Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MFpgE9h4kXwP9IJ22kMpPi3L4nk.roa
File: MFpgE9h4kXwP9IJ22kMpPi3L4nk.roa (raw, json)
Hash identifier: u+QqCb8In6UOFRUMYfs7waNZNG8kYhq8RxEJcXzoIPI=
Subject key identifier: 30:5A:60:13:D8:78:91:7C:0F:F4:82:76:DA:43:29:3E:2D:CB:E2:79
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1CF19A11B86003CCEA896D6B0716FCF90
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MFpgE9h4kXwP9IJ22kMpPi3L4nk.roa
Signing time: Thu 12 Nov 2026 09:32:05 +0000
ROA not before: Thu 12 Nov 2026 09:32:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218721
IP address blocks: 9.247.157.0/24 maxlen: 24
9.247.229.0/24 maxlen: 24
78.17.19.0/24 maxlen: 24
78.17.115.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.125.113.0/24 maxlen: 24
89.125.120.0/24 maxlen: 24
89.125.126.0/24 maxlen: 24
89.125.129.0/24 maxlen: 24
89.125.140.0/24 maxlen: 24
89.125.166.0/24 maxlen: 24
89.125.168.0/24 maxlen: 24
89.125.169.0/24 maxlen: 24
89.125.237.0/24 maxlen: 24
104.143.215.0/24 maxlen: 24
104.143.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:19:a1:1b:86:00:3c:ce:a8:96:d6:b0:71:6f:cf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 12 09:32:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=305a6013d878917c0ff48276da43293e2dcbe279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:cb:26:23:de:f2:d2:65:83:d8:9f:60:64:
02:cd:58:df:c9:36:8b:ff:e5:14:e7:69:49:b8:33:
be:60:ba:c5:9e:bd:46:fb:86:d4:b8:bb:a3:15:cd:
81:34:54:74:8d:80:47:ee:f3:20:9e:79:bb:15:18:
38:a4:f4:e9:05:49:8d:e3:0d:00:5f:57:d5:1d:aa:
dd:80:17:16:42:e7:a0:46:29:76:8a:d8:13:93:72:
c5:7e:16:6e:b5:61:6a:32:41:de:28:84:cb:7c:bd:
8d:fd:16:d6:22:ac:ae:9d:7d:6f:1f:97:96:7d:f1:
10:eb:e5:47:30:2b:53:96:b0:ad:9e:cc:73:ba:1c:
53:bb:65:82:a8:75:8a:1a:9c:eb:e6:14:f1:90:0d:
a8:ff:3a:d9:3b:40:1f:9a:29:3a:b3:3e:f3:df:5f:
e2:7f:4b:33:89:56:6c:9c:c3:db:9e:1c:13:af:8c:
82:e7:1d:18:43:1a:e6:be:b7:5b:d4:56:60:46:29:
9e:d0:2c:32:25:c0:54:92:0d:f8:80:89:36:1a:99:
6e:2b:19:e7:94:a9:9f:d6:1a:35:0f:c3:57:3d:94:
77:69:40:14:30:49:08:31:d8:81:83:f3:a8:04:70:
04:20:0c:2d:6e:e0:35:20:70:06:24:53:e9:f8:6d:
27:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5A:60:13:D8:78:91:7C:0F:F4:82:76:DA:43:29:3E:2D:CB:E2:79
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MFpgE9h4kXwP9IJ22kMpPi3L4nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.157.0/24
9.247.229.0/24
78.17.19.0/24
78.17.115.0/24
89.37.192.0/24
89.125.113.0/24
89.125.120.0/24
89.125.126.0/24
89.125.129.0/24
89.125.140.0/24
89.125.166.0/24
89.125.168.0/23
89.125.237.0/24
104.143.215.0/24
104.143.218.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f5:22:5a:72:5f:30:84:c6:4a:8b:da:25:68:c0:e0:4a:67:
5f:6f:cd:3e:23:88:cd:b2:c6:73:1f:ef:cb:bb:9a:0c:df:82:
d6:33:7a:e3:7f:69:47:b5:59:93:5c:ee:58:2f:62:df:c0:d7:
d7:0a:73:59:47:a4:4f:3a:dc:c5:17:90:b7:90:98:73:ad:e7:
89:6d:63:95:c8:ae:e9:26:10:6f:bc:0a:09:3a:62:46:83:d6:
3a:03:88:f5:44:13:77:70:9a:c8:86:9e:2b:d3:c1:98:a6:76:
70:1e:30:41:6b:8f:5a:2a:45:55:6e:a6:a2:a4:f0:7a:83:b2:
e8:09:03:14:bf:78:26:86:f3:9a:3b:15:e0:3a:bc:bb:c6:ee:
4f:9f:a7:99:71:06:41:52:a7:6a:0e:59:fe:ac:50:e7:4c:1d:
4a:0e:58:03:60:6e:de:34:f9:2a:68:f5:e2:cc:c6:4c:80:5f:
2c:f7:45:bc:e7:aa:0d:1f:89:88:c9:bf:96:85:7d:90:af:e0:
69:18:af:f5:eb:db:43:3c:11:d9:7d:94:37:62:7a:c1:bb:78:
6d:46:af:b8:ed:8a:82:b6:4d:8f:a7:6f:76:40:f2:44:30:ca:
ce:de:66:cb:30:04:a1:a7:6e:e1:28:6b:43:d4:56:52:ea:7a:
16:51:c7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:30:38 2026 by rpki-client