Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/mljMw9hDDBwppo2fOtd4bvMBSv8.roa
File: mljMw9hDDBwppo2fOtd4bvMBSv8.roa (raw, json)
Hash identifier: kKWz8xzzb/ACHLlgkNDESxsmm3x/9yRa+aMhsPrOVK0=
Subject key identifier: 9A:58:CC:C3:D8:43:0C:1C:29:A6:8D:9F:3A:D7:78:6E:F3:01:4A:FF
Certificate issuer: /CN=5dd312211f1957129c21c417503d43b00aa26b43
Certificate serial: 01A0EEF13223C702631482BA86D91E5D670F
Authority key identifier: 5D:D3:12:21:1F:19:57:12:9C:21:C4:17:50:3D:43:B0:0A:A2:6B:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/mljMw9hDDBwppo2fOtd4bvMBSv8.roa
Signing time: Tue 29 Sep 2026 20:52:59 +0000
ROA not before: Tue 29 Sep 2026 20:52:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214101
IP address blocks: 51.0.0.0/19 maxlen: 19
51.0.0.0/20 maxlen: 24
51.0.16.0/21 maxlen: 24
51.0.24.0/22 maxlen: 24
51.0.28.0/24 maxlen: 24
51.0.30.0/24 maxlen: 24
51.0.31.0/24 maxlen: 24
51.0.128.0/17 maxlen: 17
51.0.128.0/21 maxlen: 21
51.0.128.0/22 maxlen: 22
51.0.132.0/24 maxlen: 24
51.0.133.0/24 maxlen: 24
51.0.136.0/21 maxlen: 21
51.0.136.0/23 maxlen: 24
51.0.138.0/23 maxlen: 24
51.0.140.0/23 maxlen: 24
51.0.142.0/23 maxlen: 24
51.0.250.0/24 maxlen: 24
51.0.251.0/24 maxlen: 24
51.0.252.0/22 maxlen: 22
51.0.252.0/24 maxlen: 24
51.72.0.0/15 maxlen: 15
51.74.0.0/16 maxlen: 16
51.74.0.0/20 maxlen: 24
51.74.16.0/24 maxlen: 24
51.74.17.0/24 maxlen: 24
51.74.20.0/22 maxlen: 22
51.74.128.0/18 maxlen: 18
51.172.0.0/15 maxlen: 24
51.224.0.0/15 maxlen: 15
51.224.182.0/23 maxlen: 23
51.224.186.0/23 maxlen: 23
51.224.188.0/23 maxlen: 23
51.224.190.0/23 maxlen: 23
51.224.192.0/23 maxlen: 23
51.224.194.0/23 maxlen: 23
51.224.196.0/23 maxlen: 23
83.118.240.0/20 maxlen: 24
193.202.192.0/19 maxlen: 24
2001:3fc0::/29 maxlen: 29
2001:3fc0::/36 maxlen: 36
2001:3fc0:800::/40 maxlen: 40
2001:3fc0:840::/48 maxlen: 48
2001:3fc0:880::/48 maxlen: 48
2001:3fc0:8c0::/48 maxlen: 48
2001:3fc1::/32 maxlen: 32
2001:3fc1:8000::/36 maxlen: 36
2001:3fc1:8000::/38 maxlen: 38
2001:3fc1:8400::/38 maxlen: 38
2001:3fc1:8800::/38 maxlen: 38
2001:3fc1:8c00::/38 maxlen: 38
2001:3fc2::/32 maxlen: 48
2001:3fc2:8000::/36 maxlen: 48
2001:3fc3::/36 maxlen: 48
2001:3fc3:800::/40 maxlen: 48
2001:3fc3:1000::/36 maxlen: 48
2001:3fc3:2000::/36 maxlen: 36
2001:3fc3:2800::/40 maxlen: 40
2001:3fc3:3000::/36 maxlen: 36
2001:3fc3:4000::/36 maxlen: 48
2001:3fc3:5000::/36 maxlen: 48
2001:3fc3:6000::/36 maxlen: 36
2001:3fc3:6800::/40 maxlen: 40
2001:3fc3:8000::/36 maxlen: 36
2001:3fc3:8800::/40 maxlen: 40
2001:3fc3:a000::/36 maxlen: 36
2001:3fc3:a800::/40 maxlen: 40
2001:3fc4::/36 maxlen: 48
2001:3fc4:1000::/36 maxlen: 48
2001:3fc5::/36 maxlen: 48
2001:3fc5:1000::/36 maxlen: 36
2001:3fc5:1000::/40 maxlen: 40
2001:3fc5:1020::/48 maxlen: 48
2001:3fc5:1040::/48 maxlen: 48
2001:3fc5:1080::/48 maxlen: 48
2001:3fc5:2000::/36 maxlen: 36
2001:3fc5:2000::/40 maxlen: 40
2001:3fc5:2020::/48 maxlen: 48
2001:3fc5:2040::/48 maxlen: 48
2001:3fc5:2080::/48 maxlen: 48
2001:3fc5:8000::/36 maxlen: 36
2001:3fc5:8800::/40 maxlen: 40
2001:3fc5:9000::/36 maxlen: 48
2001:3fc5:9800::/40 maxlen: 48
2001:3fc6::/40 maxlen: 40
2001:3fc6:1::/48 maxlen: 48
2001:3fc6:2::/48 maxlen: 48
2001:3fc6:4::/46 maxlen: 46
2001:3fc6:8::/45 maxlen: 45
2001:3fc6:8::/47 maxlen: 48
2001:3fc6:a::/47 maxlen: 48
2001:3fc6:c::/47 maxlen: 48
2001:3fc6:e::/47 maxlen: 48
2001:3fc6:100::/44 maxlen: 44
2001:3fc6:100::/48 maxlen: 48
2001:3fc6:200::/40 maxlen: 48
2001:3fc7::/36 maxlen: 48
2001:3fc7:1000::/36 maxlen: 36
2001:3fc7:1800::/40 maxlen: 40
2001:3fc7:2000::/36 maxlen: 36
2001:3fc7:2800::/40 maxlen: 40
2001:3fc7:2840::/48 maxlen: 48
2001:3fc7:2880::/48 maxlen: 48
2001:3fc7:28c0::/48 maxlen: 48
2001:3fc7:3000::/36 maxlen: 36
2001:3fc7:3000::/40 maxlen: 40
2001:3fc7:3000::/48 maxlen: 48
2001:3fc7:3004::/48 maxlen: 48
2001:3fc7:3008::/48 maxlen: 48
2001:3fc7:4000::/36 maxlen: 48
2001:3fc7:4800::/40 maxlen: 48
2001:3fc7:5000::/36 maxlen: 36
2001:3fc7:5800::/40 maxlen: 40
2001:3fc7:6000::/36 maxlen: 36
2001:3fc7:6800::/40 maxlen: 40
2001:3fc7:6800::/48 maxlen: 48
2001:3fc7:7000::/36 maxlen: 48
2001:3fc7:8000::/36 maxlen: 48
2001:3fc7:9000::/36 maxlen: 48
2001:3fc7:a000::/36 maxlen: 48
2001:3fc7:b000::/36 maxlen: 48
2001:3fc7:c000::/36 maxlen: 48
2001:3fc7:e000::/36 maxlen: 48
2001:3fc7:f000::/36 maxlen: 36
2001:3fc7:f400::/40 maxlen: 40
2001:3fc7:f440::/48 maxlen: 48
2001:3fc7:f480::/48 maxlen: 48
2001:3fc7:f800::/40 maxlen: 40
2001:3fc7:f840::/48 maxlen: 48
2001:3fc7:f880::/48 maxlen: 48
2001:3fc7:f8c0::/48 maxlen: 48
2a0e:9780::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:f1:32:23:c7:02:63:14:82:ba:86:d9:1e:5d:67:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd312211f1957129c21c417503d43b00aa26b43
Validity
Not Before: Sep 29 20:52:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a58ccc3d8430c1c29a68d9f3ad7786ef3014aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:aa:06:96:0a:10:67:3e:4d:07:ee:b0:fe:
83:c5:27:d1:26:10:2e:53:be:7b:37:cf:e5:b3:91:
b3:71:4f:f3:9d:57:f0:2c:bd:b5:cf:1d:8f:cf:29:
0f:cc:a7:16:6a:86:be:83:8d:41:4e:3e:fd:03:d7:
8e:a4:0c:28:c0:dd:04:61:bb:db:73:fc:44:d1:fa:
10:67:01:65:5e:00:cf:3a:ca:02:ba:59:40:e1:56:
e9:1d:c7:32:49:f5:22:80:27:da:5d:cf:b3:4a:4e:
c0:d8:f3:80:3f:29:a8:02:47:4c:a0:44:d5:83:31:
8c:13:71:40:4c:c0:b6:45:15:e7:50:7f:e5:cf:bb:
5d:4b:92:1c:e1:49:c9:33:e7:3b:a7:52:be:f9:5e:
72:3a:e1:97:68:d4:93:4a:36:f7:d7:cf:6d:23:2e:
23:4d:17:d3:74:79:35:4c:00:28:60:9f:c3:e0:36:
2c:ed:6a:f5:0e:42:cd:2d:6c:f5:55:46:74:7b:82:
1f:06:6c:81:3f:0e:25:b9:45:5a:d7:ce:78:39:89:
82:29:64:53:b1:6d:2c:66:d5:ea:a4:80:92:61:cd:
7b:9a:2b:66:a7:9e:16:7a:ef:ef:3f:83:f6:ab:f7:
ae:7f:2b:4b:f8:39:d7:61:85:92:ee:00:4b:36:f3:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:58:CC:C3:D8:43:0C:1C:29:A6:8D:9F:3A:D7:78:6E:F3:01:4A:FF
X509v3 Authority Key Identifier:
keyid:5D:D3:12:21:1F:19:57:12:9C:21:C4:17:50:3D:43:B0:0A:A2:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/mljMw9hDDBwppo2fOtd4bvMBSv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.0.0/19
51.0.128.0/17
51.72.0.0-51.74.255.255
51.172.0.0/15
51.224.0.0/15
83.118.240.0/20
193.202.192.0/19
IPv6:
2001:3fc0::/29
2a0e:9780::/29
Signature Algorithm: sha256WithRSAEncryption
75:f1:6b:ac:80:bf:9d:6f:b4:07:47:99:c5:ff:9c:a5:82:bd:
81:33:64:9c:39:7c:77:d4:57:54:aa:4e:54:08:17:ce:f3:65:
84:17:3b:fc:61:cd:59:0b:22:ed:96:68:41:e3:23:3f:a8:91:
8e:05:15:91:78:83:46:18:6d:a6:5f:6a:77:e6:16:ba:26:31:
5c:18:1f:54:c2:3c:1f:59:11:8e:43:0f:e3:82:85:be:05:21:
dc:88:6b:4e:79:45:46:c3:5f:f2:f4:6e:94:b3:9d:bb:ca:03:
90:88:bb:b2:64:70:c5:40:89:4e:7f:b7:d7:d8:90:92:64:38:
c5:f0:4d:27:63:4d:c4:e5:50:d0:12:53:3f:08:0a:c9:f6:97:
da:b5:96:93:42:e9:dc:e5:4d:dd:0d:80:72:23:0b:f6:2d:4e:
1a:36:76:cb:87:91:52:96:35:a9:ff:bb:84:62:fc:86:b1:28:
c2:8d:ac:b1:6a:70:e2:cc:25:02:2a:a5:4b:51:88:4f:12:72:
62:ec:15:05:9a:ad:d9:e1:0c:e7:a7:fa:43:24:40:e4:b4:f2:
1a:e5:ba:aa:40:b2:18:0c:0c:3b:62:11:2f:75:69:2f:11:6f:
ce:d7:4d:2e:7e:8b:4c:c4:00:c3:79:89:78:af:ac:43:cd:89:
aa:3f:67:a6
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAaDu8TIjxwJjFIK6htkeXWcPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDMxMjIxMWYxOTU3MTI5YzIxYzQxNzUwM2Q0M2IwMGFh
MjZiNDMwHhcNMjYwOTI5MjA1MjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTU4Y2NjM2Q4NDMwYzFjMjlhNjhkOWYzYWQ3Nzg2ZWYzMDE0YWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SCqBpYKEGc+TQfusP6DxSfRJhAu
U757N8/ls5GzcU/znVfwLL21zx2PzykPzKcWaoa+g41BTj79A9eOpAwowN0EYbvb
c/xE0foQZwFlXgDPOsoCullA4VbpHccySfUigCfaXc+zSk7A2POAPymoAkdMoETV
gzGME3FATMC2RRXnUH/lz7tdS5Ic4UnJM+c7p1K++V5yOuGXaNSTSjb3189tIy4j
TRfTdHk1TAAoYJ/D4DYs7Wr1DkLNLWz1VUZ0e4IfBmyBPw4luUVa1854OYmCKWRT
sW0sZtXqpICSYc17mitmp54Weu/vP4P2q/eufytL+DnXYYWS7gBLNvNDhwIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFJpYzMPYQwwcKaaNnzrXeG7zAUr/MB8GA1UdIwQY
MBaAFF3TEiEfGVcSnCHEF1A9Q7AKomtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRNU0lSOFpWeEtjSWNRWFVEMURzQXFpYTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yOGQ1MDgtYjU5Yi00ZTJlLTk3YjMt
NWI1NzE0NDdhYjc3LzEvbWxqTXc5aEREQndwcG8yZk90ZDRidk1CU3Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yOGQ1MDgtYjU5Yi00ZTJlLTk3YjMtNWI1NzE0NDdhYjc3
LzEvWGRNU0lSOFpWeEtjSWNRWFVEMURzQXFpYTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDA0BAIAATAuAwQFMwAAAwQH
MwCAMAoDAwMzSAMDADNKAwMBM6wDAwEz4AMEBFN28AMEBcHKwDAUBAIAAjAOAwUD
IAE/wAMFAyoOl4AwDQYJKoZIhvcNAQELBQADggEBAHXxa6yAv51vtAdHmcX/nKWC
vYEzZJw5fHfUV1SqTlQIF87zZYQXO/xhzVkLIu2WaEHjIz+okY4FFZF4g0YYbaZf
anfmFromMVwYH1TCPB9ZEY5DD+OChb4FIdyIa055RUbDX/L0bpSznbvKA5CIu7Jk
cMVAiU5/t9fYkJJkOMXwTSdjTcTlUNASUz8ICsn2l9q1lpNC6dzlTd0NgHIjC/Yt
Tho2dsuHkVKWNan/u4Ri/IaxKMKNrLFqcOLMJQIqpUtRiE8ScmLsFQWardnhDOen
+kMkQOS08hrluqpAshgMDDtiES91aS8Rb87XTS5+i0zEAMN5iXivrEPNiao/Z6Y=
-----END CERTIFICATE-----
Generated at Mon Oct 5 12:58:15 2026 by rpki-client