Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/rMIFOWgPpgEh84QFXDCxqG9IuJo.roa
File: rMIFOWgPpgEh84QFXDCxqG9IuJo.roa (raw, json)
Hash identifier: nFdNMieuWIiHUrXQ7kW2hbA+m40+kh3n4/l9zYjUkcg=
Subject key identifier: AC:C2:05:39:68:0F:A6:01:21:F3:84:05:5C:30:B1:A8:6F:48:B8:9A
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019F8E9F54401F3CE46211FCEDC4CBB3E7B6
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/rMIFOWgPpgEh84QFXDCxqG9IuJo.roa
Signing time: Thu 23 Jul 2026 10:57:14 +0000
ROA not before: Thu 23 Jul 2026 10:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 186.247.72.0/24 maxlen: 24
186.247.185.0/24 maxlen: 24
187.13.19.0/24 maxlen: 24
187.13.210.0/24 maxlen: 24
187.13.215.0/24 maxlen: 24
187.13.216.0/24 maxlen: 24
187.14.116.0/24 maxlen: 24
187.14.117.0/24 maxlen: 24
187.15.100.0/24 maxlen: 24
187.15.102.0/24 maxlen: 24
187.15.117.0/24 maxlen: 24
187.15.119.0/24 maxlen: 24
187.15.134.0/24 maxlen: 24
187.15.135.0/24 maxlen: 24
187.15.136.0/24 maxlen: 24
187.15.162.0/24 maxlen: 24
187.40.17.0/24 maxlen: 24
187.40.18.0/24 maxlen: 24
187.40.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:9f:54:40:1f:3c:e4:62:11:fc:ed:c4:cb:b3:e7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jul 23 10:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acc20539680fa60121f384055c30b1a86f48b89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:cc:7a:fe:77:9a:39:e6:09:e5:d4:6a:21:
ad:c5:0e:c1:38:44:48:34:9e:8a:3d:21:40:f5:1b:
4d:0c:54:0e:e0:8c:ab:3d:17:0b:2f:5c:52:a1:59:
b9:45:f0:4b:b9:0e:99:24:5c:1d:a1:53:3a:e2:a5:
26:80:4d:43:82:f8:4e:33:8a:39:f2:55:5a:f1:d3:
ab:10:fc:4c:6c:42:29:f2:67:4f:2a:01:f1:9e:32:
34:80:e1:d0:cd:13:3e:31:51:19:5f:aa:79:f5:14:
58:e1:e4:0d:59:30:b1:2b:03:96:d8:c3:61:c1:cf:
51:bc:36:39:7e:e1:81:7f:55:c2:c1:77:61:a4:52:
8e:59:e2:a7:f4:6d:04:84:00:68:f6:0a:2f:b3:83:
4d:ca:4c:13:ba:06:8d:41:35:06:40:b3:27:70:7d:
42:3c:9b:5f:53:a1:8b:63:d9:96:bd:bf:ad:e0:f7:
36:cc:20:12:92:90:84:7a:fc:9d:dc:2e:ce:f7:79:
4b:f9:58:61:bf:03:97:6b:db:d6:21:06:e2:ca:c0:
5f:c7:36:19:95:af:fe:1a:69:fe:fa:1f:a1:69:2b:
49:cd:3e:84:3c:77:d7:8e:ef:e2:c9:06:cd:35:bd:
91:ee:a5:47:9c:fb:c0:e1:73:65:d6:a6:65:b9:36:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C2:05:39:68:0F:A6:01:21:F3:84:05:5C:30:B1:A8:6F:48:B8:9A
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/rMIFOWgPpgEh84QFXDCxqG9IuJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.247.72.0/24
186.247.185.0/24
187.13.19.0/24
187.13.210.0/24
187.13.215.0-187.13.216.255
187.14.116.0/23
187.15.100.0/24
187.15.102.0/24
187.15.117.0/24
187.15.119.0/24
187.15.134.0-187.15.136.255
187.15.162.0/24
187.40.17.0-187.40.18.255
187.40.226.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a4:7e:95:df:af:61:da:f9:83:d0:3c:26:10:1e:ba:eb:d5:
21:de:22:f5:43:21:14:60:a2:e6:02:60:fd:ef:bc:ef:71:15:
45:09:ea:98:bd:1d:25:ee:9e:cd:b9:83:5f:9c:3e:41:76:60:
0e:05:6d:4e:31:43:ef:5b:33:ea:de:6b:df:ff:54:ba:e8:4f:
c9:11:be:cd:c4:33:1b:3c:f7:8e:cd:13:ba:2d:68:bb:8a:36:
0c:59:c7:1c:4c:9a:8d:98:b4:3c:fa:08:b1:f9:01:fb:8e:c5:
14:28:9e:68:6c:df:9c:cb:21:08:cd:eb:b0:ff:37:1f:c8:6e:
77:19:25:fb:4e:b8:79:23:fd:74:b2:a0:72:42:84:33:95:ff:
aa:52:10:28:a3:34:08:c4:6c:d2:99:59:c6:38:9b:63:b0:9d:
cf:9b:6d:50:43:27:06:95:ba:ef:bf:99:07:31:c0:0c:52:ee:
5f:26:d8:7a:3d:21:e0:2b:f1:89:23:41:6f:3c:9d:87:97:e8:
87:00:1d:f4:39:ca:d5:2d:c7:3d:d8:21:1c:93:49:13:89:ae:
ce:15:b6:26:4e:b6:a5:4b:7b:68:5d:5a:76:02:68:5e:89:4c:
58:9e:a4:d1:90:3b:df:b2:05:0e:55:9f:ac:3d:78:cf:5f:9d:
6e:f2:99:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:45 2026 by rpki-client