Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/mnNKxvqyX4ji89R1P4Lrhnun34M.roa
File: mnNKxvqyX4ji89R1P4Lrhnun34M.roa (raw, json)
Hash identifier: 9zg3oF/RaHPi5XG1qYCPea66H/lTzoUD6Gk79Hpa+OI=
Subject key identifier: 9A:73:4A:C6:FA:B2:5F:88:E2:F3:D4:75:3F:82:EB:86:7B:A7:DF:83
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 019F33810E629EA2C8A154510525066AF5CC
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/mnNKxvqyX4ji89R1P4Lrhnun34M.roa
Signing time: Sun 05 Jul 2026 18:18:43 +0000
ROA not before: Sun 05 Jul 2026 18:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 5.182.124.0/22 maxlen: 22
45.13.248.0/23 maxlen: 23
45.13.250.0/24 maxlen: 24
45.13.251.0/24 maxlen: 24
45.85.108.0/22 maxlen: 22
45.94.96.0/22 maxlen: 22
45.130.65.0/24 maxlen: 24
45.139.0.0/24 maxlen: 24
45.139.1.0/24 maxlen: 24
80.76.52.0/22 maxlen: 22
83.150.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:81:0e:62:9e:a2:c8:a1:54:51:05:25:06:6a:f5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jul 5 18:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a734ac6fab25f88e2f3d4753f82eb867ba7df83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:0e:63:c7:e1:c1:01:03:ee:d0:f8:e2:a7:
05:d6:a0:eb:f4:35:18:6d:61:53:3a:eb:ed:40:35:
79:8e:b5:3e:76:7c:72:50:b6:73:c7:24:f6:33:df:
2e:d0:da:e3:06:a9:fd:0f:01:26:90:dc:26:8c:05:
43:95:5f:b4:e2:cd:37:ee:4b:b7:16:b5:c3:44:d2:
28:d9:34:a6:02:fe:e6:66:30:c0:44:c0:11:4c:18:
da:c9:27:69:7a:ea:4f:30:15:e9:b8:1b:f5:be:57:
a6:09:cf:e4:38:d0:a9:48:94:b9:bc:e7:98:d3:d1:
de:69:e1:67:0c:78:a1:9f:aa:60:19:6c:90:1e:52:
1c:34:98:c6:02:f2:fa:1b:df:5f:89:48:e2:00:f2:
0b:bd:a8:bf:e8:c3:2a:5b:65:73:4a:f8:38:e7:29:
46:21:c4:05:c8:5b:5a:df:ca:97:0d:2b:66:28:40:
94:31:b0:a8:59:5e:c4:48:b5:52:0c:6f:83:1c:6c:
8c:1e:5a:d9:f4:38:b0:7b:a2:c3:32:8f:bd:42:12:
ab:f8:e6:2d:89:d1:e0:d1:58:20:93:d8:74:48:ac:
69:99:1b:43:67:12:d8:3d:3f:40:92:74:54:56:96:
29:a9:5b:42:b3:fb:6f:5f:63:09:20:5a:2d:d3:19:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:73:4A:C6:FA:B2:5F:88:E2:F3:D4:75:3F:82:EB:86:7B:A7:DF:83
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/mnNKxvqyX4ji89R1P4Lrhnun34M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.124.0/22
45.13.248.0/22
45.85.108.0/22
45.94.96.0/22
45.130.65.0/24
45.139.0.0/23
80.76.52.0/22
83.150.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:ee:64:58:0e:29:ee:f5:cb:2a:a7:2b:c6:37:9c:7c:6b:1f:
67:b6:3e:8a:eb:49:f3:99:39:e8:0d:d4:06:36:71:ea:29:9d:
8f:26:ca:60:b4:44:2d:f9:88:8f:90:a3:bb:b8:4c:91:e8:d5:
0b:a4:82:a7:e5:5d:86:80:10:a9:ad:0d:c7:d5:2c:23:43:ee:
0a:f0:30:8e:ee:84:cb:a2:c4:8b:bc:46:c1:f2:9e:d1:73:9d:
64:84:ea:49:f7:1b:41:80:e8:95:18:2c:13:38:a1:c2:fc:4d:
50:92:b9:e0:4b:1c:ce:a6:8f:83:30:e1:1b:e1:68:99:25:ec:
19:cc:c5:a0:03:cc:4c:00:2e:a8:ef:7a:82:18:d2:0b:36:6e:
a5:5c:3e:d9:bf:64:c3:81:70:d6:a3:c2:4b:fa:bf:f7:66:47:
cb:11:9f:a6:20:8e:1f:6e:83:91:76:99:21:b5:38:9c:7a:ca:
95:30:2f:a0:2d:bc:17:4f:f6:b7:f3:5c:9f:d6:08:91:f9:c7:
b4:5b:8e:0f:07:6e:6a:b0:5a:11:a7:a0:58:e1:a7:df:85:7a:
20:21:e2:e0:b0:93:49:4e:68:01:8a:d7:88:b3:22:e4:1d:46:
90:cc:ee:c0:fb:b9:8d:97:81:a1:a6:05:44:9e:6f:fd:f2:d7:
86:3c:d0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:46:18 2026 by rpki-client