Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/mQgZ_aeQizevYwNKMCfXAMQNacA.roa
File: mQgZ_aeQizevYwNKMCfXAMQNacA.roa (raw, json)
Hash identifier: zBq8HYNkmYsx3l9a089U7aq9li/mu5uJZF8m8sHR/3U=
Subject key identifier: 99:08:19:FD:A7:90:8B:37:AF:63:03:4A:30:27:D7:00:C4:0D:69:C0
Certificate issuer: /CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Certificate serial: 019F23688D0150FB7C47CB642DD5E8A9E3D3
Authority key identifier: FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/mQgZ_aeQizevYwNKMCfXAMQNacA.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39888
IP address blocks: 5.83.39.0/24 maxlen: 24
5.83.41.0/24 maxlen: 24
185.75.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8d:01:50:fb:7c:47:cb:64:2d:d5:e8:a9:e3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=990819fda7908b37af63034a3027d700c40d69c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:71:39:0c:bf:2e:75:55:83:55:7f:82:ce:
84:cf:00:b9:4c:82:36:72:4f:00:83:1b:40:c9:4d:
92:89:1b:ee:8e:96:a8:ea:ab:2b:ce:d4:1d:6f:a3:
53:1c:02:cf:c7:41:43:d3:6d:22:11:af:6e:93:ee:
a5:41:60:c8:1c:e5:38:ab:fc:9e:5d:e0:69:dc:d6:
c8:64:f9:0c:f2:59:61:d4:da:49:48:eb:d8:78:16:
32:29:8a:46:70:e1:a9:18:ed:04:b9:b8:bb:84:41:
33:d0:a6:d9:03:2d:2e:66:8e:65:0a:f4:00:b5:f1:
98:b2:f7:15:02:55:f6:a5:c9:50:9d:ae:db:6d:bd:
eb:e0:00:21:ba:ea:76:a1:8f:49:d4:a5:42:b4:e7:
3a:e3:d1:95:cd:b2:48:e7:5e:7b:2f:10:3a:74:78:
6f:fd:15:46:6c:9f:bc:8e:b3:b4:40:14:b5:19:45:
b7:6e:a1:f6:20:f2:9f:57:f7:d1:8c:52:d4:fb:90:
9a:e0:c9:6d:0b:74:8a:c5:7f:74:90:d4:3a:84:0e:
cc:eb:0f:1c:a6:9e:1e:f3:1c:34:ef:11:72:03:26:
b5:20:e0:d5:d4:0b:b5:07:0b:da:ae:2a:8d:2d:06:
11:28:38:1c:9a:cc:f6:f3:89:71:9a:4c:de:8b:64:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:08:19:FD:A7:90:8B:37:AF:63:03:4A:30:27:D7:00:C4:0D:69:C0
X509v3 Authority Key Identifier:
keyid:FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/mQgZ_aeQizevYwNKMCfXAMQNacA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.39.0/24
5.83.41.0/24
185.75.53.0/24
Signature Algorithm: sha256WithRSAEncryption
52:bb:55:c0:7b:d4:ab:f9:80:60:fb:f8:34:cc:4d:7d:6f:99:
63:4e:09:a5:b6:fb:5d:ae:05:ae:8b:5e:9f:fb:bf:c9:0d:b5:
ed:7f:7e:bc:44:59:62:bc:23:60:ac:83:37:90:70:b1:de:5b:
66:02:ac:00:83:54:c4:47:d2:54:6c:26:fd:71:95:91:da:72:
66:de:eb:ad:c9:d6:56:d7:e0:70:c4:53:dc:a2:a3:34:22:5c:
6a:f8:04:f7:da:6e:58:93:a1:5c:18:e5:f3:f8:7c:67:f4:d4:
9b:2d:7f:e5:62:cb:b3:56:96:e5:85:8e:51:ea:90:16:1d:9f:
31:9a:0f:ca:66:ea:cd:be:80:10:9d:94:2f:e2:1c:c3:18:71:
f0:95:6c:a4:55:ce:1f:f8:5e:0d:c3:03:54:62:b0:82:ac:29:
90:d9:7d:b9:09:7c:4a:41:a4:b0:da:f4:a3:a5:46:d7:87:44:
c4:e4:70:20:93:b0:31:8a:be:cf:f7:62:e8:71:f6:cc:7c:62:
f7:82:63:54:7d:1c:ca:fc:0c:66:a7:51:c3:38:35:f4:4f:28:
c6:26:42:d1:94:ef:c0:93:15:2b:44:aa:ec:50:e4:5d:d8:dc:
36:a7:ec:7d:90:6b:d2:7d:00:22:5a:84:02:46:b7:56:62:95:
e6:09:f4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:26 2026 by rpki-client