Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/mRzvmC1aHGh_d8mo-JwJurED3EM.roa
File: mRzvmC1aHGh_d8mo-JwJurED3EM.roa (raw, json)
Hash identifier: aWOSV+LdM92bHZ1nT4erzPsOFlC7zRAjulRxerR5wEc=
Subject key identifier: 99:1C:EF:98:2D:5A:1C:68:7F:77:C9:A8:F8:9C:09:BA:B1:03:DC:43
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 019DF7F095A50AC6E500F8715E1DE18F90C7
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/mRzvmC1aHGh_d8mo-JwJurED3EM.roa
Signing time: Tue 05 May 2026 11:40:32 +0000
ROA not before: Tue 05 May 2026 11:40:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58172
IP address blocks: 45.133.232.0/23 maxlen: 23
45.135.131.0/24 maxlen: 24
91.213.49.0/24 maxlen: 24
94.131.60.0/24 maxlen: 24
94.131.61.0/24 maxlen: 24
94.131.62.0/24 maxlen: 24
94.131.63.0/24 maxlen: 24
94.131.224.0/24 maxlen: 24
94.131.225.0/24 maxlen: 24
94.131.226.0/23 maxlen: 23
94.131.226.0/24 maxlen: 24
94.131.227.0/24 maxlen: 24
94.131.228.0/24 maxlen: 24
94.131.229.0/24 maxlen: 24
94.131.230.0/24 maxlen: 24
94.131.231.0/24 maxlen: 24
94.131.232.0/24 maxlen: 24
94.131.233.0/24 maxlen: 24
94.131.234.0/23 maxlen: 23
94.131.234.0/24 maxlen: 24
94.131.235.0/24 maxlen: 24
94.131.236.0/23 maxlen: 23
94.131.236.0/24 maxlen: 24
94.131.237.0/24 maxlen: 24
94.131.239.0/24 maxlen: 24
153.56.200.0/24 maxlen: 24
153.56.201.0/24 maxlen: 24
153.56.202.0/24 maxlen: 24
153.56.203.0/24 maxlen: 24
153.56.204.0/24 maxlen: 24
153.56.205.0/24 maxlen: 24
157.22.232.0/24 maxlen: 24
157.22.233.0/24 maxlen: 24
157.22.237.0/24 maxlen: 24
157.22.238.0/24 maxlen: 24
157.22.239.0/24 maxlen: 24
185.191.212.0/24 maxlen: 24
185.210.139.0/24 maxlen: 24
193.148.60.0/24 maxlen: 24
194.35.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:f0:95:a5:0a:c6:e5:00:f8:71:5e:1d:e1:8f:90:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: May 5 11:40:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=991cef982d5a1c687f77c9a8f89c09bab103dc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:54:22:fb:4a:91:b2:9b:64:fb:7f:cd:9b:
6d:de:bf:90:0a:08:e4:81:10:a1:e9:a8:0a:7f:96:
4f:40:26:41:f4:bc:f6:aa:9e:93:06:b7:3d:0b:c6:
62:a2:d9:cd:62:ff:11:91:29:9a:1d:66:59:67:fa:
84:d9:f7:e0:bf:28:a1:91:df:fe:14:3d:1b:11:8f:
0d:c7:f4:6e:aa:6c:de:c4:21:41:0d:cb:de:ac:14:
26:ff:ba:0e:2f:40:b2:9c:63:5b:50:1a:11:a0:57:
65:b8:fd:71:58:32:36:15:8c:e3:6d:d2:b3:97:00:
8f:5a:16:6e:3d:6f:28:49:ed:b2:ac:3c:41:ee:9e:
0f:73:ac:5d:02:1b:6b:d6:8b:df:32:43:79:11:ca:
7c:55:0f:89:61:06:95:e6:47:ab:11:2c:06:c2:c5:
39:33:5c:e5:55:38:01:09:0d:9e:f2:a2:da:1f:39:
21:57:79:b1:17:fd:5b:3c:ba:da:c6:55:4b:06:e8:
22:03:cd:a9:bb:57:64:80:92:8b:6b:23:91:59:84:
2e:06:99:0f:9c:7b:53:bc:26:8e:85:09:60:74:a1:
b9:10:f1:2a:6e:e9:9d:fb:02:6c:a4:7c:79:a3:c9:
b7:24:9e:b5:23:43:4d:1d:78:c0:86:43:e4:ee:2f:
30:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1C:EF:98:2D:5A:1C:68:7F:77:C9:A8:F8:9C:09:BA:B1:03:DC:43
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/mRzvmC1aHGh_d8mo-JwJurED3EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.232.0/23
45.135.131.0/24
91.213.49.0/24
94.131.60.0/22
94.131.224.0-94.131.237.255
94.131.239.0/24
153.56.200.0-153.56.205.255
157.22.232.0/23
157.22.237.0-157.22.239.255
185.191.212.0/24
185.210.139.0/24
193.148.60.0/24
194.35.124.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a9:13:bb:a2:1a:34:4f:8f:a1:7e:09:c5:e8:89:7d:ec:b5:
92:fd:fd:fa:52:db:1a:b0:ac:8b:40:8e:8a:77:11:ab:b4:d7:
dc:0d:78:a3:bb:b6:5a:48:93:93:74:ef:1c:2d:43:1d:6f:19:
18:59:07:44:b2:c6:be:99:1d:c5:ed:36:3c:29:8c:6a:32:48:
51:b6:08:4f:8f:65:15:51:c8:da:37:d1:96:75:99:52:97:f3:
b4:78:89:b4:15:3f:37:a5:23:c4:8c:6e:b8:d8:44:cd:1f:dd:
da:ed:ce:fe:07:35:bf:12:fe:20:2b:83:86:09:99:df:5a:47:
d0:06:39:9a:6f:3b:27:d3:4e:eb:f2:dc:e3:a7:90:f7:2e:cd:
e4:e1:97:f5:f1:83:82:4b:a9:08:99:71:87:cb:13:e9:61:70:
b3:fb:63:88:3f:09:47:df:6a:a7:8d:17:6f:84:19:3a:49:1f:
37:80:ba:24:c2:77:3c:ef:c4:af:61:38:0f:73:c8:5b:62:08:
99:d3:f2:84:3c:24:aa:0a:44:99:6c:41:1f:af:9c:15:6c:a5:
bc:a7:bc:50:78:1d:42:2d:79:de:57:58:73:33:fd:67:7a:ac:
d6:62:c0:74:08:b8:0a:5b:43:39:f8:29:89:6f:5a:c0:ab:07:
5d:8d:5d:69
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAZ338JWlCsblAPhxXh3hj5DHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2M2NjVlNTFjYzRjYjVjYWYwNWI4Mjk0ODQzZTI3MzNh
MTNkZWUwHhcNMjYwNTA1MTE0MDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTFjZWY5ODJkNWExYzY4N2Y3N2M5YThmODljMDliYWIxMDNkYzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnANUIvtKkbKbZPt/zZtt3r+QCgjk
gRCh6agKf5ZPQCZB9Lz2qp6TBrc9C8ZiotnNYv8RkSmaHWZZZ/qE2ffgvyihkd/+
FD0bEY8Nx/RuqmzexCFBDcverBQm/7oOL0CynGNbUBoRoFdluP1xWDI2FYzjbdKz
lwCPWhZuPW8oSe2yrDxB7p4Pc6xdAhtr1ovfMkN5Ecp8VQ+JYQaV5kerESwGwsU5
M1zlVTgBCQ2e8qLaHzkhV3mxF/1bPLraxlVLBugiA82pu1dkgJKLayORWYQuBpkP
nHtTvCaOhQlgdKG5EPEqbumd+wJspHx5o8m3JJ61I0NNHXjAhkPk7i8wZQIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFJkc75gtWhxof3fJqPicCbqxA9xDMB8GA1UdIwQY
MBaAFEw8Zl5RzEy1yvBbgpSEPiczoT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUt
MWE2NWI5MWJlZTU4LzEvbVJ6dm1DMWFIR2hfZDhtby1Kd0p1ckVEM0VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUtMWE2NWI5MWJlZTU4
LzEvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQBLYXoAwQA
LYeDAwQAW9UxAwQCXoM8MAwDBAVeg+ADBAFeg+wDBABeg+8wDAMEA5k4yAMEAZk4
zAMEAZ0W6DAMAwQAnRbtAwQEnRbgAwQAub/UAwQAudKLAwQAwZQ8AwQAwiN8MA0G
CSqGSIb3DQEBCwUAA4IBAQApqRO7oho0T4+hfgnF6Il97LWS/f36UtsasKyLQI6K
dxGrtNfcDXiju7ZaSJOTdO8cLUMdbxkYWQdEssa+mR3F7TY8KYxqMkhRtghPj2UV
UcjaN9GWdZlSl/O0eIm0FT83pSPEjG642ETNH93a7c7+BzW/Ev4gK4OGCZnfWkfQ
Bjmabzsn007r8tzjp5D3Ls3k4Zf18YOCS6kImXGHyxPpYXCz+2OIPwlH32qnjRdv
hBk6SR83gLokwnc878SvYTgPc8hbYgiZ0/KEPCSqCkSZbEEfr5wVbKW8p7xQeB1C
LXneV1hzM/1neqzWYsB0CLgKW0M5+CmJb1rAqwddjV1p
-----END CERTIFICATE-----
Generated at Wed May 13 02:33:54 2026 by rpki-client