Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mCwU89XZWVbxMh74vDvTFL2GOgQ.roa
File: mCwU89XZWVbxMh74vDvTFL2GOgQ.roa (raw, json)
Hash identifier: H7UNmeylSUwtmdM/JATI6F5W61HzafEfOCDFXTZryrU=
Subject key identifier: 98:2C:14:F3:D5:D9:59:56:F1:32:1E:F8:BC:3B:D3:14:BD:86:3A:04
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F83AA2AA83DECBD9CAF26FB96DE8A1633
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mCwU89XZWVbxMh74vDvTFL2GOgQ.roa
Signing time: Tue 21 Jul 2026 07:53:15 +0000
ROA not before: Tue 21 Jul 2026 07:53:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 85.189.16.0/24 maxlen: 24
85.189.36.0/24 maxlen: 24
87.82.213.0/24 maxlen: 24
87.82.232.0/24 maxlen: 24
87.82.240.0/24 maxlen: 24
87.82.241.0/24 maxlen: 24
87.82.243.0/24 maxlen: 24
87.82.245.0/24 maxlen: 24
87.82.247.0/24 maxlen: 24
87.83.86.0/24 maxlen: 24
87.83.125.0/24 maxlen: 24
87.83.161.0/24 maxlen: 24
87.83.163.0/24 maxlen: 24
87.83.174.0/24 maxlen: 24
87.83.192.0/24 maxlen: 24
87.83.216.0/24 maxlen: 24
87.84.64.0/24 maxlen: 24
87.84.76.0/24 maxlen: 24
87.84.79.0/24 maxlen: 24
87.84.128.0/24 maxlen: 24
87.84.130.0/24 maxlen: 24
87.84.132.0/24 maxlen: 24
87.84.134.0/24 maxlen: 24
87.84.152.0/24 maxlen: 24
87.84.154.0/24 maxlen: 24
87.84.156.0/24 maxlen: 24
87.84.158.0/24 maxlen: 24
87.84.218.0/24 maxlen: 24
87.84.220.0/24 maxlen: 24
87.84.237.0/24 maxlen: 24
87.84.239.0/24 maxlen: 24
212.135.143.0/24 maxlen: 24
217.79.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:aa:2a:a8:3d:ec:bd:9c:af:26:fb:96:de:8a:16:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 21 07:53:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=982c14f3d5d95956f1321ef8bc3bd314bd863a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:64:32:7b:13:50:39:7a:6c:3a:35:1b:ee:
c1:b8:e2:dc:c4:d5:12:83:93:06:a6:56:da:c8:bf:
b3:0d:97:08:35:ff:36:24:f7:17:33:4a:29:00:6c:
57:63:e5:ea:67:0d:48:ef:bc:d6:d0:ad:91:cf:49:
02:2f:05:c2:98:95:72:de:74:64:e2:39:66:06:0b:
76:79:75:19:6f:62:fa:5d:24:88:91:e2:95:cc:ca:
ec:98:23:b0:4b:63:5f:8d:74:bf:3b:7e:28:44:d6:
80:d9:f9:fc:a5:bd:a0:92:11:4c:6e:ac:a6:2f:37:
0b:56:56:f3:b1:94:c3:11:8f:c8:30:fd:69:5c:86:
a7:d5:81:bd:b2:6e:1c:96:fc:8d:b7:3c:00:0f:96:
ab:85:a4:20:ea:c9:01:54:6c:df:ce:8f:9c:60:b7:
5e:87:16:30:b5:b2:ce:e0:10:d2:e6:58:54:99:fa:
c5:2b:f2:e6:90:5d:47:fc:f4:28:33:d7:9f:23:35:
47:d6:ba:77:31:c9:74:d9:f8:2d:66:10:e8:6d:4d:
45:b8:01:71:4f:e4:e0:a4:5c:15:0a:0e:35:00:c4:
68:2d:2c:21:5f:13:ca:0c:83:06:da:21:84:1c:19:
70:68:a7:37:e2:0a:d7:51:7f:8f:39:51:33:ae:4f:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2C:14:F3:D5:D9:59:56:F1:32:1E:F8:BC:3B:D3:14:BD:86:3A:04
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mCwU89XZWVbxMh74vDvTFL2GOgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.16.0/24
85.189.36.0/24
87.82.213.0/24
87.82.232.0/24
87.82.240.0/23
87.82.243.0/24
87.82.245.0/24
87.82.247.0/24
87.83.86.0/24
87.83.125.0/24
87.83.161.0/24
87.83.163.0/24
87.83.174.0/24
87.83.192.0/24
87.83.216.0/24
87.84.64.0/24
87.84.76.0/24
87.84.79.0/24
87.84.128.0/24
87.84.130.0/24
87.84.132.0/24
87.84.134.0/24
87.84.152.0/24
87.84.154.0/24
87.84.156.0/24
87.84.158.0/24
87.84.218.0/24
87.84.220.0/24
87.84.237.0/24
87.84.239.0/24
212.135.143.0/24
217.79.113.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e0:0e:87:7d:5b:0a:77:dd:23:38:c4:1a:19:0e:b7:0b:6b:
af:c0:7f:35:9c:0c:09:36:26:8c:ed:8a:d9:e3:0b:e7:f4:c5:
33:ed:06:f7:10:90:1a:1a:fb:92:d8:c9:9e:2e:57:bd:42:be:
4e:33:e0:b1:a0:8e:99:b5:e4:da:e2:df:6b:ca:7c:a9:b7:be:
27:44:0d:69:36:de:86:d8:ba:a6:5b:0d:a4:78:c5:f3:9f:76:
54:eb:cc:a0:79:7e:6b:0f:79:1c:cc:42:d4:39:a6:8d:f3:ff:
a1:d9:c3:f5:98:d2:96:f7:fb:df:5f:85:d4:52:83:36:e5:b0:
b5:fa:6b:04:13:cc:a0:b9:5c:64:30:ad:c2:81:e9:92:47:9f:
5f:29:59:92:bc:15:7f:9f:f0:45:d3:3c:b9:66:86:0e:d4:fd:
ff:cc:84:a2:99:5b:22:e5:f6:ea:ac:1f:10:91:9c:73:47:b1:
fc:57:20:d8:75:b4:19:95:7c:2c:87:b5:22:e3:78:ba:39:4b:
71:6b:3b:78:4f:0c:0a:70:3d:35:56:69:12:69:16:d7:15:7e:
36:1c:9e:33:81:95:15:e4:ea:c6:b5:5d:2e:d6:1d:c6:27:32:
76:5c:6b:ea:1e:07:f4:f0:24:16:9c:5d:2d:db:04:60:84:b3:
9a:29:9b:fc
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAZ+DqiqoPey9nK8m+5beihYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzIxMDc1MzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODJjMTRmM2Q1ZDk1OTU2ZjEzMjFlZjhiYzNiZDMxNGJkODYzYTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFBkMnsTUDl6bDo1G+7BuOLcxNUS
g5MGplbayL+zDZcINf82JPcXM0opAGxXY+XqZw1I77zW0K2Rz0kCLwXCmJVy3nRk
4jlmBgt2eXUZb2L6XSSIkeKVzMrsmCOwS2NfjXS/O34oRNaA2fn8pb2gkhFMbqym
LzcLVlbzsZTDEY/IMP1pXIan1YG9sm4clvyNtzwAD5arhaQg6skBVGzfzo+cYLde
hxYwtbLO4BDS5lhUmfrFK/LmkF1H/PQoM9efIzVH1rp3Mcl02fgtZhDobU1FuAFx
T+TgpFwVCg41AMRoLSwhXxPKDIMG2iGEHBlwaKc34grXUX+POVEzrk9BXwIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFJgsFPPV2VlW8TIe+Lw70xS9hjoEMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvbUN3VTg5WFpXVmJ4TWg3NHZEdlRGTDJHT2dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHdBggrBgEFBQcBBwEB/wSBzTCByjCBxwQCAAEwgcADBABV
vRADBABVvSQDBABXUtUDBABXUugDBAFXUvADBABXUvMDBABXUvUDBABXUvcDBABX
U1YDBABXU30DBABXU6EDBABXU6MDBABXU64DBABXU8ADBABXU9gDBABXVEADBABX
VEwDBABXVE8DBABXVIADBABXVIIDBABXVIQDBABXVIYDBABXVJgDBABXVJoDBABX
VJwDBABXVJ4DBABXVNoDBABXVNwDBABXVO0DBABXVO8DBADUh48DBADZT3EwDQYJ
KoZIhvcNAQELBQADggEBAGLgDod9Wwp33SM4xBoZDrcLa6/AfzWcDAk2Joztitnj
C+f0xTPtBvcQkBoa+5LYyZ4uV71Cvk4z4LGgjpm15Nri32vKfKm3vidEDWk23obY
uqZbDaR4xfOfdlTrzKB5fmsPeRzMQtQ5po3z/6HZw/WY0pb3+99fhdRSgzblsLX6
awQTzKC5XGQwrcKB6ZJHn18pWZK8FX+f8EXTPLlmhg7U/f/MhKKZWyLl9uqsHxCR
nHNHsfxXINh1tBmVfCyHtSLjeLo5S3FrO3hPDApwPTVWaRJpFtcVfjYcnjOBlRXk
6sa1XS7WHcYnMnZca+oeB/TwJBacXS3bBGCEs5opm/w=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:17 2026 by rpki-client