Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/mYpQfCwGUFa_N3gCiTs-pRnvFpc.roa
File: mYpQfCwGUFa_N3gCiTs-pRnvFpc.roa (raw, json)
Hash identifier: gQqVTcaiR3QtkZ8CYSUcJShg6d7Q858NjMwMx9HDxMo=
Subject key identifier: 99:8A:50:7C:2C:06:50:56:BF:37:78:02:89:3B:3E:A5:19:EF:16:97
Certificate issuer: /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial: 019D1F41CD530708A1C9AC77B5B9D5124988
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/mYpQfCwGUFa_N3gCiTs-pRnvFpc.roa
Signing time: Tue 24 Mar 2026 09:51:39 +0000
ROA not before: Tue 24 Mar 2026 09:51:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30823
IP address blocks: 45.11.16.0/22 maxlen: 22
45.11.19.0/24 maxlen: 24
45.138.172.0/22 maxlen: 22
45.138.172.0/24 maxlen: 24
45.138.173.0/24 maxlen: 24
45.138.174.0/24 maxlen: 24
45.138.175.0/24 maxlen: 24
45.147.228.0/22 maxlen: 22
45.153.240.0/22 maxlen: 22
91.200.100.0/22 maxlen: 22
152.89.244.0/22 maxlen: 22
152.89.244.0/24 maxlen: 24
152.89.247.0/24 maxlen: 24
160.20.144.0/24 maxlen: 24
160.20.146.0/24 maxlen: 24
160.20.147.0/24 maxlen: 24
2a09:38c0::/29 maxlen: 48
2a09:38c0:aaaa::/48 maxlen: 48
2a0c:6a40::/29 maxlen: 29
2a0c:6a41:c12::/48 maxlen: 48
2a0c:6a41:f230::/48 maxlen: 48
2a0d:4cc0::/29 maxlen: 29
2a0e:5100::/29 maxlen: 29
2a0e:b540::/29 maxlen: 29
2a0e:b540:ff03::/48 maxlen: 48
2a10:9c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:41:cd:53:07:08:a1:c9:ac:77:b5:b9:d5:12:49:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Validity
Not Before: Mar 24 09:51:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=998a507c2c065056bf377802893b3ea519ef1697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:dd:2d:fb:89:6d:a2:a9:7d:79:32:6a:6d:
f1:52:a4:cd:f3:8c:92:b7:24:07:8f:2e:24:fb:5f:
56:87:1e:4a:70:5e:61:33:a9:6b:81:59:33:a7:82:
20:dc:6c:c1:dd:98:fa:fe:8c:65:5d:d3:c6:89:d8:
16:15:91:c4:60:6f:16:c7:93:d1:59:4f:30:ab:2c:
d1:c9:d0:4d:4c:89:ae:ac:55:87:d5:98:3c:b7:aa:
09:ca:3a:ca:4d:64:68:3a:2a:34:1d:d5:4c:21:19:
63:0a:6f:30:ec:86:55:e8:2b:50:34:7d:b8:70:dc:
ba:1b:80:00:e4:84:cf:d5:29:a4:5b:23:ef:63:37:
cd:65:6c:ec:28:9c:46:a2:fb:7f:ad:5b:af:f4:06:
30:e6:66:9d:ae:a9:35:ff:87:24:6a:a9:0e:24:de:
5a:4a:8c:b5:4f:2a:1b:6b:8a:eb:1a:18:19:76:4f:
1e:00:a5:ab:ee:bf:46:3b:1c:c1:80:d1:e4:9a:61:
db:ed:9f:ce:12:69:60:d3:d8:b1:2f:56:59:26:c1:
17:c8:aa:50:8b:98:3e:92:97:8e:34:1f:68:90:9f:
c1:e6:3d:be:8f:3d:84:67:b0:c1:a3:85:fc:d1:3a:
bb:c6:d0:92:34:a8:84:ee:42:1a:87:b9:e2:bd:dc:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8A:50:7C:2C:06:50:56:BF:37:78:02:89:3B:3E:A5:19:EF:16:97
X509v3 Authority Key Identifier:
keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/mYpQfCwGUFa_N3gCiTs-pRnvFpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.16.0/22
45.138.172.0/22
45.147.228.0/22
45.153.240.0/22
91.200.100.0/22
152.89.244.0/22
160.20.144.0/24
160.20.146.0/23
IPv6:
2a09:38c0::/29
2a0c:6a40::/29
2a0d:4cc0::/29
2a0e:5100::/29
2a0e:b540::/29
2a10:9c00::/29
Signature Algorithm: sha256WithRSAEncryption
14:66:70:b2:f1:3b:d4:0e:04:2e:99:d7:29:69:b4:4c:5c:51:
e9:bd:87:ee:3c:fd:3e:aa:46:25:b5:7a:ca:32:33:c1:69:0d:
e1:fc:a4:db:4a:7d:96:9f:ac:62:16:d6:ab:8b:18:3c:c8:e9:
db:c7:84:4b:a8:57:25:2b:db:fa:5d:89:0f:d3:9f:50:d4:a6:
5c:f9:07:31:1b:01:35:c3:7e:87:1e:30:12:11:79:cf:97:ba:
9f:13:82:2c:77:17:3e:92:b0:29:b3:df:d0:ff:f3:92:9a:e4:
a7:73:a9:c4:7d:20:a0:00:db:52:3f:f0:d9:b4:47:61:67:b2:
3d:00:40:4b:45:fd:d6:40:72:08:48:a9:97:2a:45:c5:b3:c5:
2a:63:83:07:d4:73:2f:27:c2:0c:81:e6:92:86:df:26:ae:90:
8c:41:24:bb:ff:c3:59:c9:2e:b6:e7:80:83:ec:a6:50:11:6a:
c1:49:46:99:2e:7f:ef:03:31:05:32:9d:cb:db:18:de:ca:7a:
53:97:b0:93:dd:d6:db:b1:8e:57:23:a1:27:b0:9b:46:9d:aa:
17:cf:f2:47:c3:22:3e:77:ad:2d:b2:36:ef:22:a2:a4:85:92:
3d:e3:7a:e1:3b:27:76:17:47:ff:7f:43:94:b7:2f:51:86:a2:
76:93:e1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:22 2026 by rpki-client