Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/MCr3Mjcw9n6i7ZvjoVD4MAvGkCQ.roa
File: MCr3Mjcw9n6i7ZvjoVD4MAvGkCQ.roa (raw, json)
Hash identifier: 0/ex2ZON5AKebTWOX4WtXzZjVb3FrIFKpJ4pk3G3YFM=
Subject key identifier: 30:2A:F7:32:37:30:F6:7E:A2:ED:9B:E3:A1:50:F8:30:0B:C6:90:24
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 01A04206F677DBD8DE59622592B774DE8509
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/MCr3Mjcw9n6i7ZvjoVD4MAvGkCQ.roa
Signing time: Thu 27 Aug 2026 07:02:27 +0000
ROA not before: Thu 27 Aug 2026 07:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34771
IP address blocks: 109.229.224.0/24 maxlen: 24
109.229.225.0/24 maxlen: 24
109.229.226.0/24 maxlen: 24
109.229.227.0/24 maxlen: 24
109.229.228.0/24 maxlen: 24
109.229.229.0/24 maxlen: 24
109.229.230.0/24 maxlen: 24
109.229.231.0/24 maxlen: 24
109.229.232.0/24 maxlen: 24
109.229.233.0/24 maxlen: 24
109.229.234.0/24 maxlen: 24
109.229.235.0/24 maxlen: 24
109.229.236.0/24 maxlen: 24
109.229.237.0/24 maxlen: 24
109.229.238.0/24 maxlen: 24
109.229.239.0/24 maxlen: 24
109.229.240.0/24 maxlen: 24
109.229.241.0/24 maxlen: 24
109.229.242.0/24 maxlen: 24
109.229.243.0/24 maxlen: 24
109.229.244.0/24 maxlen: 24
109.229.245.0/24 maxlen: 24
109.229.246.0/24 maxlen: 24
109.229.247.0/24 maxlen: 24
109.229.248.0/24 maxlen: 24
109.229.249.0/24 maxlen: 24
109.229.250.0/24 maxlen: 24
109.229.251.0/24 maxlen: 24
109.229.252.0/24 maxlen: 24
109.229.253.0/24 maxlen: 24
109.229.254.0/24 maxlen: 24
109.229.255.0/24 maxlen: 24
193.169.226.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:06:f6:77:db:d8:de:59:62:25:92:b7:74:de:85:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Aug 27 07:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=302af7323730f67ea2ed9be3a150f8300bc69024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:73:b3:d6:d2:e0:4d:2e:ac:05:f0:d4:80:
49:72:6c:9b:67:0a:b5:0b:bf:94:3f:0d:b7:f3:92:
79:b6:4b:3f:78:58:0c:05:ae:9e:e1:b4:1a:5d:8e:
f7:69:a4:e4:b6:7e:cc:13:3d:53:7a:14:eb:cb:89:
48:60:ee:06:bf:d3:f3:11:a6:12:1d:ca:54:bf:ad:
f4:92:d1:7b:9b:42:32:fa:2b:8d:52:52:27:8f:39:
40:df:a2:3b:db:15:a6:a9:c7:3c:d8:cd:20:15:4d:
5c:3b:d1:f1:b7:23:1e:6c:cf:da:d6:01:95:15:67:
e3:70:08:77:a0:b5:d9:b1:b2:6e:c6:22:f5:26:2b:
a0:d4:14:7d:2d:df:c8:d5:2d:dd:6f:b0:cc:49:c6:
15:e2:7f:9d:4d:3a:bd:ff:dc:5f:81:fa:a8:2b:f4:
e8:10:2e:82:55:67:b2:5f:6c:9b:38:0d:d3:72:9a:
7e:bf:75:53:30:fe:d6:59:80:d9:5a:05:16:9c:72:
18:78:be:61:c2:94:bc:b4:7b:83:06:b0:a0:f6:f8:
d9:59:49:08:a2:82:eb:17:74:47:99:c8:bc:17:ba:
fe:a3:3d:29:1e:25:87:bd:ce:1b:29:ff:4b:cb:88:
64:bb:0f:66:50:45:82:bc:9b:c2:d7:b8:1e:10:aa:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2A:F7:32:37:30:F6:7E:A2:ED:9B:E3:A1:50:F8:30:0B:C6:90:24
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/MCr3Mjcw9n6i7ZvjoVD4MAvGkCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.224.0/19
193.169.226.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:37:3b:d1:9c:2c:ae:19:c6:7e:bc:51:94:6c:12:57:a1:70:
da:5f:22:59:58:b4:ef:61:03:48:c5:e0:70:87:da:13:d3:7c:
2c:9a:8b:2d:2f:85:4d:f2:bb:2f:5e:41:15:a4:38:fa:26:b4:
cd:c4:d6:9e:56:ab:54:e8:11:f1:a8:29:6e:42:2e:72:fc:98:
0e:cf:9a:53:d0:66:ff:a6:1b:80:f7:e5:ed:4d:29:57:a2:be:
41:d8:bb:05:2d:33:e2:0c:44:80:b1:64:91:c9:7b:d1:a7:4b:
60:e9:bd:2d:8d:71:bd:95:c5:a5:ee:05:f6:91:24:75:4e:ab:
bd:01:27:f9:5f:e3:96:1c:55:71:76:54:c8:d9:3b:2d:e3:8d:
90:e3:95:2f:8f:f3:de:d9:e3:bf:22:75:39:36:0f:5f:ba:25:
de:35:9d:3e:95:b0:0d:4e:10:e8:54:be:d0:e6:20:90:70:0b:
fb:cc:c8:26:7d:67:f6:c9:10:a0:10:a3:2c:6c:0b:26:6d:0e:
b3:50:a3:21:ca:e0:3c:6e:4c:5f:db:e8:ab:6e:f9:f9:2c:a2:
44:cb:4d:19:84:f8:6e:66:75:c6:2a:09:08:fa:ab:8b:9d:99:
64:1a:06:1e:1c:aa:e5:40:10:1b:b5:63:81:75:73:d8:c9:6c:
19:59:23:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:22:56 2026 by rpki-client