Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/MVqGstRqvT-YowTHw8TITZTgPGM.roa
File: MVqGstRqvT-YowTHw8TITZTgPGM.roa (raw, json)
Hash identifier: ThTvEwZga99xtCX2NPVf5h3chD/MozOOE+zxnQX4tvI=
Subject key identifier: 31:5A:86:B2:D4:6A:BD:3F:98:A3:04:C7:C3:C4:C8:4D:94:E0:3C:63
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 019F5127B299CB5376C8DB2542DC71B27A05
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/MVqGstRqvT-YowTHw8TITZTgPGM.roa
Signing time: Sat 11 Jul 2026 12:29:43 +0000
ROA not before: Sat 11 Jul 2026 12:29:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.128.0/22 maxlen: 22
5.201.132.0/22 maxlen: 22
5.201.136.0/22 maxlen: 22
5.201.138.0/24 maxlen: 24
5.201.140.0/22 maxlen: 22
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/22 maxlen: 22
5.201.144.0/23 maxlen: 23
5.201.148.0/22 maxlen: 22
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.163.0/24 maxlen: 24
5.201.164.0/22 maxlen: 22
5.201.168.0/22 maxlen: 22
5.201.172.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
5.201.174.240/30 maxlen: 30
5.201.175.0/24 maxlen: 24
5.201.176.0/22 maxlen: 22
5.201.180.0/22 maxlen: 22
5.201.184.0/22 maxlen: 22
5.201.188.0/22 maxlen: 22
37.156.16.0/21 maxlen: 21
37.156.16.0/22 maxlen: 22
37.156.20.0/22 maxlen: 22
37.156.24.0/22 maxlen: 22
37.156.28.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
45.83.12.0/22 maxlen: 22
45.95.88.0/22 maxlen: 22
45.143.252.0/22 maxlen: 22
45.248.164.0/22 maxlen: 22
46.36.96.0/20 maxlen: 20
46.36.97.0/24 maxlen: 24
46.36.100.0/23 maxlen: 23
46.36.100.0/24 maxlen: 24
46.36.101.0/24 maxlen: 24
46.36.102.0/23 maxlen: 23
46.36.102.0/24 maxlen: 24
46.36.103.0/24 maxlen: 24
46.36.105.0/24 maxlen: 24
46.36.106.0/23 maxlen: 23
46.36.106.0/24 maxlen: 24
80.94.80.0/23 maxlen: 23
89.37.0.0/20 maxlen: 20
89.37.0.0/22 maxlen: 22
89.37.0.0/24 maxlen: 24
89.37.4.0/22 maxlen: 22
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.9.0/24 maxlen: 24
89.37.12.0/22 maxlen: 22
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.40.35.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.0.0/22 maxlen: 22
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/22 maxlen: 22
89.43.12.0/23 maxlen: 23
91.209.183.0/24 maxlen: 24
91.209.184.0/24 maxlen: 24
91.239.59.0/24 maxlen: 24
92.114.16.0/20 maxlen: 24
92.114.20.0/22 maxlen: 22
92.114.20.0/23 maxlen: 23
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.24.0/22 maxlen: 22
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.128.0/22 maxlen: 22
94.101.132.0/22 maxlen: 22
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/22 maxlen: 22
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
103.111.69.0/24 maxlen: 24
103.111.71.0/24 maxlen: 24
103.132.228.0/23 maxlen: 23
103.132.228.0/24 maxlen: 24
103.132.229.0/24 maxlen: 24
103.140.128.0/23 maxlen: 23
103.217.124.0/22 maxlen: 22
176.126.223.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.49.106.0/23 maxlen: 23
185.49.106.0/24 maxlen: 24
185.49.107.0/24 maxlen: 24
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
185.255.98.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.64.0/22 maxlen: 22
188.213.64.0/24 maxlen: 24
188.213.68.0/22 maxlen: 22
188.213.71.0/24 maxlen: 24
188.213.72.0/22 maxlen: 22
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
193.30.30.0/24 maxlen: 24
193.46.214.0/24 maxlen: 24
194.180.238.0/24 maxlen: 24
194.242.22.0/24 maxlen: 24
195.149.127.0/24 maxlen: 24
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:51:27:b2:99:cb:53:76:c8:db:25:42:dc:71:b2:7a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jul 11 12:29:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=315a86b2d46abd3f98a304c7c3c4c84d94e03c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:8a:31:5c:02:0e:de:f3:45:8c:87:d5:33:
f5:47:ba:47:6a:78:0a:9a:14:92:70:a6:44:95:99:
f8:39:95:9c:a3:dc:27:b9:f0:f0:79:72:68:ab:73:
b2:a9:ce:13:b7:29:98:65:ae:c3:b8:22:88:e6:cf:
a8:2a:80:2c:f3:f4:21:18:54:37:de:64:dc:c9:66:
1a:29:ed:23:80:fe:f2:5c:30:1b:cb:c1:f1:71:f6:
a5:7a:87:33:6d:b4:2a:4f:d8:f5:52:2b:ae:fc:df:
40:11:1d:71:f8:3e:d8:b0:d7:8d:d0:61:29:73:f6:
6a:0c:2c:3c:8e:fd:54:cb:93:06:3b:de:a0:0e:8b:
9a:b7:5d:f0:9d:95:6f:ab:01:77:34:e3:a2:61:ac:
97:ee:42:89:2b:11:a4:4a:58:11:21:ee:5a:7e:b2:
e0:88:4e:39:4d:dd:b3:d8:3b:e1:3a:b2:d5:4d:a8:
11:cb:d6:dd:ba:65:2b:93:6f:37:29:77:be:9a:37:
e5:2e:37:3d:e2:09:39:52:6f:a8:3c:dd:34:6b:aa:
50:99:7d:ab:72:71:35:59:31:06:89:6e:e8:1e:b2:
7f:4e:b9:4f:5a:c8:ea:6f:bc:6f:da:af:13:28:ed:
d3:8a:2d:7f:2c:b6:ea:da:d0:c1:c2:e8:7f:bb:42:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5A:86:B2:D4:6A:BD:3F:98:A3:04:C7:C3:C4:C8:4D:94:E0:3C:63
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/MVqGstRqvT-YowTHw8TITZTgPGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0/20
45.83.12.0/22
45.95.88.0/22
45.143.252.0/22
45.248.164.0/22
46.36.96.0/20
80.94.80.0/23
89.37.0.0/20
89.40.35.0/24
89.43.0.0/20
91.209.183.0-91.209.184.255
91.239.59.0/24
92.114.16.0/20
94.101.128.0/20
103.111.69.0/24
103.111.71.0/24
103.132.228.0/23
103.140.128.0/23
103.217.124.0/22
176.126.223.0/24
185.22.30.0/23
185.49.106.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
185.255.98.0/23
188.213.64.0/20
193.30.30.0/24
193.46.214.0/24
194.180.238.0/24
194.242.22.0/24
195.149.127.0/24
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:10:1c:45:66:5a:2e:cf:c2:74:27:67:84:da:f1:33:dc:9e:
8b:b9:c7:a4:3b:fe:a7:a5:43:4c:8f:37:71:b4:89:47:8a:70:
c0:21:9b:ce:2e:74:dd:f6:4a:7e:0c:14:d3:b8:a6:17:e6:86:
bf:1d:bd:f4:c6:d2:5c:92:ea:e6:a5:7d:ad:e2:c9:92:84:9e:
ec:02:a9:50:d6:fc:c9:68:a1:03:57:89:65:6e:ea:c2:08:fb:
fd:28:20:7a:6e:27:39:fa:f2:8c:42:c4:1c:e9:47:81:a7:79:
cb:df:63:e0:06:6e:7c:de:30:44:0d:f1:16:63:4a:33:c8:e1:
bb:5a:4b:88:b6:6a:cc:c1:ca:8f:c1:a7:80:7b:4b:23:bb:3c:
cf:37:d7:3b:97:24:4f:f9:ae:56:e3:88:c4:78:50:58:0a:46:
cf:c0:85:ed:91:65:8b:95:25:18:d1:1f:d5:5b:c6:1e:89:54:
cc:b5:52:87:a3:a6:2b:88:86:91:62:13:a0:05:ff:70:d4:72:
c4:63:9b:24:15:33:ac:3e:98:0d:ce:06:19:48:3d:20:f6:21:
2c:aa:ea:2f:f4:39:76:d4:13:c9:6f:48:d4:e7:70:82:36:fd:
36:a3:96:97:81:1e:7e:8a:ca:31:52:0a:ec:0f:c5:06:af:aa:
8b:21:27:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:25:50 2026 by rpki-client