Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/mbr4NlFGUhYQVxbUeX2wYFb_tso.roa
File: mbr4NlFGUhYQVxbUeX2wYFb_tso.roa (raw, json)
Hash identifier: 8qqUcyEeJmDX5ZU+K7SOMj6tey3WQ9K4ULIlpNsBSXI=
Subject key identifier: 99:BA:F8:36:51:46:52:16:10:57:16:D4:79:7D:B0:60:56:FF:B6:CA
Certificate issuer: /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial: 01A159EA0FB71263F90E5F55F9251DD0819B
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/mbr4NlFGUhYQVxbUeX2wYFb_tso.roa
Signing time: Tue 20 Oct 2026 15:24:34 +0000
ROA not before: Tue 20 Oct 2026 15:24:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13030
IP address blocks: 37.17.232.0/21 maxlen: 21
45.80.136.0/22 maxlen: 24
45.143.188.0/22 maxlen: 22
77.74.80.0/21 maxlen: 21
77.109.128.0/18 maxlen: 18
77.109.128.0/19 maxlen: 19
77.109.160.0/19 maxlen: 19
80.253.88.0/21 maxlen: 21
81.6.32.0/20 maxlen: 20
82.197.160.0/19 maxlen: 19
82.197.160.0/20 maxlen: 20
82.197.176.0/20 maxlen: 20
85.195.192.0/18 maxlen: 18
85.195.192.0/20 maxlen: 20
85.195.208.0/20 maxlen: 20
85.195.224.0/19 maxlen: 19
85.195.224.0/20 maxlen: 20
85.195.240.0/20 maxlen: 20
109.202.192.0/19 maxlen: 19
141.195.80.0/20 maxlen: 20
185.72.64.0/22 maxlen: 22
185.137.172.0/22 maxlen: 22
185.183.192.0/22 maxlen: 22
185.201.248.0/22 maxlen: 22
185.246.104.0/22 maxlen: 22
193.47.153.0/24 maxlen: 24
193.223.80.0/20 maxlen: 20
195.134.128.0/19 maxlen: 19
212.51.128.0/19 maxlen: 19
212.51.128.0/20 maxlen: 20
212.51.144.0/20 maxlen: 20
213.144.128.0/19 maxlen: 19
213.144.128.0/20 maxlen: 20
213.144.144.0/20 maxlen: 20
217.118.192.0/20 maxlen: 24
217.118.200.0/22 maxlen: 22
2001:1620::/30 maxlen: 32
2a02:168::/30 maxlen: 30
2a02:168::/32 maxlen: 32
2a02:169::/32 maxlen: 32
2a07:600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:ea:0f:b7:12:63:f9:0e:5f:55:f9:25:1d:d0:81:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Validity
Not Before: Oct 20 15:24:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99baf83651465216105716d4797db06056ffb6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:76:95:b8:b6:88:73:9c:d7:75:6c:75:38:
ed:24:a6:a5:c9:b4:67:ed:0d:c1:3e:c0:2e:e0:3f:
83:69:ae:a2:df:8b:79:1e:a9:3f:8f:61:3c:5e:9d:
67:21:a9:f9:b5:54:5e:6f:9d:cb:b6:40:de:3f:8f:
42:6f:ac:49:1b:e9:77:89:17:10:d2:84:88:03:7c:
d6:25:2c:4f:40:11:ee:d4:5b:44:12:fa:c1:5b:66:
e6:14:67:40:cd:99:e3:6c:15:6f:f9:6b:29:dc:c4:
3f:d8:01:0a:99:a3:7f:e2:fc:13:d4:3f:58:e8:40:
c4:16:46:6a:a2:e4:b0:06:23:4f:09:d2:e0:a3:02:
37:01:4b:86:68:de:56:c0:d6:0d:8e:4f:8c:70:f4:
21:97:33:99:39:1b:88:9b:82:8f:f3:98:65:46:cf:
42:a5:9e:18:0a:90:b0:9f:36:d5:18:f4:6a:c7:51:
4b:e2:19:41:1a:b6:73:43:fa:7f:e2:f3:55:5f:b4:
64:06:38:7d:8f:91:28:32:13:98:9f:33:91:d7:18:
f7:e1:73:99:ff:94:1c:7b:df:80:97:e3:08:f0:9d:
41:41:76:e0:dd:3e:6b:4f:05:78:fb:40:ff:cf:72:
3c:ca:a8:5f:15:89:66:47:3a:51:8f:c8:90:88:10:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:F8:36:51:46:52:16:10:57:16:D4:79:7D:B0:60:56:FF:B6:CA
X509v3 Authority Key Identifier:
keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/mbr4NlFGUhYQVxbUeX2wYFb_tso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.232.0/21
45.80.136.0/22
45.143.188.0/22
77.74.80.0/21
77.109.128.0/18
80.253.88.0/21
81.6.32.0/20
82.197.160.0/19
85.195.192.0/18
109.202.192.0/19
141.195.80.0/20
185.72.64.0/22
185.137.172.0/22
185.183.192.0/22
185.201.248.0/22
185.246.104.0/22
193.47.153.0/24
193.223.80.0/20
195.134.128.0/19
212.51.128.0/19
213.144.128.0/19
217.118.192.0/20
IPv6:
2001:1620::/30
2a02:168::/30
2a07:600::/29
Signature Algorithm: sha256WithRSAEncryption
6e:78:de:f2:8f:58:e0:89:d8:e6:e0:b9:ef:14:23:2b:05:96:
dc:cb:94:d7:f1:87:25:3f:de:51:64:e5:7f:02:47:34:51:a5:
27:b1:3c:46:b5:e0:cf:aa:66:fe:c2:b8:69:95:aa:94:c7:55:
1f:02:95:6d:12:ee:30:2c:84:be:c1:6c:70:ae:51:2d:32:ff:
04:27:e3:c4:e9:87:93:ff:c2:b6:16:52:ed:5a:8a:32:44:b7:
56:91:9d:6c:39:09:ae:cb:ae:1f:17:03:9d:a5:12:d4:c6:e7:
1f:52:d5:61:fa:d3:db:5e:ac:e2:9f:ce:d3:45:f1:b8:e5:a2:
7c:b6:46:84:bd:3a:64:f4:d9:cb:cb:c5:e1:02:c7:87:1f:a5:
fb:a8:3c:ff:59:0e:9d:61:94:56:74:26:a0:c9:d2:ef:c3:2c:
4c:99:1d:f9:b0:f7:f1:1e:a4:47:5f:a0:86:0b:49:77:a2:8e:
00:b3:6c:e3:ba:ea:1a:e8:c1:64:7f:0b:a9:4c:94:7f:73:58:
ce:c2:45:cb:dc:07:89:0d:7c:03:53:36:4d:f2:86:e2:13:4b:
bc:51:b4:3e:ef:d2:24:ad:d0:ce:e4:a3:37:04:3c:38:a4:e6:
41:df:c5:53:61:ac:aa:77:73:70:a5:d4:20:b4:c5:6f:f8:00:
a3:eb:6d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:54 2026 by rpki-client