Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/MVVMDHQ15A5eeUSCPotdqrTSwBM.roa
File: MVVMDHQ15A5eeUSCPotdqrTSwBM.roa (raw, json)
Hash identifier: 5nG4w5vscj5LeP7wWl1bV9XF/+IvsA0KVrNr06ax6cw=
Subject key identifier: 31:55:4C:0C:74:35:E4:0E:5E:79:44:82:3E:8B:5D:AA:B4:D2:C0:13
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 01999ADF819C5934E4472338BA414DA641F7
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/MVVMDHQ15A5eeUSCPotdqrTSwBM.roa
Signing time: Tue 30 Sep 2025 13:46:02 +0000
ROA not before: Tue 30 Sep 2025 13:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43915
IP address blocks: 5.181.104.0/22 maxlen: 22
45.66.36.0/22 maxlen: 22
45.80.160.0/22 maxlen: 22
45.130.56.0/22 maxlen: 22
45.143.112.0/22 maxlen: 22
45.152.28.0/22 maxlen: 22
62.169.148.0/23 maxlen: 23
79.135.122.0/23 maxlen: 24
87.117.64.0/22 maxlen: 22
87.117.68.0/23 maxlen: 23
91.239.57.0/24 maxlen: 24
94.154.184.0/22 maxlen: 24
109.224.216.0/22 maxlen: 22
109.224.224.0/22 maxlen: 24
109.224.224.0/23 maxlen: 23
109.224.226.0/23 maxlen: 24
109.224.234.0/23 maxlen: 24
109.224.236.0/22 maxlen: 22
109.224.240.0/23 maxlen: 24
144.178.104.0/23 maxlen: 23
144.178.118.0/23 maxlen: 23
144.178.252.0/23 maxlen: 23
147.189.156.0/22 maxlen: 24
147.189.214.0/24 maxlen: 24
176.116.116.0/22 maxlen: 22
178.248.128.0/21 maxlen: 21
185.23.254.0/23 maxlen: 24
185.147.184.0/22 maxlen: 22
185.161.4.0/22 maxlen: 22
185.231.136.0/21 maxlen: 21
188.214.236.0/22 maxlen: 22
193.35.146.0/23 maxlen: 23
194.105.134.0/23 maxlen: 24
194.145.242.0/23 maxlen: 24
194.146.160.0/22 maxlen: 24
194.169.152.0/22 maxlen: 22
195.184.250.0/23 maxlen: 23
195.206.172.0/22 maxlen: 24
195.242.148.0/23 maxlen: 23
195.244.2.0/23 maxlen: 23
212.59.72.0/21 maxlen: 24
212.108.90.0/23 maxlen: 23
213.225.224.0/22 maxlen: 24
217.14.184.0/21 maxlen: 21
217.20.244.0/22 maxlen: 24
217.171.100.0/22 maxlen: 22
217.171.104.0/22 maxlen: 22
2a07:5940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:df:81:9c:59:34:e4:47:23:38:ba:41:4d:a6:41:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Sep 30 13:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31554c0c7435e40e5e7944823e8b5daab4d2c013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c8:ff:fe:c4:11:b0:ca:71:6b:fe:9f:16:58:
b7:47:9b:36:ce:cf:f8:d4:c8:3d:42:f6:34:2a:d3:
63:29:d3:50:bf:d7:c7:d3:10:a1:18:f8:ef:83:b2:
61:80:ea:39:0f:f0:d4:a7:94:71:f1:87:04:a9:ed:
4b:f2:19:b8:98:08:b7:d0:92:68:0d:62:d5:de:74:
db:cb:a4:69:39:4c:f5:1a:cd:ad:a4:16:dd:1e:c5:
b7:54:5f:5a:f0:40:a5:16:3e:bc:2b:15:59:ff:b3:
3d:98:e7:c6:40:a3:a2:2a:94:9e:c4:f2:75:cb:86:
90:56:d4:58:5c:7e:65:32:8c:b3:5d:aa:41:9f:35:
77:7a:93:a5:36:22:0e:17:5b:aa:c6:73:fb:d4:bd:
d6:fb:a9:be:1d:28:40:d2:a8:4d:1a:31:8d:8c:d3:
e8:6c:f0:22:d4:67:51:22:f6:08:d0:e8:7e:47:59:
d8:43:6d:73:10:38:40:e3:9f:e6:d2:4b:b4:78:10:
b0:6a:b2:1e:f1:8d:eb:27:2c:99:ad:80:7f:e1:a2:
c7:1f:6a:d2:d3:c7:64:a1:59:b4:4a:06:af:b3:ee:
4e:80:b6:0a:fa:e6:d9:64:72:95:de:4f:a3:67:a0:
c2:3a:c6:a2:5a:39:0b:e3:dc:cd:9d:db:c1:5b:70:
b5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:55:4C:0C:74:35:E4:0E:5E:79:44:82:3E:8B:5D:AA:B4:D2:C0:13
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/MVVMDHQ15A5eeUSCPotdqrTSwBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.104.0/22
45.66.36.0/22
45.80.160.0/22
45.130.56.0/22
45.143.112.0/22
45.152.28.0/22
62.169.148.0/23
79.135.122.0/23
87.117.64.0-87.117.69.255
91.239.57.0/24
94.154.184.0/22
109.224.216.0/22
109.224.224.0/22
109.224.234.0-109.224.241.255
144.178.104.0/23
144.178.118.0/23
144.178.252.0/23
147.189.156.0/22
147.189.214.0/24
176.116.116.0/22
178.248.128.0/21
185.23.254.0/23
185.147.184.0/22
185.161.4.0/22
185.231.136.0/21
188.214.236.0/22
193.35.146.0/23
194.105.134.0/23
194.145.242.0/23
194.146.160.0/22
194.169.152.0/22
195.184.250.0/23
195.206.172.0/22
195.242.148.0/23
195.244.2.0/23
212.59.72.0/21
212.108.90.0/23
213.225.224.0/22
217.14.184.0/21
217.20.244.0/22
217.171.100.0-217.171.107.255
IPv6:
2a07:5940::/32
Signature Algorithm: sha256WithRSAEncryption
2d:83:a5:8b:f3:0c:f8:d2:3f:15:e9:f0:96:b1:f8:6d:aa:ce:
14:aa:0b:5e:84:e2:0e:45:09:77:f1:0e:cc:93:d8:4a:ac:4a:
88:0c:9f:3d:91:e4:cd:3f:26:a4:24:82:f5:9a:5f:48:b8:50:
0b:a6:04:9e:8a:2f:cf:b4:49:8a:a2:84:1d:e8:ec:9b:c4:53:
eb:d0:7e:3f:32:f2:b9:3d:27:45:30:0c:b2:f1:81:4c:0b:0c:
d1:9f:fa:f9:7d:01:af:7e:33:cc:6d:3e:bf:f8:ac:03:ce:72:
62:f4:3a:be:29:7a:33:dc:7e:ac:c8:c5:90:56:04:c5:49:8b:
ee:72:2a:48:04:6d:9f:26:59:20:1a:5d:60:33:76:81:5e:9a:
24:8a:43:93:41:a1:27:bd:71:a6:6e:f4:f1:fe:08:17:ac:c6:
43:7f:0e:61:9a:b3:26:7a:28:02:e3:96:5c:d3:cd:40:8f:fc:
ec:27:9c:e0:a2:8c:5a:28:6f:5f:4d:f2:c2:d0:88:ba:69:8f:
60:9d:8b:9b:91:b0:60:bc:9b:61:80:13:ee:a8:08:b9:53:37:
08:88:8e:43:56:0c:b7:3d:aa:42:18:35:bf:40:cd:3f:5a:74:
e8:04:cb:8a:9f:1a:51:14:d5:19:2b:4b:02:96:65:f7:11:d5:
c3:9b:2f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:30 2025 by rpki-client