Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/mDR-g04K2ppRqz_egpwXJkXZO2U.roa
File: mDR-g04K2ppRqz_egpwXJkXZO2U.roa (raw, json)
Hash identifier: gUU7z7reuh0jWop29dbWXG6qkFkDX1PVRQ8HSVgTfms=
Subject key identifier: 98:34:7E:83:4E:0A:DA:9A:51:AB:3F:DE:82:9C:17:26:45:D9:3B:65
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 019EF4483E06F6772F80E86620E51ED89952
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/mDR-g04K2ppRqz_egpwXJkXZO2U.roa
Signing time: Tue 23 Jun 2026 11:40:35 +0000
ROA not before: Tue 23 Jun 2026 11:40:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199242
IP address blocks: 5.255.61.0/24 maxlen: 24
5.255.62.0/23 maxlen: 23
23.252.66.0/23 maxlen: 23
23.252.68.0/24 maxlen: 24
23.252.71.0/24 maxlen: 24
23.252.76.0/24 maxlen: 24
23.252.79.0/24 maxlen: 24
31.222.234.0/24 maxlen: 24
37.72.142.0/24 maxlen: 24
62.3.11.0/24 maxlen: 24
62.106.90.0/24 maxlen: 24
62.233.61.0/24 maxlen: 24
80.71.144.0/24 maxlen: 24
91.92.112.0/23 maxlen: 23
91.246.50.0/24 maxlen: 24
107.150.162.0/23 maxlen: 23
107.150.175.0/24 maxlen: 24
107.150.177.0/24 maxlen: 24
146.19.4.0/24 maxlen: 24
146.19.199.0/24 maxlen: 24
146.19.203.0/24 maxlen: 24
162.222.88.0/23 maxlen: 23
162.222.90.0/24 maxlen: 24
167.160.27.0/24 maxlen: 24
176.97.217.0/24 maxlen: 24
176.126.101.0/24 maxlen: 24
185.4.224.0/23 maxlen: 23
185.165.47.0/24 maxlen: 24
185.234.12.0/24 maxlen: 24
185.252.210.0/24 maxlen: 24
188.244.119.0/24 maxlen: 24
193.9.48.0/24 maxlen: 24
193.162.132.0/24 maxlen: 24
193.162.133.0/24 maxlen: 24
194.26.230.0/24 maxlen: 24
194.26.231.0/24 maxlen: 24
194.99.158.0/24 maxlen: 24
195.96.130.0/24 maxlen: 24
195.96.131.0/24 maxlen: 24
212.52.14.0/24 maxlen: 24
212.52.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:48:3e:06:f6:77:2f:80:e8:66:20:e5:1e:d8:99:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jun 23 11:40:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98347e834e0ada9a51ab3fde829c172645d93b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ca:16:47:ba:24:c0:76:d9:ad:51:67:f5:39:
4f:bb:3d:f7:86:ef:50:3d:60:3d:46:b7:f8:3b:f2:
1b:49:2a:4e:43:34:a4:95:25:5b:68:43:06:10:79:
ae:23:01:d9:e5:a2:b5:3c:ac:b4:43:b7:12:74:c1:
7c:df:c3:ec:f1:50:5b:9d:70:86:60:74:0f:78:25:
af:93:8a:81:63:2e:dc:c1:86:92:50:9b:af:1e:dc:
e5:d1:6d:7f:cf:2e:79:ad:16:f9:4a:31:7b:28:fd:
95:ef:2c:e8:80:2b:ad:dc:36:17:fc:3d:0b:70:b8:
3a:0b:e2:5d:fb:ff:91:ad:60:dc:d0:54:9d:5e:f2:
71:a2:15:87:f4:a7:d6:1b:fe:e2:2e:7e:b1:cb:11:
ca:b3:af:83:02:a7:60:62:62:3d:d5:b6:bc:a8:a3:
0c:58:e3:be:d2:a2:ae:80:62:3d:a2:42:26:b5:02:
36:b9:69:b2:f9:3f:9f:e1:c4:f7:6b:6a:f1:f2:8e:
b3:c4:c6:24:f9:51:fd:99:a5:76:42:a5:a3:34:11:
ff:c3:4b:17:2f:2a:fd:fa:b5:5b:12:bb:ea:60:16:
1c:99:58:18:84:65:74:d1:6d:4c:56:a4:5c:6e:bc:
d6:bf:24:65:3a:01:11:6a:42:fd:5b:41:d4:64:88:
f2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:34:7E:83:4E:0A:DA:9A:51:AB:3F:DE:82:9C:17:26:45:D9:3B:65
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/mDR-g04K2ppRqz_egpwXJkXZO2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.61.0-5.255.63.255
23.252.66.0-23.252.68.255
23.252.71.0/24
23.252.76.0/24
23.252.79.0/24
31.222.234.0/24
37.72.142.0/24
62.3.11.0/24
62.106.90.0/24
62.233.61.0/24
80.71.144.0/24
91.92.112.0/23
91.246.50.0/24
107.150.162.0/23
107.150.175.0/24
107.150.177.0/24
146.19.4.0/24
146.19.199.0/24
146.19.203.0/24
162.222.88.0-162.222.90.255
167.160.27.0/24
176.97.217.0/24
176.126.101.0/24
185.4.224.0/23
185.165.47.0/24
185.234.12.0/24
185.252.210.0/24
188.244.119.0/24
193.9.48.0/24
193.162.132.0/23
194.26.230.0/23
194.99.158.0/24
195.96.130.0/23
212.52.14.0/24
212.52.28.0/24
Signature Algorithm: sha256WithRSAEncryption
95:0d:2d:3b:aa:88:09:17:50:e2:3b:f1:2f:e6:98:37:70:03:
b4:b0:56:ae:f0:0b:fb:b6:fa:9b:c4:db:84:de:e1:1e:e0:b3:
d2:cb:6f:7b:f4:dd:37:8a:79:e7:19:6f:ff:ce:69:01:77:29:
0f:65:e2:28:b5:f0:c2:a0:81:67:77:08:99:34:04:e1:07:cd:
65:33:c8:fd:6b:43:64:18:cc:d1:63:b1:b9:cb:21:a1:42:69:
b1:af:a9:a3:e8:04:70:f3:4a:39:87:73:fb:a1:96:14:cc:6b:
16:21:45:bf:f9:e9:74:90:cc:71:21:1e:25:6e:cf:5e:f0:af:
53:2f:18:68:85:f6:ad:18:19:ae:af:7e:4d:a0:b9:7d:f1:05:
8f:0f:7c:73:dd:9b:73:fc:cd:70:93:13:63:74:a7:73:d6:1a:
11:fe:97:3b:bd:8b:e9:35:02:38:bf:c5:cf:76:55:5b:08:82:
fc:a1:d5:48:4e:ce:27:69:d1:9a:bd:83:7c:55:77:70:47:53:
3f:e9:8d:e6:2d:23:f1:f8:4e:5c:64:10:38:0c:9e:15:a6:8c:
a2:e9:8b:1c:cf:a6:54:74:4d:6b:f7:d4:ef:5d:87:f4:5f:39:
9a:d9:01:21:44:40:0b:26:6e:0d:94:b6:1a:ca:cd:8a:21:7c:
71:5c:21:73
-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgISAZ70SD4G9ncvgOhmIOUe2JlSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh
ODZhNDgwHhcNMjYwNjIzMTE0MDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODM0N2U4MzRlMGFkYTlhNTFhYjNmZGU4MjljMTcyNjQ1ZDkzYjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68oWR7okwHbZrVFn9TlPuz33hu9Q
PWA9Rrf4O/IbSSpOQzSklSVbaEMGEHmuIwHZ5aK1PKy0Q7cSdMF838Ps8VBbnXCG
YHQPeCWvk4qBYy7cwYaSUJuvHtzl0W1/zy55rRb5SjF7KP2V7yzogCut3DYX/D0L
cLg6C+Jd+/+RrWDc0FSdXvJxohWH9KfWG/7iLn6xyxHKs6+DAqdgYmI91ba8qKMM
WOO+0qKugGI9okImtQI2uWmy+T+f4cT3a2rx8o6zxMYk+VH9maV2QqWjNBH/w0sX
Lyr9+rVbErvqYBYcmVgYhGV00W1MVqRcbrzWvyRlOgERakL9W0HUZIjyhwIDAQAB
o4IC8zCCAu8wHQYDVR0OBBYEFJg0foNOCtqaUas/3oKcFyZF2TtlMB8GA1UdIwQY
MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt
MTQyN2RkMTZlZmE0LzEvbURSLWcwNEsycHBScXpfZWdwd1hKa1haTzJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0
LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBwYIKwYBBQUHAQcBAf8EgfcwgfQwgfEEAgABMIHqMAwD
BAAF/z0DBAYF/wAwDAMEARf8QgMEABf8RAMEABf8RwMEABf8TAMEABf8TwMEAB/e
6gMEACVIjgMEAD4DCwMEAD5qWgMEAD7pPQMEAFBHkAMEAVtccAMEAFv2MgMEAWuW
ogMEAGuWrwMEAGuWsQMEAJITBAMEAJITxwMEAJITyzAMAwQDot5YAwQAot5aAwQA
p6AbAwQAsGHZAwQAsH5lAwQBuQTgAwQAuaUvAwQAueoMAwQAufzSAwQAvPR3AwQA
wQkwAwQBwaKEAwQBwhrmAwQAwmOeAwQBw2CCAwQA1DQOAwQA1DQcMA0GCSqGSIb3
DQEBCwUAA4IBAQCVDS07qogJF1DiO/Ev5pg3cAO0sFau8Av7tvqbxNuE3uEe4LPS
y2979N03innnGW//zmkBdykPZeIotfDCoIFndwiZNAThB81lM8j9a0NkGMzRY7G5
yyGhQmmxr6mj6ARw80o5h3P7oZYUzGsWIUW/+el0kMxxIR4lbs9e8K9TLxhohfat
GBmur35NoLl98QWPD3xz3Ztz/M1wkxNjdKdz1hoR/pc7vYvpNQI4v8XPdlVbCIL8
odVITs4nadGavYN8VXdwR1M/6Y3mLSPx+E5cZBA4DJ4Vpoyi6Yscz6ZUdE1r99Tv
XYf0Xzma2QEhREALJm4NlLYays2KIXxxXCFz
-----END CERTIFICATE-----
Generated at Wed Jul 1 00:30:23 2026 by rpki-client