Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/mF3piSy-jnS5Px73pOdLyBwpLDc.roa
File: mF3piSy-jnS5Px73pOdLyBwpLDc.roa (raw, json)
Hash identifier: DpGLpOFEpkxH6GUQ3DG6CgOD2t2rQ10aAlckjIhEa/Q=
Subject key identifier: 98:5D:E9:89:2C:BE:8E:74:B9:3F:1E:F7:A4:E7:4B:C8:1C:29:2C:37
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 01A09C0AC810FBF3A2736F12510B9F42B75E
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/mF3piSy-jnS5Px73pOdLyBwpLDc.roa
Signing time: Sun 13 Sep 2026 18:32:27 +0000
ROA not before: Sun 13 Sep 2026 18:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57395
IP address blocks: 5.183.48.0/22 maxlen: 22
89.207.153.0/24 maxlen: 24
176.98.160.0/24 maxlen: 24
176.98.161.0/24 maxlen: 24
176.98.162.0/24 maxlen: 24
176.98.163.0/24 maxlen: 24
176.98.164.0/24 maxlen: 24
176.98.165.0/24 maxlen: 24
176.98.166.0/24 maxlen: 24
176.98.167.0/24 maxlen: 24
185.181.168.0/24 maxlen: 24
185.181.169.0/24 maxlen: 24
185.181.170.0/24 maxlen: 24
185.181.171.0/24 maxlen: 24
185.254.0.0/24 maxlen: 24
185.254.1.0/24 maxlen: 24
185.254.3.0/24 maxlen: 24
193.150.64.0/24 maxlen: 24
2a0b:33c0:1::/48 maxlen: 48
2a0b:33c0:2::/48 maxlen: 48
2a0b:33c0:3::/48 maxlen: 48
2a0b:33c0:6::/48 maxlen: 48
2a0b:33c0:10::/48 maxlen: 48
2a0b:33c0:50::/48 maxlen: 48
2a0b:33c0:51::/48 maxlen: 48
2a0b:33c0:107::/48 maxlen: 48
2a0b:33c0:112::/48 maxlen: 48
2a0b:33c0:113::/48 maxlen: 48
2a0b:33c0:114::/48 maxlen: 48
2a0b:33c0:117::/48 maxlen: 48
2a0b:33c0:118::/48 maxlen: 48
2a0b:33c0:134::/48 maxlen: 48
2a0e:d200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:0a:c8:10:fb:f3:a2:73:6f:12:51:0b:9f:42:b7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Sep 13 18:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=985de9892cbe8e74b93f1ef7a4e74bc81c292c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:00:77:93:13:8d:88:b2:a0:c4:f8:5b:e9:
c6:e9:07:05:3a:89:94:ca:3f:dc:45:bb:67:28:09:
77:81:10:15:e1:db:fd:19:01:71:a2:06:a9:6e:fd:
d9:2c:d0:32:be:be:3d:aa:40:33:60:56:30:ec:ac:
ab:c2:00:d9:08:b2:6c:bd:df:aa:9f:33:ad:38:00:
ac:49:30:65:1f:cd:51:12:76:c4:07:92:44:a9:12:
a2:cf:2d:b4:eb:be:fa:47:ca:43:03:09:76:39:e2:
9a:9d:fd:f9:45:3e:bb:c9:60:4d:53:45:07:d6:de:
46:86:3e:8e:89:e7:11:82:b8:35:70:fd:cc:2d:a8:
2d:73:4a:de:63:b2:93:8d:0b:1d:97:00:bc:5e:f3:
a5:cf:a2:f2:bd:b1:a8:77:65:04:d4:d4:00:ef:61:
be:31:a7:88:ff:2e:28:e8:fe:92:d5:e1:ec:79:b0:
0f:6f:f2:df:1f:ff:01:36:98:fd:01:f9:95:68:bb:
d9:92:2a:2a:d2:19:80:53:9c:6b:9c:97:e5:6b:5e:
a5:ed:a1:b2:2b:73:fc:8c:43:da:e2:e6:37:75:b7:
14:b1:4d:8e:47:3d:e8:9e:79:b3:35:65:4e:1f:4a:
f8:1e:0c:23:7c:15:60:00:71:4a:13:54:a6:9a:b5:
65:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5D:E9:89:2C:BE:8E:74:B9:3F:1E:F7:A4:E7:4B:C8:1C:29:2C:37
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/mF3piSy-jnS5Px73pOdLyBwpLDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.48.0/22
89.207.153.0/24
176.98.160.0/21
185.181.168.0/22
185.254.0.0/23
185.254.3.0/24
193.150.64.0/24
IPv6:
2a0b:33c0:1::-2a0b:33c0:3:ffff:ffff:ffff:ffff:ffff
2a0b:33c0:6::/48
2a0b:33c0:10::/48
2a0b:33c0:50::/47
2a0b:33c0:107::/48
2a0b:33c0:112::-2a0b:33c0:114:ffff:ffff:ffff:ffff:ffff
2a0b:33c0:117::-2a0b:33c0:118:ffff:ffff:ffff:ffff:ffff
2a0b:33c0:134::/48
2a0e:d200::/29
Signature Algorithm: sha256WithRSAEncryption
97:ff:f9:36:81:2e:f1:d6:0c:d8:7d:a9:1d:74:e8:00:eb:8b:
19:00:61:6b:2b:84:23:3e:5d:30:52:7f:e8:22:c8:ef:9e:13:
4f:fb:9a:75:b6:9f:67:7a:16:5c:2e:2d:04:9b:93:da:b2:8f:
e2:2a:8c:9c:0a:a6:51:f9:3b:ba:73:3a:82:79:e8:d1:93:ce:
f5:df:72:ee:6f:28:9c:93:13:09:ff:ac:f0:73:65:5c:12:02:
45:c1:22:d5:2a:61:de:64:8f:b3:c9:32:47:14:e7:94:56:92:
a6:fc:4b:2a:78:dd:ee:35:85:dc:54:21:06:9c:2a:f2:4f:f1:
74:97:e3:f5:14:a6:05:0a:e6:fd:8b:6c:4e:9f:3d:b2:43:a9:
ac:7a:d1:4a:8c:d1:59:bc:07:20:a1:8d:f9:64:a7:fa:7b:20:
dc:9b:96:46:f9:94:1d:c0:ce:18:b5:3c:8a:10:8a:91:26:da:
9e:7e:20:23:91:10:2e:9b:dc:00:59:4b:e0:49:3a:1d:d5:20:
44:2f:35:2e:e1:e4:bb:8b:2e:db:07:1a:7c:12:48:4c:e2:25:
76:57:ac:39:b4:7b:8c:66:ed:e1:d1:8c:ff:6d:10:06:34:90:
32:2d:98:63:0e:46:1e:8b:d0:6a:91:51:f4:0c:f5:54:7a:4b:
dd:61:9a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:01:21 2026 by rpki-client