Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MdnIcanAEPs_UJT44r9uRvlKZVk.roa
File: MdnIcanAEPs_UJT44r9uRvlKZVk.roa (raw, json)
Hash identifier: mY+ow/OLicjb41/GZyQOmK+tKjE0ieeBmAn99OsUBbk=
Subject key identifier: 31:D9:C8:71:A9:C0:10:FB:3F:50:94:F8:E2:BF:6E:46:F9:4A:65:59
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D1EBFCB1D8A19C5BA9F66630EF0FB5AE8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MdnIcanAEPs_UJT44r9uRvlKZVk.roa
Signing time: Tue 24 Mar 2026 07:29:39 +0000
ROA not before: Tue 24 Mar 2026 07:29:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61112
IP address blocks: 212.135.32.0/20 maxlen: 24
212.135.32.0/24 maxlen: 24
212.135.33.0/24 maxlen: 24
212.135.34.0/24 maxlen: 24
212.135.35.0/24 maxlen: 24
212.135.36.0/24 maxlen: 24
212.135.37.0/24 maxlen: 24
212.135.38.0/24 maxlen: 24
212.135.39.0/24 maxlen: 24
212.135.40.0/24 maxlen: 24
212.135.41.0/24 maxlen: 24
212.135.42.0/24 maxlen: 24
212.135.43.0/24 maxlen: 24
212.135.44.0/24 maxlen: 24
212.135.45.0/24 maxlen: 24
212.135.46.0/24 maxlen: 24
212.135.47.0/24 maxlen: 24
212.135.112.0/20 maxlen: 24
212.135.112.0/24 maxlen: 24
212.135.113.0/24 maxlen: 24
212.135.114.0/24 maxlen: 24
212.135.115.0/24 maxlen: 24
212.135.116.0/24 maxlen: 24
212.135.117.0/24 maxlen: 24
212.135.118.0/24 maxlen: 24
212.135.119.0/24 maxlen: 24
212.135.120.0/24 maxlen: 24
212.135.121.0/24 maxlen: 24
212.135.122.0/24 maxlen: 24
212.135.123.0/24 maxlen: 24
212.135.124.0/24 maxlen: 24
212.135.125.0/24 maxlen: 24
212.135.126.0/24 maxlen: 24
212.135.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:bf:cb:1d:8a:19:c5:ba:9f:66:63:0e:f0:fb:5a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 24 07:29:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31d9c871a9c010fb3f5094f8e2bf6e46f94a6559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:67:8a:5a:35:85:2a:b3:78:79:54:c0:f4:9b:
ae:95:2d:40:a1:2d:45:a9:f7:a6:91:76:ec:d5:87:
ff:31:5b:26:a4:bc:01:3d:5f:a9:b3:32:c7:67:6c:
93:58:24:db:da:ff:c0:d4:32:cd:0e:8b:8b:ff:53:
fa:dc:f5:01:79:d0:c3:d0:18:bc:3a:2d:1a:de:19:
d1:15:8b:d9:2b:13:c7:a9:41:c6:8a:40:fe:d6:a2:
3b:5e:ce:c3:a1:35:29:44:5d:45:2a:ec:b7:3b:f6:
ed:06:a2:d9:94:a1:58:42:2b:01:4f:db:a9:83:6c:
38:e3:84:ed:ba:cc:3d:6b:f7:71:e2:37:a5:6a:a1:
5e:52:57:d1:19:9d:fe:f2:4a:bc:5c:4b:bb:96:b9:
f6:a8:e3:60:9c:ce:01:f7:2e:f5:4c:16:8b:9c:b8:
f4:46:6c:45:7a:ce:7a:19:2a:82:7a:e8:f6:2b:9d:
17:98:9f:8e:87:f2:13:1e:e8:05:e8:63:6a:9c:74:
df:a6:cd:62:01:28:80:31:4f:fe:4a:83:e4:9c:ff:
21:e5:e4:b6:f1:18:5f:fa:9b:80:71:eb:23:43:c2:
66:b8:e1:40:e4:62:71:a7:a7:92:f1:53:1a:6c:54:
da:14:a2:14:b0:9c:a4:1d:1a:89:3d:c3:44:f9:b5:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D9:C8:71:A9:C0:10:FB:3F:50:94:F8:E2:BF:6E:46:F9:4A:65:59
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MdnIcanAEPs_UJT44r9uRvlKZVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.32.0/20
212.135.112.0/20
Signature Algorithm: sha256WithRSAEncryption
d4:41:28:1c:ea:6a:fb:f5:58:e6:e7:da:cf:66:7f:15:fd:24:
b2:68:34:e5:0d:35:67:c3:90:db:01:da:90:ed:4d:ed:d2:91:
5d:24:07:20:18:86:fe:ef:fa:28:fb:73:72:fd:bf:dd:79:86:
fe:52:cf:56:8f:92:cd:02:30:ee:53:50:a9:1a:b4:02:0e:ce:
b7:cf:a3:da:bb:05:88:ee:5a:ca:4f:4d:76:9c:79:3c:98:30:
e4:3a:db:fe:fd:85:ee:fa:77:42:e4:55:2b:ae:c9:98:bc:37:
3b:27:31:1f:82:54:db:5f:83:13:8a:ff:fb:6a:ce:30:35:40:
9f:b3:a5:05:ab:18:05:98:11:b6:99:e6:52:aa:96:c5:25:02:
00:f5:bb:f5:12:55:2a:24:c4:77:a7:42:2a:2c:33:b2:48:0e:
d4:03:71:bc:0b:2d:99:bc:21:38:14:d8:97:01:99:59:b6:2f:
92:61:5e:48:d5:af:94:6f:41:5c:e3:3e:28:74:d7:e8:97:1d:
c0:73:6e:19:8b:72:e0:65:8f:9c:5c:cf:a6:2a:a0:08:05:c2:
27:5b:36:17:f6:4d:2c:53:47:d6:19:07:0c:ea:cb:b5:69:12:
8d:7c:92:2a:8c:ba:ce:ee:db:92:bc:67:85:3b:ff:62:f9:3f:
3c:e5:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:07 2026 by rpki-client