Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-eCJ-ZG7_zrfMqjvAFXvXm32E7g.roa
File: 1-eCJ-ZG7_zrfMqjvAFXvXm32E7g.roa (raw, json)
Hash identifier: Te92TgGM0eWQs1EJpw7zY5r1cHIOK6K72/LpXs3Lqas=
Subject key identifier: F9:E0:89:F9:91:BB:FF:3A:DF:32:A8:EF:00:55:EF:5E:6D:F6:13:B8
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019EA57FB540CE5BE9E35BBBDF361E7A9993
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-eCJ-ZG7_zrfMqjvAFXvXm32E7g.roa
Signing time: Mon 08 Jun 2026 04:31:10 +0000
ROA not before: Mon 08 Jun 2026 04:31:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 80.96.58.0/23 maxlen: 24
80.96.68.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.112.0/24 maxlen: 24
80.96.113.0/24 maxlen: 24
80.97.124.0/24 maxlen: 24
80.97.128.0/20 maxlen: 20
81.180.92.0/23 maxlen: 24
85.120.81.0/24 maxlen: 24
85.120.252.0/24 maxlen: 24
85.120.253.0/24 maxlen: 24
85.120.254.0/24 maxlen: 24
85.121.4.0/23 maxlen: 24
85.121.149.0/24 maxlen: 24
85.121.176.0/22 maxlen: 24
85.121.183.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
194.102.105.0/24 maxlen: 24
217.156.8.0/23 maxlen: 24
217.156.64.0/24 maxlen: 24
217.156.65.0/24 maxlen: 24
217.156.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a5:7f:b5:40:ce:5b:e9:e3:5b:bb:df:36:1e:7a:99:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 8 04:31:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9e089f991bbff3adf32a8ef0055ef5e6df613b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:96:ad:4b:02:21:29:85:a8:c3:e2:3a:2f:
eb:19:ca:46:7c:c5:e8:cc:93:d6:c2:7f:88:fd:13:
c1:11:3b:56:30:a2:cb:8b:df:50:35:74:c0:81:aa:
5d:8b:d4:fd:60:bf:5e:c8:1f:d5:87:d9:2e:1a:2b:
39:5a:f3:cf:a4:84:87:3d:fd:1c:a9:9e:bc:45:ea:
af:c3:47:ff:93:b5:33:73:fd:db:80:3e:92:14:c0:
4b:b2:2b:db:4b:e9:7d:56:f9:0e:9a:84:56:da:47:
e2:e2:cb:24:10:39:83:a8:83:12:5a:e3:d6:95:67:
00:aa:a8:35:bc:6d:ce:2e:77:18:52:3c:c2:c8:14:
e1:0d:89:65:3e:53:07:41:13:59:fa:27:8e:fd:0a:
43:2f:1d:bf:41:d8:6b:1c:53:e4:a1:17:28:d4:01:
2c:11:ae:33:89:af:b2:02:90:26:a0:05:f8:59:02:
41:5a:a0:24:a4:da:11:8c:2a:ce:57:5a:0b:86:53:
b7:b3:f7:d6:c1:34:89:89:75:64:b4:3c:01:6d:28:
cf:7e:b8:77:80:8e:44:2a:31:1b:d7:30:a3:4f:f7:
8b:93:78:4f:0b:37:1d:58:8e:22:46:2f:9b:83:5c:
e4:24:34:6d:f7:b2:b4:ed:a4:df:29:3a:fa:d9:9e:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E0:89:F9:91:BB:FF:3A:DF:32:A8:EF:00:55:EF:5E:6D:F6:13:B8
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-eCJ-ZG7_zrfMqjvAFXvXm32E7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.58.0/23
80.96.68.0/24
80.96.108.0/24
80.96.112.0/23
80.97.124.0/24
80.97.128.0/20
81.180.92.0/23
85.120.81.0/24
85.120.252.0-85.120.254.255
85.121.4.0/23
85.121.149.0/24
85.121.176.0/22
85.121.183.0/24
85.122.114.0/24
194.102.105.0/24
217.156.8.0/23
217.156.64.0/23
217.156.123.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:12:d3:41:2e:62:3f:54:f5:db:cd:4b:3d:d1:b5:0a:e5:10:
0b:51:27:11:0d:ef:b6:36:fe:05:ed:8e:20:f5:43:13:1a:fd:
f3:c5:90:6d:4f:7a:70:ad:26:17:5b:12:c9:0c:11:dd:d4:05:
e6:77:aa:5a:56:e1:9f:ce:2e:00:45:8f:83:9f:c2:bf:b3:95:
1a:7c:f5:e9:5d:08:10:50:a7:6a:24:e5:ea:f5:58:b5:66:8f:
75:a2:82:c3:fc:56:ef:56:59:37:84:eb:05:c0:85:6d:95:58:
ab:74:da:29:62:6a:55:6e:b1:ec:d2:92:23:65:0b:49:e4:84:
fa:b6:78:7e:f9:34:ee:68:58:dd:44:82:7e:1c:b7:cc:8c:bf:
65:0f:c1:f1:57:26:e5:36:b6:fa:62:ec:27:6a:19:5e:92:32:
34:7c:04:df:38:99:7f:22:67:23:67:83:4f:e1:0a:3a:d2:e1:
7e:84:ed:6d:e4:a9:47:0f:de:e4:88:a6:fa:a5:ab:22:2d:e8:
37:f6:ed:e9:43:8f:fd:fa:aa:de:41:29:4f:24:d8:97:04:88:
8b:a9:b2:2e:c7:ff:d6:49:d6:f8:b0:62:28:4d:1b:3d:b4:48:
d0:27:75:8e:b1:6a:a7:b6:13:4c:8e:1d:8f:11:5a:d1:07:8f:
1a:21:5b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:43 2026 by rpki-client