Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/MPpm3ltDMlM3-_s2vsIsB1cZ9q4.roa
File: MPpm3ltDMlM3-_s2vsIsB1cZ9q4.roa (raw, json)
Hash identifier: vBnttlaMTdjmRFEaRT01FqjAvrY/iSLZYenSK35Bg/E=
Subject key identifier: 30:FA:66:DE:5B:43:32:53:37:FB:FB:36:BE:C2:2C:07:57:19:F6:AE
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019F40684988C493FB29364CA2FB8A6EB05D
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/MPpm3ltDMlM3-_s2vsIsB1cZ9q4.roa
Signing time: Wed 08 Jul 2026 06:26:44 +0000
ROA not before: Wed 08 Jul 2026 06:26:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 5.182.114.0/24 maxlen: 24
83.137.154.0/24 maxlen: 24
88.209.194.0/24 maxlen: 24
88.209.229.0/24 maxlen: 24
88.209.232.0/24 maxlen: 24
88.209.233.0/24 maxlen: 24
88.209.234.0/24 maxlen: 24
88.209.235.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:68:49:88:c4:93:fb:29:36:4c:a2:fb:8a:6e:b0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 8 06:26:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30fa66de5b43325337fbfb36bec22c075719f6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:3b:59:6d:ba:31:2c:52:01:38:8b:e8:28:
c2:35:07:05:d5:c1:7b:c5:32:ad:7e:28:96:0b:35:
29:37:44:a7:ee:09:2f:71:38:2b:50:fa:dc:33:70:
d0:a4:79:54:40:8e:25:46:3b:ac:f0:e4:6d:cd:a0:
84:50:f4:9d:ec:7d:ae:c9:dd:38:48:fa:30:1d:7e:
31:36:1c:2e:13:a1:e5:ff:0b:16:70:a5:c7:0c:d8:
7b:43:56:24:90:46:47:69:be:b5:7e:40:5c:a7:1a:
57:e2:8b:d2:d2:7e:fa:b0:83:f2:7a:d0:43:7e:a9:
f3:e4:8e:44:01:1f:9b:f8:38:1e:40:dd:4a:7f:8e:
cf:14:1f:75:3f:76:33:f9:9d:a9:0e:19:d1:d7:40:
dc:1a:86:e9:ed:31:86:5a:fb:98:09:87:33:8b:82:
65:81:c5:df:d4:28:c9:2b:d9:db:89:cb:49:d6:fe:
07:fd:ef:4f:b4:62:63:bd:5a:6f:9d:5f:3d:b4:8d:
08:d8:59:24:ff:a9:0a:84:b9:af:4a:c8:4f:23:6d:
e8:de:fe:6a:1c:a4:7a:91:8d:0c:4d:ea:69:aa:62:
6a:bd:36:02:79:59:04:6e:54:44:d0:30:7b:a8:99:
14:d4:12:df:8e:05:3c:75:d1:65:b7:2c:31:0f:9a:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FA:66:DE:5B:43:32:53:37:FB:FB:36:BE:C2:2C:07:57:19:F6:AE
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/MPpm3ltDMlM3-_s2vsIsB1cZ9q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.114.0/24
83.137.154.0/24
88.209.194.0/24
88.209.229.0/24
88.209.232.0/22
92.52.219.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:79:ad:33:c3:92:a8:f1:0e:97:f0:35:ea:81:e6:e9:ab:68:
e7:eb:c9:88:01:8e:73:1a:0a:bd:a3:5b:93:be:3f:03:35:90:
47:b6:6b:6f:5e:cb:21:b0:8c:c7:de:0b:5c:7a:ca:c2:f8:c6:
9a:c6:28:ea:17:53:f2:4f:a4:38:0c:89:07:da:05:7f:72:0d:
10:5c:93:92:b5:f1:60:d3:5a:a8:fe:68:13:c1:f6:b9:dd:22:
2f:2d:ed:f4:23:4a:a8:a7:62:1a:99:09:42:17:27:9f:d3:b6:
8a:73:29:d5:29:26:56:dd:f1:f8:1b:ff:22:5d:9c:62:d8:10:
87:53:3c:a2:72:db:62:60:38:31:4b:53:58:73:ee:6a:aa:42:
33:4a:76:fd:3c:ed:56:71:41:f2:19:cd:43:d4:bc:19:2b:01:
82:b1:c2:41:ef:19:ff:19:36:c2:c8:bf:fc:76:ba:f6:c0:9b:
00:cd:20:ba:6a:a5:07:9f:9f:6f:e1:6e:e9:32:e6:41:ab:77:
ee:eb:c9:fe:71:97:d6:b1:f9:79:8c:13:4b:fe:eb:e1:a2:1f:
2a:8c:da:25:87:27:58:73:68:a4:63:5d:4c:63:5e:1e:98:70:
21:35:49:c1:4a:ec:83:71:38:1a:6c:98:26:39:d4:9e:18:34:
c1:01:0a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:55 2026 by rpki-client