Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/MlxaAHik4Irhhg2pDV_s_Rvf7bI.roa
File: MlxaAHik4Irhhg2pDV_s_Rvf7bI.roa (raw, json)
Hash identifier: 3NA/JBsu3EKmNF330/KjUrrDVxnecTt8Q2GPQT4XUMo=
Subject key identifier: 32:5C:5A:00:78:A4:E0:8A:E1:86:0D:A9:0D:5F:EC:FD:1B:DF:ED:B2
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F2369185DAA9D8BDD1A90B9E5B101ACE0
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/MlxaAHik4Irhhg2pDV_s_Rvf7bI.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5606
IP address blocks: 31.14.21.0/24 maxlen: 24
45.14.236.0/24 maxlen: 24
45.14.238.0/24 maxlen: 24
45.67.36.0/24 maxlen: 24
45.67.38.0/24 maxlen: 24
45.67.39.0/24 maxlen: 24
45.82.28.0/23 maxlen: 23
84.247.23.0/24 maxlen: 24
89.34.101.0/24 maxlen: 24
89.39.6.0/24 maxlen: 24
89.39.7.0/24 maxlen: 24
89.42.133.0/24 maxlen: 24
92.114.2.0/24 maxlen: 24
92.114.3.0/24 maxlen: 24
93.174.160.0/24 maxlen: 24
93.174.162.0/24 maxlen: 24
93.174.167.0/24 maxlen: 24
176.223.114.0/24 maxlen: 24
185.220.184.0/24 maxlen: 24
185.220.185.0/24 maxlen: 24
185.220.186.0/24 maxlen: 24
185.248.139.0/24 maxlen: 24
188.240.0.0/24 maxlen: 24
188.241.72.0/24 maxlen: 24
188.241.73.0/24 maxlen: 24
188.241.74.0/23 maxlen: 23
193.16.144.0/24 maxlen: 24
193.200.62.0/24 maxlen: 24
193.200.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:18:5d:aa:9d:8b:dd:1a:90:b9:e5:b1:01:ac:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=325c5a0078a4e08ae1860da90d5fecfd1bdfedb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:13:f3:c7:c1:bf:9c:6c:36:a4:d1:05:25:
e6:75:02:44:97:62:58:55:47:7d:74:03:f2:6f:e5:
f6:19:5b:c3:14:03:14:18:1b:a5:0b:a8:ec:11:eb:
ad:5a:25:c1:65:12:f2:5a:cf:96:1e:2b:f5:cf:20:
76:28:a2:3d:18:f7:2e:a6:41:fa:35:4a:31:85:60:
3e:37:01:59:04:9a:11:86:17:47:6e:45:ae:e3:e6:
5f:4c:da:e1:e3:c7:83:99:fe:14:b2:f6:73:0c:0d:
00:f8:df:70:95:df:1a:00:45:8f:63:99:fa:59:79:
38:78:b5:66:5d:9a:8c:53:c5:06:cd:22:90:bb:85:
48:cf:5a:16:e3:8c:85:d0:e3:c3:20:bc:7d:f4:76:
08:77:76:2a:7f:fe:b1:9f:c2:21:66:d2:71:a5:49:
49:b1:21:e7:b7:a9:dc:58:8b:0d:f4:2e:79:76:a2:
41:6c:63:fe:85:24:95:9a:45:db:48:f8:68:0c:a8:
83:88:1e:e5:a9:a5:34:14:34:4b:7c:9f:8f:69:bf:
3c:af:3b:dd:b2:13:97:75:9b:01:4b:0a:e0:ea:a2:
18:85:a2:30:0c:81:af:d6:35:f0:69:3c:18:79:d1:
47:3e:af:78:fa:77:ef:dc:67:65:3f:7a:2e:3e:27:
e0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5C:5A:00:78:A4:E0:8A:E1:86:0D:A9:0D:5F:EC:FD:1B:DF:ED:B2
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/MlxaAHik4Irhhg2pDV_s_Rvf7bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.21.0/24
45.14.236.0/24
45.14.238.0/24
45.67.36.0/24
45.67.38.0/23
45.82.28.0/23
84.247.23.0/24
89.34.101.0/24
89.39.6.0/23
89.42.133.0/24
92.114.2.0/23
93.174.160.0/24
93.174.162.0/24
93.174.167.0/24
176.223.114.0/24
185.220.184.0-185.220.186.255
185.248.139.0/24
188.240.0.0/24
188.241.72.0/22
193.16.144.0/24
193.200.62.0/23
Signature Algorithm: sha256WithRSAEncryption
09:7e:5b:ad:05:9c:be:f6:b2:95:6c:aa:53:57:de:85:21:7a:
db:21:e5:2f:da:0b:01:ec:ca:78:ee:19:1f:8b:e3:33:81:05:
14:bb:ca:28:b6:92:f7:2c:b9:b9:ba:73:8d:ad:d8:96:59:f9:
34:54:76:a4:a8:b0:a2:f4:c2:6e:6e:66:22:3d:75:92:93:0b:
88:35:e4:0a:76:17:ef:29:73:9a:f0:d1:3e:55:04:3b:94:cb:
70:cb:7b:2f:e6:1d:a6:d3:36:a2:02:db:09:67:ad:6d:db:29:
e3:63:d4:2a:17:49:e1:00:00:05:7b:fd:39:7d:e5:2c:35:c4:
b3:75:7d:d0:c9:cd:db:89:c5:f8:76:5f:83:ed:2f:8b:e3:f0:
9c:7d:21:46:79:09:8b:6e:a1:bb:d1:97:4d:8b:cc:b3:7f:a2:
d4:e3:52:ae:bf:f9:bc:bf:bc:5a:ec:65:38:2f:0a:7a:36:8b:
09:e5:1c:68:5b:c2:08:5b:ee:1c:8a:d8:7c:95:91:75:be:df:
14:76:70:96:da:60:bd:6c:9a:c9:3f:af:c8:27:88:fe:e9:d2:
d5:30:58:f3:ca:47:ba:b0:e2:5a:6e:84:46:a9:26:cd:50:f0:
6a:3c:52:d1:f1:29:2c:c2:8e:a6:a0:2a:0f:c8:ed:68:79:9c:
f3:f8:bd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:16:46 2026 by rpki-client