Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/mgPMgmO1MnQ710BsaC9GgiUOCyo.roa
File: mgPMgmO1MnQ710BsaC9GgiUOCyo.roa (raw, json)
Hash identifier: cgp58YJUOJU4z8ygbBfP3ejTeYQRwCdmEzfUU9kXBS8=
Subject key identifier: 9A:03:CC:82:63:B5:32:74:3B:D7:40:6C:68:2F:46:82:25:0E:0B:2A
Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial: 019FF5E6C5D978AE9E009530A52D25C17531
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/mgPMgmO1MnQ710BsaC9GgiUOCyo.roa
Signing time: Wed 12 Aug 2026 12:16:09 +0000
ROA not before: Wed 12 Aug 2026 12:16:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3188
IP address blocks: 5.2.80.0/24 maxlen: 24
5.2.81.0/24 maxlen: 24
5.2.82.0/24 maxlen: 24
5.2.83.0/24 maxlen: 24
5.2.84.0/24 maxlen: 24
5.2.85.0/24 maxlen: 24
5.2.86.0/24 maxlen: 24
5.2.87.0/24 maxlen: 24
185.8.32.0/24 maxlen: 24
185.8.33.0/24 maxlen: 24
185.8.34.0/24 maxlen: 24
185.8.35.0/24 maxlen: 24
185.8.128.0/24 maxlen: 24
185.8.129.0/24 maxlen: 24
185.8.130.0/24 maxlen: 24
185.8.131.0/24 maxlen: 24
185.67.121.0/24 maxlen: 24
185.150.129.0/24 maxlen: 24
185.150.130.0/24 maxlen: 24
185.150.131.0/24 maxlen: 24
193.31.118.0/24 maxlen: 24
2a02:d9c0::/29 maxlen: 29
2a04:b600::/29 maxlen: 29
2a06:ad40::/29 maxlen: 29
2a06:ad40::/48 maxlen: 48
2a06:ad40:1::/48 maxlen: 48
2a06:ad40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:e6:c5:d9:78:ae:9e:00:95:30:a5:2d:25:c1:75:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Validity
Not Before: Aug 12 12:16:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a03cc8263b532743bd7406c682f4682250e0b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:d7:05:12:81:43:dd:d8:da:09:13:1d:0a:
56:43:0f:1f:2d:15:0b:6a:22:35:0a:b6:de:70:c2:
59:02:a5:65:a5:ed:9f:69:5d:58:a5:c7:19:b5:57:
a1:f0:71:5a:f1:6c:0d:a3:42:f0:6f:8d:3f:bd:91:
e5:cf:b6:1e:37:78:dc:90:88:91:83:7b:31:6b:74:
b1:d4:55:5f:b7:35:d1:a2:e7:7e:b8:f5:8e:2d:7e:
26:bf:0c:97:4d:2c:c0:af:5e:55:6b:8e:7c:93:97:
6a:4c:6a:12:17:8e:1d:47:1e:50:12:36:dd:6c:1c:
a6:aa:32:e4:69:ed:d7:e8:dd:f3:cd:ed:d7:3f:a7:
b2:e8:d8:69:12:73:b0:0f:80:cb:50:2f:50:c7:de:
74:a7:7d:e5:b8:3f:e8:65:bb:c9:a6:1a:ff:35:37:
b0:77:b8:42:6c:b2:f4:1b:a1:fd:81:fb:71:ce:2d:
c8:18:b7:42:75:87:67:e1:0b:de:84:7e:dd:4e:6c:
9d:e9:35:12:ba:c7:35:e6:7a:88:ea:a8:6e:be:7e:
af:cb:b0:91:1e:60:85:4a:d9:69:cb:b3:42:37:ca:
ad:30:41:04:f2:e0:56:eb:5e:58:3e:20:24:b4:62:
24:e3:a9:8f:56:e9:40:b3:2b:1c:57:74:9c:49:70:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:03:CC:82:63:B5:32:74:3B:D7:40:6C:68:2F:46:82:25:0E:0B:2A
X509v3 Authority Key Identifier:
keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/mgPMgmO1MnQ710BsaC9GgiUOCyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.80.0/21
185.8.32.0/22
185.8.128.0/22
185.67.121.0/24
185.150.129.0-185.150.131.255
193.31.118.0/24
IPv6:
2a02:d9c0::/29
2a04:b600::/29
2a06:ad40::/29
Signature Algorithm: sha256WithRSAEncryption
8f:ca:33:5e:bb:ff:e6:20:49:5e:08:0a:31:8c:a1:1c:ec:6f:
ec:a4:e1:61:b3:d0:66:42:d9:ec:41:99:2e:4b:79:b5:47:88:
d9:aa:55:79:dd:87:a8:57:7c:17:c5:84:43:1e:7d:88:a7:be:
2a:51:d7:bb:8c:83:0e:96:bb:48:31:a0:99:a8:5e:da:05:14:
d3:27:97:93:22:03:0b:ba:e1:cb:e1:93:0a:0e:8e:df:f6:26:
16:84:d8:e2:2f:09:70:6e:a2:22:da:93:0a:c3:e8:fa:00:dc:
08:28:ae:b0:99:c9:52:9f:dc:55:4d:67:cf:46:d2:71:ff:05:
39:fd:ec:74:a9:57:ff:60:a5:a8:bd:c5:d5:57:71:b2:73:85:
17:7d:3d:12:20:6e:77:62:5c:bf:54:72:2d:72:f7:47:c2:d9:
9b:2b:32:54:04:c6:41:29:c1:b0:a1:90:e3:26:e8:97:7f:b1:
3b:3b:9f:7f:60:2a:b3:a1:97:7b:04:a2:63:b6:c4:4c:64:13:
13:d9:46:d0:2e:da:09:2b:13:2f:6b:77:d9:9f:ca:6c:71:34:
7f:6c:4d:fd:ee:38:30:fd:d3:d9:bc:d6:11:fb:ff:c0:2c:6e:
0e:06:f2:32:1c:d6:6f:31:d6:af:28:64:15:9f:a5:ef:00:64:
54:0f:dc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:58:51 2026 by rpki-client