Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/MxzqwWMUSsptURJMzavxSHfUO8w.roa
File: MxzqwWMUSsptURJMzavxSHfUO8w.roa (raw, json)
Hash identifier: poWnPXle6XHD8AxyCDLX0yoA7QSiBEOVvbwg5OVZcvQ=
Subject key identifier: 33:1C:EA:C1:63:14:4A:CA:6D:51:12:4C:CD:AB:F1:48:77:D4:3B:CC
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 019F703FC2231DD475E6061939A20E44F2D2
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/MxzqwWMUSsptURJMzavxSHfUO8w.roa
Signing time: Fri 17 Jul 2026 13:24:14 +0000
ROA not before: Fri 17 Jul 2026 13:24:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44313
IP address blocks: 109.160.100.0/22 maxlen: 24
109.160.113.0/24 maxlen: 24
109.160.122.0/23 maxlen: 24
109.160.124.0/22 maxlen: 24
185.43.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:3f:c2:23:1d:d4:75:e6:06:19:39:a2:0e:44:f2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jul 17 13:24:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=331ceac163144aca6d51124ccdabf14877d43bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:98:c1:bb:04:24:45:0f:a4:37:fb:14:a0:
77:e4:d6:24:a8:c2:c5:26:92:a8:8a:80:24:3b:b0:
01:a8:85:01:64:fa:4a:9d:74:a3:cf:6e:e7:a6:ec:
5b:c7:ba:a6:5c:27:73:19:0e:25:4b:aa:2c:fd:20:
db:28:25:f7:52:73:1e:9e:1e:91:9a:38:1a:84:78:
6b:05:50:f9:64:52:74:c1:e2:a5:9d:2d:cc:8a:bd:
1c:64:91:d8:1f:8f:08:00:da:3d:2b:98:12:41:29:
1c:fb:75:5c:94:a6:b2:fc:ce:35:ec:46:4d:36:ca:
83:07:e3:d2:86:d0:48:6f:e3:c9:90:74:89:4b:be:
fe:aa:fb:dd:e8:e6:f6:f5:43:f0:78:56:13:bf:d1:
70:d1:70:7d:c8:c9:cb:7e:19:cd:3c:26:a2:b9:6a:
e6:08:49:5b:8a:c9:5e:a9:cb:bf:9a:e0:12:ae:45:
bf:65:c4:75:f6:49:76:f0:f3:47:31:31:b5:39:93:
ea:99:c1:da:71:ab:be:2f:f7:1c:57:30:21:10:66:
34:d9:c8:e5:81:a7:e8:4a:d9:93:9f:53:12:e3:98:
30:c1:0e:ff:85:ba:53:cd:76:10:8c:df:e6:52:51:
aa:5f:72:74:02:a9:8c:61:1e:e3:61:b0:2e:73:36:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1C:EA:C1:63:14:4A:CA:6D:51:12:4C:CD:AB:F1:48:77:D4:3B:CC
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/MxzqwWMUSsptURJMzavxSHfUO8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.100.0/22
109.160.113.0/24
109.160.122.0-109.160.127.255
185.43.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:9c:ad:a5:24:b4:fa:0c:80:6a:c9:45:d5:64:a1:5d:99:c6:
88:b7:da:1c:23:9e:b4:06:2a:ea:97:f7:b7:f1:4e:69:a6:4d:
46:f3:ab:69:17:00:e3:97:9b:8e:86:ae:fa:2d:a1:dc:2f:3b:
a9:0a:b4:26:31:2f:91:94:f1:94:1c:02:08:1f:45:32:ff:1d:
f7:6e:b3:ee:0e:7b:77:2d:6b:33:5f:7e:9b:74:ca:cc:fb:55:
b1:02:5c:f0:95:ec:6f:b1:18:d9:fc:56:55:b2:42:46:2d:10:
78:0b:92:d3:d4:99:59:09:a8:29:00:17:c9:ad:14:b9:68:74:
92:ed:24:80:ad:fe:df:4c:6a:9a:79:f8:e0:17:24:c9:17:4a:
7b:2f:ac:90:ea:55:65:f6:0a:07:77:e0:97:c1:3c:8d:7d:82:
4f:9f:fa:54:6e:7f:ae:a5:b5:49:16:87:c6:9c:67:d7:4b:52:
32:99:18:cb:38:f6:80:22:65:a0:1b:bf:ad:02:2a:2f:5a:cb:
13:21:9c:81:64:cd:45:54:8c:c9:17:f3:1e:93:60:fe:c9:73:
a6:1c:ee:6c:9e:7d:34:f0:da:ba:5d:80:81:60:4d:b4:73:70:
92:0b:9a:9b:16:fd:ea:a4:7b:82:a2:ce:bc:87:b3:28:33:c4:
90:be:d1:67
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ9wP8IjHdR15gYZOaIORPLSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjYwNzE3MTMyNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzFjZWFjMTYzMTQ0YWNhNmQ1MTEyNGNjZGFiZjE0ODc3ZDQzYmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFWYwbsEJEUPpDf7FKB35NYkqMLF
JpKoioAkO7ABqIUBZPpKnXSjz27npuxbx7qmXCdzGQ4lS6os/SDbKCX3UnMenh6R
mjgahHhrBVD5ZFJ0weKlnS3Mir0cZJHYH48IANo9K5gSQSkc+3VclKay/M417EZN
NsqDB+PShtBIb+PJkHSJS77+qvvd6Ob29UPweFYTv9Fw0XB9yMnLfhnNPCaiuWrm
CElbisleqcu/muASrkW/ZcR19kl28PNHMTG1OZPqmcHacau+L/ccVzAhEGY02cjl
gafoStmTn1MS45gwwQ7/hbpTzXYQjN/mUlGqX3J0AqmMYR7jYbAuczZPSQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFDMc6sFjFErKbVESTM2r8Uh31DvMMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvTXh6cXdXTVVTc3B0VVJKTXphdnhTSGZVTzh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCbaBkAwQA
baBxMAwDBAFtoHoDBAdtoAADBAC5KzowDQYJKoZIhvcNAQELBQADggEBAGycraUk
tPoMgGrJRdVkoV2Zxoi32hwjnrQGKuqX97fxTmmmTUbzq2kXAOOXm46Grvotodwv
O6kKtCYxL5GU8ZQcAggfRTL/Hfdus+4Oe3ctazNffpt0ysz7VbECXPCV7G+xGNn8
VlWyQkYtEHgLktPUmVkJqCkAF8mtFLlodJLtJICt/t9Mapp5+OAXJMkXSnsvrJDq
VWX2Cgd34JfBPI19gk+f+lRuf66ltUkWh8acZ9dLUjKZGMs49oAiZaAbv60CKi9a
yxMhnIFkzUVUjMkX8x6TYP7Jc6Yc7myefTTw2rpdgIFgTbRzcJILmpsW/eqke4Ki
zryHsygzxJC+0Wc=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:06 2026 by rpki-client