7:1f:c1:9a:1f:17:5b:ef:5b:73:30:df:c2:d4:38:9f:e4:03:
47:3b:f7:3d:8a:35:eb:78:12:bd:95:c4:f9:58:89:3b:4b:08:
6c:d6:1d:4c:68:3e:53:30:6f:fd:55:d8:d5:66:f5:8d:aa:cd:
c4:ce:3f:2f:23:92:e3:a7:5d:5c:8b:46:27:8c:74:bd:3e:64:
9a:5f:9a:ed:3b:d7:0c:17:4d:eb:26:65:8c:aa:32:5d:4b:b1:
3d:c2:94:6b:4d:bc:6c:8b:c6:73:63:18:59:b2:e9:f8:04:d9:
fc:3e:2d:41:b5:1e:22:98:31:b6:81:ff:f2:fa:03:50:32:25:
23:01:0f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 05:20:35 2026 by rpki-client