Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/mijO3rBDux071bgVII2VGtelaWs.roa
File: mijO3rBDux071bgVII2VGtelaWs.roa (raw, json)
Hash identifier: c57AFpXKCuOBDWXAgwOZwYrMLNV93F0DNDkv38YCADA=
Subject key identifier: 9A:28:CE:DE:B0:43:BB:1D:3B:D5:B8:15:20:8D:95:1A:D7:A5:69:6B
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 01A03E383EA847D5EF3B33ED0A53F79E8358
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/mijO3rBDux071bgVII2VGtelaWs.roa
Signing time: Wed 26 Aug 2026 13:17:48 +0000
ROA not before: Wed 26 Aug 2026 13:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200107
IP address blocks: 37.203.128.0/23 maxlen: 24
37.203.128.0/24 maxlen: 24
37.203.129.0/24 maxlen: 24
77.74.176.0/23 maxlen: 24
77.74.176.0/24 maxlen: 24
77.74.177.0/24 maxlen: 24
77.74.178.0/23 maxlen: 24
77.74.178.0/24 maxlen: 24
77.74.180.0/24 maxlen: 24
77.74.181.0/24 maxlen: 24
77.74.182.0/24 maxlen: 24
77.74.183.0/24 maxlen: 24
79.133.168.0/22 maxlen: 24
79.133.168.0/23 maxlen: 23
79.133.168.0/24 maxlen: 24
79.133.169.0/24 maxlen: 24
79.133.170.0/23 maxlen: 23
79.133.170.0/24 maxlen: 24
79.133.171.0/24 maxlen: 24
80.173.148.0/22 maxlen: 24
82.202.184.0/23 maxlen: 23
82.202.184.0/24 maxlen: 24
82.202.185.0/24 maxlen: 24
91.198.230.0/24 maxlen: 24
93.159.226.0/24 maxlen: 24
93.159.227.0/24 maxlen: 24
93.159.228.0/23 maxlen: 24
93.159.228.0/24 maxlen: 24
93.159.230.0/23 maxlen: 23
185.54.220.0/24 maxlen: 24
185.54.221.0/24 maxlen: 24
185.54.222.0/24 maxlen: 24
185.54.223.0/24 maxlen: 24
185.85.12.0/24 maxlen: 24
185.85.14.0/24 maxlen: 24
185.85.15.0/24 maxlen: 24
185.201.0.0/22 maxlen: 24
185.201.0.0/24 maxlen: 24
185.201.1.0/24 maxlen: 24
185.201.2.0/24 maxlen: 24
185.201.3.0/24 maxlen: 24
193.238.132.0/23 maxlen: 24
193.238.133.0/24 maxlen: 24
195.64.114.0/24 maxlen: 24
195.128.246.0/23 maxlen: 24
195.128.246.0/24 maxlen: 24
195.128.247.0/24 maxlen: 24
2a03:2480:68::/48 maxlen: 48
2a03:2480:69::/48 maxlen: 48
2a03:2480:70::/48 maxlen: 48
2a03:2480:80::/48 maxlen: 48
2a03:2480:8000::/48 maxlen: 48
2a03:2480:8010::/48 maxlen: 48
2a03:2480:8012::/47 maxlen: 48
2a03:2480:8012::/48 maxlen: 48
2a03:2480:8013::/48 maxlen: 48
2a03:2480:8020::/48 maxlen: 48
2a03:2480:8021::/48 maxlen: 48
2a03:2480:8022::/48 maxlen: 48
2a03:2480:8023::/48 maxlen: 48
2a03:2480:8025::/48 maxlen: 48
2a03:2480:8026::/48 maxlen: 48
2a03:2480:8027::/48 maxlen: 48
2a03:2480:8028::/48 maxlen: 48
2a03:2480:8029::/48 maxlen: 48
2a03:2480:802a::/48 maxlen: 48
2a03:2480:802b::/48 maxlen: 48
2a03:2480:802d::/48 maxlen: 48
2a03:2480:802e::/48 maxlen: 48
2a03:2480:802f::/48 maxlen: 48
2a03:2480:8030::/48 maxlen: 48
2a03:2480:8031::/48 maxlen: 48
2a03:2480:8032::/48 maxlen: 48
2a03:2480:8033::/48 maxlen: 48
2a03:2480:8034::/47 maxlen: 48
2a03:2480:8034::/48 maxlen: 48
2a03:2480:8035::/48 maxlen: 48
2a03:2480:8036::/47 maxlen: 48
2a03:2480:8036::/48 maxlen: 48
2a03:2480:8037::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:38:3e:a8:47:d5:ef:3b:33:ed:0a:53:f7:9e:83:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Aug 26 13:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a28cedeb043bb1d3bd5b815208d951ad7a5696b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:d2:a5:99:89:62:44:a3:f8:2f:99:b2:f7:
11:9d:b2:d9:7f:dc:8b:d0:76:dc:00:12:5f:dd:ca:
f4:13:06:75:ea:44:38:11:07:79:1f:92:7e:ea:a3:
a8:a3:a7:67:0c:d5:e6:ff:a7:cb:c5:fe:73:3f:86:
9b:22:68:88:4f:7b:e2:ac:1d:74:d2:16:5e:b6:3a:
c7:b6:34:a4:ac:08:f8:c9:36:cb:bb:9a:98:98:66:
dd:23:f9:c8:69:f5:40:54:88:5c:b1:bf:c2:ae:d2:
fc:ec:ec:15:f0:ff:8f:2a:f0:59:f9:5c:40:ed:a3:
35:00:46:99:18:7e:db:b5:d2:76:e2:3f:25:5f:53:
50:15:a1:e4:30:f8:8a:2d:ee:5f:00:68:10:d6:d2:
4b:fa:39:25:8b:d6:15:5f:42:f1:5d:be:5a:4f:4c:
8b:b4:f8:3b:72:a2:5f:f0:f1:52:70:6a:1b:d5:a2:
db:43:91:00:56:a6:aa:01:29:2d:8d:3d:27:40:f2:
93:7f:1c:4c:b4:d5:22:a8:1d:f8:81:08:b6:91:d6:
62:38:1f:32:7e:2a:61:3e:40:66:4e:b2:3e:7c:cf:
23:e8:45:3b:84:ef:25:6d:c5:7e:11:00:06:34:82:
07:22:25:aa:fc:05:8a:aa:9c:48:83:c0:b1:cc:57:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:28:CE:DE:B0:43:BB:1D:3B:D5:B8:15:20:8D:95:1A:D7:A5:69:6B
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/mijO3rBDux071bgVII2VGtelaWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.128.0/23
77.74.176.0/21
79.133.168.0/22
80.173.148.0/22
82.202.184.0/23
91.198.230.0/24
93.159.226.0-93.159.231.255
185.54.220.0/22
185.85.12.0/24
185.85.14.0/23
185.201.0.0/22
193.238.132.0/23
195.64.114.0/24
195.128.246.0/23
IPv6:
2a03:2480:68::/47
2a03:2480:70::/48
2a03:2480:80::/48
2a03:2480:8000::/48
2a03:2480:8010::/48
2a03:2480:8012::/47
2a03:2480:8020::/46
2a03:2480:8025::-2a03:2480:802b:ffff:ffff:ffff:ffff:ffff
2a03:2480:802d::-2a03:2480:8037:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
76:60:c1:ee:11:26:00:25:2a:89:82:9a:ab:88:23:b4:04:b8:
f2:b1:69:26:fc:93:d4:e3:53:2b:e4:e8:2d:aa:16:bb:2f:8d:
3e:a3:e0:91:71:99:b4:ef:87:a0:f8:b8:3f:a7:df:f0:85:be:
bd:35:fa:68:b9:4a:b7:aa:04:ec:57:8a:14:2d:c3:3d:07:ba:
d3:9a:f3:23:d3:70:2f:bd:df:76:ab:52:0e:4d:b7:22:22:ca:
df:de:e8:2b:1a:40:60:84:c5:3d:e2:89:cc:26:33:1b:df:1b:
8b:a2:ea:0d:e1:89:1d:fb:a2:3f:ba:7f:a9:c4:db:07:8e:1d:
c8:bf:89:95:34:fb:5c:ba:a7:bf:2c:4b:b4:ce:cc:4c:0d:34:
a7:bd:ec:e5:10:e3:c4:4d:1e:61:87:fe:a2:c0:27:e9:25:c7:
ef:13:77:d2:24:69:5a:18:46:bd:15:37:2e:7f:df:51:3c:06:
48:fc:ee:57:0a:10:c4:26:76:cb:df:94:4d:fa:1e:01:7a:07:
f9:18:90:67:c9:b6:22:a8:61:32:e6:b2:b9:d1:18:ec:f1:ad:
4d:e7:48:9b:90:32:2e:ae:c1:ab:3b:a9:d1:b4:e9:56:05:5e:
a6:df:4d:09:cc:dc:b9:8f:5b:de:96:b1:e3:b4:fd:43:36:fe:
38:53:49:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:38 2026 by rpki-client