Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/_Mqv_JYiF8FH_vcrUd6z5iBTnaA.roa
File: _Mqv_JYiF8FH_vcrUd6z5iBTnaA.roa (raw, json)
Hash identifier: wgYSTyAlZdDyfFsa4EFJ55y+CMO3Ta5R634E3wfbtNM=
Subject key identifier: FC:CA:AF:FC:96:22:17:C1:47:FE:F7:2B:51:DE:B3:E6:20:53:9D:A0
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 019F94A07FF2627035A18394CB6069217772
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/_Mqv_JYiF8FH_vcrUd6z5iBTnaA.roa
Signing time: Fri 24 Jul 2026 14:56:14 +0000
ROA not before: Fri 24 Jul 2026 14:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50599
IP address blocks: 5.133.115.0/24 maxlen: 24
91.196.14.0/23 maxlen: 23
91.231.104.0/24 maxlen: 24
91.231.105.0/24 maxlen: 24
91.231.106.0/24 maxlen: 24
185.216.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a0:7f:f2:62:70:35:a1:83:94:cb:60:69:21:77:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Jul 24 14:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fccaaffc962217c147fef72b51deb3e620539da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:11:37:6b:25:0f:9e:01:7b:fb:45:37:4d:
c2:b1:87:25:00:3d:d6:c0:e5:d5:5e:6a:28:54:d0:
47:f4:5c:11:ae:35:ef:21:c6:76:45:a1:98:a9:9a:
fd:f9:9c:b9:35:c0:ba:fc:c1:7e:7f:b6:83:ac:8c:
8d:13:6e:3f:22:1a:d8:f7:cb:13:2e:1c:47:68:33:
fe:fe:dd:4b:ed:1e:1e:4c:52:7d:aa:13:f4:d3:43:
8a:49:23:f5:d2:50:2a:ec:a7:55:10:6a:40:f3:36:
b2:a6:49:32:bd:52:01:74:97:1a:13:cc:66:83:6f:
d3:d2:81:3a:f3:fa:dd:bc:97:28:a8:9b:88:0a:c5:
2d:f3:f0:b7:a1:b5:93:f8:8d:24:c7:5f:3b:54:9b:
c2:5d:9a:cd:e4:c1:9f:60:05:6f:c6:03:51:62:6f:
00:3e:b4:dd:4b:1d:fd:76:27:68:80:ba:a6:27:fc:
29:89:3c:b3:92:99:6e:ef:77:90:16:ef:30:39:fe:
37:3d:2b:35:aa:9e:52:cd:fd:8a:bb:34:a7:b7:70:
93:bb:cb:c6:97:ec:55:e7:f5:03:15:17:23:50:12:
e6:d2:f2:a0:d9:91:42:72:e2:be:01:2c:cc:e9:a7:
24:a2:54:1f:21:8e:67:c5:93:49:05:a7:65:2e:5b:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CA:AF:FC:96:22:17:C1:47:FE:F7:2B:51:DE:B3:E6:20:53:9D:A0
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/_Mqv_JYiF8FH_vcrUd6z5iBTnaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.115.0/24
91.196.14.0/23
91.231.104.0-91.231.106.255
185.216.174.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:5e:26:a3:b4:84:41:36:a0:60:4a:61:2a:72:3f:b1:1e:5d:
f5:26:aa:3d:0b:49:71:36:de:20:47:7a:6f:22:49:75:5a:d4:
3a:e9:a9:39:e2:04:67:7a:a8:88:fe:58:b7:28:a6:0c:8a:1d:
ae:3f:ca:68:6d:92:3a:89:4c:2a:fa:29:46:f9:4f:59:06:5c:
68:0f:dd:81:22:59:af:dd:65:3a:e6:a2:97:44:18:f6:46:00:
c7:c5:0b:0e:fd:7e:00:6a:ba:ab:8e:12:d8:e5:8c:be:f9:98:
8b:9d:dd:82:d4:00:bf:4f:06:67:7a:a5:4d:9f:73:38:fc:38:
a4:61:69:59:ea:8a:be:f4:09:8e:cd:8d:e3:fd:fa:18:08:5b:
81:d0:85:5b:6f:a9:40:3c:ef:4b:7f:e4:ca:56:51:12:0a:4c:
7d:98:88:7e:fb:6f:d3:58:8c:12:4f:33:56:59:4b:68:c0:1a:
6c:f6:28:c1:17:22:a7:3b:ca:97:7b:59:86:5c:e2:0e:3c:f1:
ef:8b:e3:c0:fc:fb:05:e4:7b:c7:04:68:b6:31:cc:62:d3:f4:
97:54:c0:60:7a:53:08:c8:a3:65:88:3b:6c:da:b3:9f:ac:73:
65:6f:6c:b7:05:1e:b4:95:53:44:a6:4c:99:b6:44:73:0e:12:
d2:9e:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:30:56 2026 by rpki-client