Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/MZnpTOGHw-wHvXLJ4-WOx0LKjB4.roa
File: MZnpTOGHw-wHvXLJ4-WOx0LKjB4.roa (raw, json)
Hash identifier: SKidAnJDVBAcAfGPFaWD0xoE5cVEU3877tCR9noWWBg=
Subject key identifier: 31:99:E9:4C:E1:87:C3:EC:07:BD:72:C9:E3:E5:8E:C7:42:CA:8C:1E
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 019DD94BDA809A1D355A60D455818E0C234C
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/MZnpTOGHw-wHvXLJ4-WOx0LKjB4.roa
Signing time: Wed 29 Apr 2026 12:52:00 +0000
ROA not before: Wed 29 Apr 2026 12:52:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2.57.180.0/22 maxlen: 24
2.59.116.0/24 maxlen: 24
45.12.44.0/22 maxlen: 24
45.15.52.0/22 maxlen: 22
45.67.44.0/22 maxlen: 22
45.86.192.0/22 maxlen: 22
45.95.140.0/22 maxlen: 24
45.130.204.0/22 maxlen: 24
45.136.60.0/22 maxlen: 24
45.145.192.0/22 maxlen: 24
45.151.204.0/22 maxlen: 24
91.227.240.0/23 maxlen: 23
103.82.160.0/22 maxlen: 22
185.39.11.0/24 maxlen: 24
185.57.176.0/22 maxlen: 22
185.157.123.0/24 maxlen: 24
185.232.89.0/24 maxlen: 24
193.3.158.0/24 maxlen: 24
194.99.66.0/23 maxlen: 23
212.52.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:4b:da:80:9a:1d:35:5a:60:d4:55:81:8e:0c:23:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Apr 29 12:52:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3199e94ce187c3ec07bd72c9e3e58ec742ca8c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:1b:19:9e:33:01:a8:29:0d:53:9d:b3:a2:
9b:83:96:85:f9:80:67:a1:cc:d8:e2:a2:78:00:b6:
09:d7:a5:6d:bd:da:74:bd:89:0e:6e:cf:24:92:5e:
d4:43:7b:68:5b:a9:56:6f:24:06:3f:4c:f6:c6:da:
34:52:01:43:ba:37:23:ff:87:0b:95:c4:81:8e:ac:
08:e6:04:e2:66:13:6a:f6:19:5a:8e:e6:0a:80:4e:
0f:42:ad:48:65:f0:27:9f:38:25:42:69:54:17:92:
fc:de:4f:fb:bd:bb:8d:67:54:0e:d5:5c:a3:e6:a2:
67:18:a5:63:6b:7a:32:a6:98:16:40:4e:67:31:09:
d5:cc:8a:56:e9:2a:37:1c:f4:36:71:b3:fb:c1:b3:
d0:71:e7:77:ee:88:e3:b3:6d:ba:96:0e:77:e1:be:
fa:a3:33:1d:09:c0:bb:17:b5:3d:cb:22:b7:16:8c:
a1:44:7f:0c:fa:c7:83:cf:80:1d:e7:a0:fa:7b:49:
95:16:eb:84:fd:44:6d:52:96:77:79:8d:e5:83:5f:
74:22:4e:0f:2d:6c:15:ed:2a:03:a9:2d:4c:c8:f1:
79:b6:b5:b0:4a:92:48:22:b2:52:c1:6c:f1:6a:81:
98:bc:c6:f8:21:6d:26:5d:cb:67:3a:4e:e9:43:cb:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:99:E9:4C:E1:87:C3:EC:07:BD:72:C9:E3:E5:8E:C7:42:CA:8C:1E
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/MZnpTOGHw-wHvXLJ4-WOx0LKjB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.180.0/22
2.59.116.0/24
45.12.44.0/22
45.15.52.0/22
45.67.44.0/22
45.86.192.0/22
45.95.140.0/22
45.130.204.0/22
45.136.60.0/22
45.145.192.0/22
45.151.204.0/22
91.227.240.0/23
103.82.160.0/22
185.39.11.0/24
185.57.176.0/22
185.157.123.0/24
185.232.89.0/24
193.3.158.0/24
194.99.66.0/23
212.52.3.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:80:31:92:cd:77:c2:e0:ff:aa:8a:8f:41:bb:47:26:4d:e8:
7a:76:5f:4b:75:8e:bc:64:d2:e9:f2:ae:bb:9d:49:05:10:72:
54:f3:85:47:be:e6:4e:a9:25:74:ce:41:67:b8:79:a8:25:22:
7c:5f:fa:c5:14:06:e0:b7:23:ff:1a:ce:6a:a4:5c:1d:06:1a:
d2:c3:87:7f:67:d7:9e:16:e9:27:e5:f7:43:9e:36:c8:02:0f:
cc:36:52:0e:11:d0:fe:40:41:50:64:14:52:60:7a:ea:73:54:
51:9c:b7:f6:6a:c7:6b:b3:86:3f:2b:2e:22:78:22:7d:49:2c:
d2:36:b0:8f:5e:06:a8:44:ca:cd:dd:c0:8b:d6:f8:22:b2:e7:
6d:37:5c:60:3e:8a:3d:55:d6:21:74:b7:0f:26:71:88:b0:34:
39:2f:56:56:fe:b2:97:7c:7e:0d:29:6a:00:6c:d2:78:f7:a6:
23:84:6c:51:63:69:80:b2:f6:93:f0:63:f7:a4:5e:33:6d:af:
8c:1e:9c:79:cf:f5:ee:3a:f7:fc:ed:55:02:bb:13:eb:83:8a:
05:cc:d5:bf:27:a0:24:5d:00:63:8e:1d:b4:b5:c2:ee:32:b8:
44:bd:9f:4a:e2:c3:0c:f2:59:32:6f:65:27:29:6a:3f:a4:4a:
e8:c2:28:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:40 2026 by rpki-client