Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mM51Vopp9H68YhccCeenPf6RMyA.roa
File: mM51Vopp9H68YhccCeenPf6RMyA.roa (raw, json)
Hash identifier: lC5/3CpqJw/HakpUMianioJ3PpBzHW2Zv5k84vXYFFE=
Subject key identifier: 98:CE:75:56:8A:69:F4:7E:BC:62:17:1C:09:E7:A7:3D:FE:91:33:20
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F97FEF03C406744588C295A85A46E8EE3
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mM51Vopp9H68YhccCeenPf6RMyA.roa
Signing time: Sat 25 Jul 2026 06:38:15 +0000
ROA not before: Sat 25 Jul 2026 06:38:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 80.68.210.0/24 maxlen: 24
80.68.211.0/24 maxlen: 24
212.134.47.0/24 maxlen: 24
217.79.101.0/24 maxlen: 24
217.79.110.0/24 maxlen: 24
217.79.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:fe:f0:3c:40:67:44:58:8c:29:5a:85:a4:6e:8e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 25 06:38:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98ce75568a69f47ebc62171c09e7a73dfe913320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:30:4e:5c:20:48:18:d4:d6:7c:82:05:2b:
24:ab:69:d7:7c:f1:88:50:d9:d9:17:1f:3d:0c:2f:
a0:32:e0:fa:41:04:7c:e7:ee:42:dd:39:13:a1:c7:
6c:0e:43:65:cd:26:fc:a7:16:0b:77:33:ca:35:2a:
d2:c1:03:05:d4:df:65:69:45:a7:a7:94:90:a8:4e:
9d:c4:cc:50:1a:d6:d9:18:de:0c:a3:bd:5b:21:9a:
5b:8d:66:7d:07:99:cf:c3:6f:2a:5c:1c:69:6d:38:
59:6a:98:da:02:9f:ef:1a:4f:1a:e9:5b:72:e2:5f:
d8:38:14:cd:84:23:d3:0a:be:56:17:d2:de:32:98:
3c:9e:5e:42:ee:cb:b5:91:ae:bd:6b:ab:ba:ae:4b:
49:42:c0:2e:e7:8b:be:ad:9d:fa:53:c3:0b:34:29:
a9:45:67:fe:ca:ca:69:47:38:6f:c3:e5:81:a0:f5:
62:7c:6b:ce:fb:88:af:b9:de:f3:a0:d4:f7:a3:3a:
aa:9e:82:29:a7:b3:58:45:41:3b:77:32:90:57:1b:
c0:27:8e:e4:75:e2:da:34:3e:af:92:e3:13:48:30:
92:c4:c4:77:79:f8:22:50:7b:75:71:c5:85:e2:7b:
7d:01:a6:2a:3d:30:11:6b:c6:6e:49:51:0d:bf:23:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CE:75:56:8A:69:F4:7E:BC:62:17:1C:09:E7:A7:3D:FE:91:33:20
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mM51Vopp9H68YhccCeenPf6RMyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.210.0/23
212.134.47.0/24
217.79.101.0/24
217.79.110.0/24
217.79.114.0/24
Signature Algorithm: sha256WithRSAEncryption
33:dd:e8:15:73:22:f7:0f:d6:bf:0e:a8:bd:28:60:76:34:78:
ab:69:b1:c2:a3:04:90:80:36:5c:dc:c0:e6:dd:2b:7f:a0:7e:
5d:c4:a5:56:59:57:ac:3a:25:3c:41:c0:57:bd:31:8b:14:d1:
5f:eb:1f:ca:06:df:ef:73:c9:37:db:e3:e8:11:e4:47:6b:11:
a5:38:f1:37:e7:2e:5d:63:e9:31:73:64:a1:99:da:c8:18:d1:
49:e1:0e:e7:d2:65:e6:a8:50:a1:f2:08:1e:aa:83:2b:5f:5e:
64:a1:e3:b5:cc:0e:03:a6:94:bb:2b:83:c6:e6:8b:a1:4f:a8:
47:48:da:c1:0e:ca:8a:37:42:81:3b:f5:a1:83:2b:d5:42:a4:
09:22:60:1d:f4:d7:ea:5f:49:30:f6:59:f3:a9:a4:ec:2f:64:
7a:3c:b1:6d:0b:2c:63:ec:1d:dd:f5:1d:cb:18:c8:f2:8d:51:
0a:08:b6:74:cb:dc:58:d3:56:05:b4:f8:1f:6c:28:41:fd:26:
ed:2f:ee:4f:fa:59:a2:a3:a5:d6:e0:70:c6:03:a6:a3:b9:99:
ed:01:4f:39:f7:ee:29:b0:ab:a7:10:ea:3e:35:21:7b:7d:54:
27:c7:2a:29:0d:d7:00:1e:0c:30:c2:d0:eb:04:44:02:ad:e6:
90:d2:50:ea
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ+X/vA8QGdEWIwpWoWkbo7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzI1MDYzODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGNlNzU1NjhhNjlmNDdlYmM2MjE3MWMwOWU3YTczZGZlOTEzMzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLAwTlwgSBjU1nyCBSskq2nXfPGI
UNnZFx89DC+gMuD6QQR85+5C3TkTocdsDkNlzSb8pxYLdzPKNSrSwQMF1N9laUWn
p5SQqE6dxMxQGtbZGN4Mo71bIZpbjWZ9B5nPw28qXBxpbThZapjaAp/vGk8a6Vty
4l/YOBTNhCPTCr5WF9LeMpg8nl5C7su1ka69a6u6rktJQsAu54u+rZ36U8MLNCmp
RWf+ysppRzhvw+WBoPVifGvO+4ivud7zoNT3ozqqnoIpp7NYRUE7dzKQVxvAJ47k
deLaND6vkuMTSDCSxMR3efgiUHt1ccWF4nt9AaYqPTARa8ZuSVENvyNA2wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJjOdVaKafR+vGIXHAnnpz3+kTMgMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvbU01MVZvcHA5SDY4WWhjY0NlZW5QZjZSTXlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBUETSAwQA
1IYvAwQA2U9lAwQA2U9uAwQA2U9yMA0GCSqGSIb3DQEBCwUAA4IBAQAz3egVcyL3
D9a/Dqi9KGB2NHirabHCowSQgDZc3MDm3St/oH5dxKVWWVesOiU8QcBXvTGLFNFf
6x/KBt/vc8k32+PoEeRHaxGlOPE35y5dY+kxc2ShmdrIGNFJ4Q7n0mXmqFCh8gge
qoMrX15koeO1zA4DppS7K4PG5ouhT6hHSNrBDsqKN0KBO/WhgyvVQqQJImAd9Nfq
X0kw9lnzqaTsL2R6PLFtCyxj7B3d9R3LGMjyjVEKCLZ0y9xY01YFtPgfbChB/Sbt
L+5P+lmio6XW4HDGA6ajuZntAU859+4psKunEOo+NSF7fVQnxyopDdcAHgwwwtDr
BEQCreaQ0lDq
-----END CERTIFICATE-----
Generated at Sun Jul 26 19:13:00 2026 by rpki-client