Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/MMxCCV9V-CNQCPOA-Tqg3Xr_KJc.roa
File: MMxCCV9V-CNQCPOA-Tqg3Xr_KJc.roa (raw, json)
Hash identifier: k3t1C9BaLRcdqD70aWiIec05UHYXyH4/qL0wEkY5knI=
Subject key identifier: 30:CC:42:09:5F:55:F8:23:50:08:F3:80:F9:3A:A0:DD:7A:FF:28:97
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A1893A1E9CD857D3AD3263F74AF58965A3
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/MMxCCV9V-CNQCPOA-Tqg3Xr_KJc.roa
Signing time: Thu 29 Oct 2026 19:54:09 +0000
ROA not before: Thu 29 Oct 2026 19:54:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 92.50.0.0/19 maxlen: 19
92.50.32.0/19 maxlen: 19
147.136.68.0/22 maxlen: 24
147.136.76.0/22 maxlen: 24
147.136.84.0/22 maxlen: 24
168.199.128.0/22 maxlen: 24
168.199.160.0/22 maxlen: 24
168.199.192.0/22 maxlen: 24
168.199.212.0/23 maxlen: 23
168.199.220.0/24 maxlen: 24
168.199.221.0/24 maxlen: 24
168.199.223.0/24 maxlen: 24
168.199.224.0/24 maxlen: 24
168.199.229.0/24 maxlen: 24
168.199.232.0/24 maxlen: 24
185.101.244.0/23 maxlen: 24
185.101.246.0/23 maxlen: 24
185.101.252.0/23 maxlen: 23
185.101.254.0/23 maxlen: 23
185.171.252.0/23 maxlen: 23
185.171.254.0/23 maxlen: 23
185.226.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:3a:1e:9c:d8:57:d3:ad:32:63:f7:4a:f5:89:65:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 29 19:54:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30cc42095f55f8235008f380f93aa0dd7aff2897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:fa:f5:05:77:2d:a0:f3:97:8d:11:a5:67:
cc:2b:68:f8:b7:85:a7:dc:72:20:ba:3a:0f:3c:38:
3b:8c:76:ec:4c:9b:4c:08:4d:df:8f:d8:1a:d0:22:
59:43:f6:bd:e1:1b:fe:82:1c:da:f2:17:bc:2b:87:
e6:c1:4c:35:b7:52:87:90:93:0b:15:2d:0b:87:fd:
fc:59:ed:e4:c9:b7:6c:13:f9:17:95:35:8e:cc:9f:
79:8f:32:ec:0f:62:c2:25:db:61:5f:2e:f2:b9:58:
df:c6:06:8a:8a:ff:e5:c7:44:92:d6:f2:70:1b:e4:
d4:50:64:72:ba:f0:12:0f:5b:fa:d6:80:0a:8c:18:
5c:c3:5b:18:a8:c8:c4:52:9d:0b:c9:d4:36:fe:67:
81:d4:be:c6:33:39:4c:80:0a:67:66:a5:29:0c:9b:
b7:66:16:38:83:dd:24:bd:7b:cc:5e:9f:47:c2:6e:
ac:76:96:c6:b1:b7:02:e6:f5:dc:d3:db:1a:1b:0c:
f5:35:c5:e4:e0:0c:46:01:50:5e:b6:7b:65:29:0b:
80:b6:85:bb:31:c8:d2:98:3f:14:81:11:8f:eb:63:
9e:28:2b:f4:96:5b:7b:eb:cf:14:c1:9c:e5:50:77:
67:e3:55:06:a5:d2:ca:a5:60:b0:3f:89:08:89:46:
d1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CC:42:09:5F:55:F8:23:50:08:F3:80:F9:3A:A0:DD:7A:FF:28:97
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/MMxCCV9V-CNQCPOA-Tqg3Xr_KJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.0.0/18
147.136.68.0/22
147.136.76.0/22
147.136.84.0/22
168.199.128.0/22
168.199.160.0/22
168.199.192.0/22
168.199.212.0/23
168.199.220.0/23
168.199.223.0-168.199.224.255
168.199.229.0/24
168.199.232.0/24
185.101.244.0/22
185.101.252.0/22
185.171.252.0/22
185.226.204.0/23
Signature Algorithm: sha256WithRSAEncryption
01:48:97:9c:7e:ae:4a:64:9c:15:e5:0f:18:b8:88:38:1d:dc:
c9:39:85:cf:4f:15:47:1c:c8:63:2c:dc:47:f2:93:1c:c0:4a:
5f:46:3e:6a:ed:af:2b:08:49:2b:ee:6b:8d:8e:40:7f:86:49:
6d:53:38:c9:df:78:ae:d3:fc:75:2e:1a:dc:8e:e2:18:4a:e0:
0f:ed:b8:b4:2c:f3:07:8b:96:b6:f3:65:b8:c3:c3:b7:b3:59:
f0:9f:01:6a:17:b7:f0:49:cb:70:89:cf:7d:f6:13:e3:a7:6f:
e7:75:71:61:19:03:c7:27:33:6b:21:a3:40:ee:bf:15:54:d7:
29:c9:4a:74:a5:58:1b:5d:d0:0c:fd:39:a2:d7:34:4c:d1:4e:
69:b3:fc:7f:27:f2:c9:75:78:ae:5b:0f:a9:3f:38:2e:09:56:
81:d0:97:23:d8:55:41:7d:f4:c0:5b:59:d9:11:90:22:29:21:
f8:7c:0e:33:27:96:72:9a:14:e3:c2:68:5c:c8:28:bb:0e:95:
91:3a:ec:10:22:14:65:b9:0e:b9:9d:4c:8e:32:ae:d1:0b:48:
76:8e:4c:1b:17:0e:0a:c5:d8:d1:d9:37:dd:ce:6e:80:6b:c8:
1b:04:eb:8a:4c:fe:07:1d:d4:d2:2d:12:c5:58:d8:94:26:e9:
60:36:11:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:53:43 2026 by rpki-client