Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/MMGfobkcPvFzzP7MQZnUAsVVZp8.roa
File: MMGfobkcPvFzzP7MQZnUAsVVZp8.roa (raw, json)
Hash identifier: WGW0WSapBDRofWXt8DtNDTEwEorTNTg8AzDt4Ue2MDI=
Subject key identifier: 30:C1:9F:A1:B9:1C:3E:F1:73:CC:FE:CC:41:99:D4:02:C5:55:66:9F
Certificate issuer: /CN=a0bc117b2bc7e05ac5c0eb3515a17418130fde82
Certificate serial: 019F2369574B33377E1432C41A8FB7696F96
Authority key identifier: A0:BC:11:7B:2B:C7:E0:5A:C5:C0:EB:35:15:A1:74:18:13:0F:DE:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/MMGfobkcPvFzzP7MQZnUAsVVZp8.roa
Signing time: Thu 02 Jul 2026 15:18:53 +0000
ROA not before: Thu 02 Jul 2026 15:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39120
IP address blocks: 5.56.8.0/22 maxlen: 22
5.56.12.0/22 maxlen: 22
5.83.120.0/22 maxlen: 22
5.83.124.0/22 maxlen: 22
31.7.144.0/20 maxlen: 20
45.80.172.0/23 maxlen: 23
45.90.232.0/22 maxlen: 22
78.138.32.0/22 maxlen: 24
78.138.32.0/24 maxlen: 24
78.138.33.0/24 maxlen: 24
78.138.35.0/24 maxlen: 24
83.229.8.0/22 maxlen: 22
89.21.192.0/23 maxlen: 23
89.21.194.0/23 maxlen: 23
89.21.196.0/23 maxlen: 23
89.21.198.0/23 maxlen: 23
89.21.200.0/21 maxlen: 21
89.21.208.0/20 maxlen: 20
91.214.72.0/22 maxlen: 22
93.88.96.0/20 maxlen: 20
94.101.48.0/22 maxlen: 22
94.101.52.0/22 maxlen: 22
94.101.56.0/22 maxlen: 22
94.101.60.0/22 maxlen: 22
185.9.208.0/22 maxlen: 22
185.29.248.0/22 maxlen: 22
185.104.124.0/22 maxlen: 22
185.105.92.0/22 maxlen: 22
185.105.104.0/22 maxlen: 22
185.105.128.0/22 maxlen: 22
185.105.212.0/22 maxlen: 22
185.195.8.0/22 maxlen: 22
185.217.228.0/22 maxlen: 22
195.60.190.0/23 maxlen: 23
213.167.232.0/21 maxlen: 21
217.28.68.0/22 maxlen: 22
2a01:9a80::/32 maxlen: 32
2a01:9a81::/32 maxlen: 32
2a01:9a82::/32 maxlen: 32
2a01:9a83::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:57:4b:33:37:7e:14:32:c4:1a:8f:b7:69:6f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bc117b2bc7e05ac5c0eb3515a17418130fde82
Validity
Not Before: Jul 2 15:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30c19fa1b91c3ef173ccfecc4199d402c555669f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:99:92:a3:91:2e:0b:2f:f8:f7:46:c1:77:
f2:d0:9c:b4:4f:c9:e7:b1:ea:aa:a8:36:55:7b:e0:
d6:0e:0a:9d:00:a2:49:74:60:4d:fa:ea:a1:62:69:
2d:ee:a1:d4:c8:45:f2:44:7c:4f:f6:f0:29:8b:fd:
36:10:5b:50:95:f0:33:26:e6:da:9a:f1:c6:32:be:
fa:b9:45:2c:07:5d:aa:02:1d:52:a8:be:e6:2b:ed:
cf:64:ea:9f:db:8f:6c:ac:4d:86:cf:07:f9:03:d9:
4e:12:3b:60:39:d8:3e:17:98:7e:1c:44:cd:bf:8a:
c9:70:0e:45:b0:07:49:78:d9:18:17:74:2e:5c:b1:
17:f3:54:dc:9d:ad:a4:57:d9:a3:8a:82:bf:d5:e7:
0d:99:0e:83:41:e1:64:18:fd:39:15:fc:85:19:b6:
d8:ef:92:5a:9f:a3:4c:28:4e:a8:fd:3f:2a:ca:7e:
9a:32:8a:a7:cd:ff:51:ee:81:03:b4:e3:80:75:4f:
51:e4:c8:43:fa:98:d9:c3:18:97:12:5f:8b:63:cd:
62:36:40:51:65:a3:a7:a8:cb:d1:da:26:90:a2:79:
0b:be:35:34:f7:bb:99:4d:24:45:62:9c:ac:2f:8b:
ef:58:b5:14:d5:ca:a2:ac:b7:59:2c:a4:14:2f:5c:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C1:9F:A1:B9:1C:3E:F1:73:CC:FE:CC:41:99:D4:02:C5:55:66:9F
X509v3 Authority Key Identifier:
keyid:A0:BC:11:7B:2B:C7:E0:5A:C5:C0:EB:35:15:A1:74:18:13:0F:DE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwReyvH4FrFwOs1FaF0GBMP3oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/MMGfobkcPvFzzP7MQZnUAsVVZp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/oLwReyvH4FrFwOs1FaF0GBMP3oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.8.0/21
5.83.120.0/21
31.7.144.0/20
45.80.172.0/23
45.90.232.0/22
78.138.32.0/22
83.229.8.0/22
89.21.192.0/19
91.214.72.0/22
93.88.96.0/20
94.101.48.0/20
185.9.208.0/22
185.29.248.0/22
185.104.124.0/22
185.105.92.0/22
185.105.104.0/22
185.105.128.0/22
185.105.212.0/22
185.195.8.0/22
185.217.228.0/22
195.60.190.0/23
213.167.232.0/21
217.28.68.0/22
IPv6:
2a01:9a80::/30
Signature Algorithm: sha256WithRSAEncryption
05:f5:d2:c6:08:32:5b:be:3d:d3:b2:64:56:63:d1:68:dc:93:
e7:82:a4:57:58:79:db:56:54:b5:e4:69:da:44:28:c7:71:a5:
89:46:d5:cc:68:bb:1c:06:9b:a4:4b:9f:c6:48:a9:58:15:16:
e3:59:5d:c4:5b:fc:42:6d:57:19:3c:a8:0d:db:9e:e2:11:70:
4a:22:14:1d:c4:81:63:02:cb:be:4f:a9:fa:94:a2:0a:46:a5:
5d:11:0f:60:fb:5d:e6:76:31:b9:6d:da:c3:c6:52:95:ab:23:
c9:99:1b:e2:a3:5c:90:54:16:92:f4:f7:93:9e:10:1b:b0:26:
fc:f8:41:f3:f0:78:d8:3d:98:3d:a6:ee:2c:b3:ca:c0:8b:56:
2d:3f:c9:70:d0:fe:73:72:8d:66:c5:70:ce:92:f3:ff:14:8b:
87:22:a2:8e:51:a1:b3:48:8f:2d:26:77:fd:91:06:dd:37:4f:
01:e5:74:9b:9f:5f:11:15:7a:1c:44:d1:d1:b9:78:46:38:0d:
6b:5a:90:63:67:a6:ca:1b:c1:cc:5f:27:bd:18:57:fa:da:1e:
e1:ba:dd:80:9e:74:ed:35:15:7d:b9:74:09:97:bf:b5:8b:28:
94:7f:38:ee:e6:77:e3:f4:c9:36:d3:91:d9:8f:2e:bc:cc:5c:
a2:28:6e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:25 2026 by rpki-client