Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/MTFnhdn7CNPhLTQ6eVJvwpV0KbY.roa
File: MTFnhdn7CNPhLTQ6eVJvwpV0KbY.roa (raw, json)
Hash identifier: Pnvcx+DLpwPze8L9jSYJitChvHCuDl+YE9GqD7EE5zY=
Subject key identifier: 31:31:67:85:D9:FB:08:D3:E1:2D:34:3A:79:52:6F:C2:95:74:29:B6
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A02314E8A0C57EB44ECC9F34D561B5363A
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/MTFnhdn7CNPhLTQ6eVJvwpV0KbY.roa
Signing time: Fri 21 Aug 2026 06:49:27 +0000
ROA not before: Fri 21 Aug 2026 06:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.148.128.0/22 maxlen: 24
37.148.128.0/24 maxlen: 24
37.148.129.0/24 maxlen: 24
37.148.130.0/24 maxlen: 24
37.148.131.0/24 maxlen: 24
45.157.158.0/23 maxlen: 24
95.155.128.0/23 maxlen: 24
95.155.128.0/24 maxlen: 24
95.155.129.0/24 maxlen: 24
95.155.131.0/24 maxlen: 24
95.155.133.0/24 maxlen: 24
95.155.136.0/24 maxlen: 24
95.155.137.0/24 maxlen: 24
95.155.140.0/24 maxlen: 24
95.155.144.0/24 maxlen: 24
95.155.145.0/24 maxlen: 24
95.155.146.0/23 maxlen: 24
95.155.146.0/24 maxlen: 24
95.155.147.0/24 maxlen: 24
95.155.148.0/23 maxlen: 24
95.155.149.0/24 maxlen: 24
95.155.152.0/22 maxlen: 24
95.155.152.0/24 maxlen: 24
95.155.153.0/24 maxlen: 24
95.155.156.0/24 maxlen: 24
95.155.160.0/20 maxlen: 24
95.155.172.0/24 maxlen: 24
95.155.173.0/24 maxlen: 24
95.155.174.0/24 maxlen: 24
95.155.176.0/21 maxlen: 24
95.155.176.0/24 maxlen: 24
95.155.179.0/24 maxlen: 24
152.89.84.0/24 maxlen: 24
152.89.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 02:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:14:e8:a0:c5:7e:b4:4e:cc:9f:34:d5:61:b5:36:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Aug 21 06:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31316785d9fb08d3e12d343a79526fc2957429b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:1e:5d:d0:4f:40:4e:8d:7a:af:5d:2c:58:
c0:28:3e:8d:32:c8:89:c7:ac:9d:bf:17:b7:92:22:
3c:29:67:5b:7b:68:74:91:79:56:4a:2e:c6:fb:e7:
6c:85:8b:22:aa:c6:c4:36:75:4b:1d:53:ad:72:4d:
6e:49:37:b7:f2:47:b4:cf:73:0f:5b:7e:ff:0d:81:
bf:62:d3:3a:81:3d:b3:62:80:f4:39:0a:35:4c:c4:
7a:01:ec:42:97:ed:84:04:d8:4e:34:c6:6a:58:bb:
19:40:2b:08:20:fc:64:cf:4f:de:ed:6b:f2:38:74:
95:57:66:80:2f:84:c2:c2:4d:5b:bd:48:04:5a:dd:
16:71:f2:f8:45:c9:9b:f6:fc:53:af:02:cf:98:67:
dd:e5:c4:34:d8:0c:da:ee:7d:d9:c9:91:39:15:03:
e4:a3:cd:6f:56:ee:0f:b8:5d:66:51:67:a5:d3:4f:
ec:00:47:3b:82:ca:84:37:46:db:c6:31:01:e0:59:
a4:f0:75:94:5a:a3:8e:5c:f3:9a:46:a7:78:fb:0e:
50:91:81:a4:3b:6d:20:13:81:db:d6:d8:17:41:91:
45:1b:ce:64:60:83:64:f1:08:39:f0:71:6a:b6:a7:
97:8d:a0:d3:71:8a:bd:25:d8:41:b9:ad:40:91:bc:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:31:67:85:D9:FB:08:D3:E1:2D:34:3A:79:52:6F:C2:95:74:29:B6
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/MTFnhdn7CNPhLTQ6eVJvwpV0KbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.128.0/22
45.157.158.0/23
95.155.128.0/23
95.155.131.0/24
95.155.133.0/24
95.155.136.0/23
95.155.140.0/24
95.155.144.0-95.155.149.255
95.155.152.0-95.155.156.255
95.155.160.0-95.155.183.255
152.89.84.0/24
152.89.87.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:16:1c:5d:1a:21:a2:f0:fb:70:74:00:f6:23:73:f9:a8:8b:
b0:b7:74:10:56:df:5b:f5:f3:60:36:8e:00:26:33:f0:e8:61:
ca:ea:02:c6:13:38:88:d3:e6:6e:1f:0d:96:19:c8:88:48:39:
94:fa:73:bc:94:db:38:e9:04:78:01:14:87:fe:0e:17:78:e0:
20:d9:61:13:86:8f:85:83:f5:75:6d:50:b1:1a:6f:70:e4:69:
80:34:00:83:b1:0a:05:b9:00:19:df:da:8d:e8:74:94:d9:21:
2d:bc:d0:85:2e:22:b5:cf:0a:19:57:1d:ce:7d:97:23:b6:2f:
42:b5:94:5d:0a:d7:a7:d5:3c:45:5c:79:dc:f4:48:10:68:e6:
c1:84:e5:30:5e:29:dc:64:de:35:75:27:9a:a2:84:40:81:da:
db:73:f4:63:fd:db:3c:24:0c:f2:b4:dc:7b:70:e7:a4:79:b1:
58:33:01:07:6c:03:7f:7e:8d:46:51:3b:b9:04:d9:14:c5:ec:
31:ef:ff:24:b2:fa:21:76:87:85:e8:c2:fe:aa:b9:51:76:cf:
4b:c7:bd:bd:b9:e9:99:f1:78:f2:21:67:c3:eb:9e:48:74:38:
ed:ba:83:72:c9:54:3f:f8:9e:24:e1:b1:93:ce:3e:13:60:08:
ce:07:69:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:56:44 2026 by rpki-client