Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1nZgaZ0hwXC0K8kiDi1M17MPGAE.roa
File: 1nZgaZ0hwXC0K8kiDi1M17MPGAE.roa (raw, json)
Hash identifier: ApfrEo9s1WRcL96yxPbnFWArmjhcEcFt3WDI+wKilnc=
Subject key identifier: D6:76:60:69:9D:21:C1:70:B4:2B:C9:22:0E:2D:4C:D7:B3:0F:18:01
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019C9A2A84D7BB600BD4E2A26CC7D6260658
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1nZgaZ0hwXC0K8kiDi1M17MPGAE.roa
Signing time: Thu 26 Feb 2026 13:36:43 +0000
ROA not before: Thu 26 Feb 2026 13:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8708
IP address blocks: 80.96.12.0/24 maxlen: 24
80.96.43.0/24 maxlen: 24
80.96.47.0/24 maxlen: 24
80.96.51.0/24 maxlen: 24
80.96.57.0/24 maxlen: 24
80.96.67.0/24 maxlen: 24
80.96.69.0/24 maxlen: 24
80.96.72.0/24 maxlen: 24
80.96.79.0/24 maxlen: 24
80.96.219.0/24 maxlen: 24
80.97.147.0/24 maxlen: 24
80.97.148.0/24 maxlen: 24
80.97.149.0/24 maxlen: 24
81.180.27.0/24 maxlen: 24
81.181.30.0/24 maxlen: 24
81.181.112.0/24 maxlen: 24
81.181.128.0/24 maxlen: 24
81.181.147.0/24 maxlen: 24
81.181.167.0/24 maxlen: 24
81.181.246.0/24 maxlen: 24
85.120.20.0/24 maxlen: 24
85.120.23.0/24 maxlen: 24
193.226.16.0/24 maxlen: 24
193.226.116.0/24 maxlen: 24
193.226.125.0/24 maxlen: 24
193.226.127.0/24 maxlen: 24
193.230.158.0/24 maxlen: 24
193.230.171.0/24 maxlen: 24
193.230.229.0/24 maxlen: 24
193.231.75.0/24 maxlen: 24
193.231.108.0/24 maxlen: 24
193.231.184.0/24 maxlen: 24
193.231.194.0/24 maxlen: 24
193.231.233.0/24 maxlen: 24
193.231.236.0/24 maxlen: 24
193.231.238.0/24 maxlen: 24
193.231.252.0/24 maxlen: 24
194.102.98.0/24 maxlen: 24
194.102.134.0/24 maxlen: 24
194.102.229.0/24 maxlen: 24
194.153.224.0/24 maxlen: 24
194.153.227.0/24 maxlen: 24
217.156.14.0/24 maxlen: 24
217.156.41.0/24 maxlen: 24
217.156.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:2a:84:d7:bb:60:0b:d4:e2:a2:6c:c7:d6:26:06:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 26 13:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d67660699d21c170b42bc9220e2d4cd7b30f1801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:1b:3d:b1:e0:e6:4d:8c:4e:e4:08:74:b0:
41:32:bf:df:0b:d9:6c:b2:73:1c:6d:58:c7:5a:22:
0f:c5:b4:8d:33:63:fb:77:48:98:13:58:68:ac:0e:
85:01:82:00:18:c3:18:49:43:93:be:06:c8:82:00:
20:f9:16:00:42:3c:8f:58:81:85:31:29:ef:5d:58:
c1:6a:e9:0b:98:a2:24:65:1d:c6:ce:89:7b:c7:d3:
47:8f:7c:6b:0a:e9:0e:9d:ba:65:8f:a1:92:c9:25:
4b:3d:44:90:4b:03:60:1e:4d:71:e4:d2:4b:8b:ee:
29:c5:4d:89:90:bb:1f:be:2c:de:b3:b3:c0:f9:f9:
bd:b8:82:60:a9:e4:ad:b4:14:65:e6:3a:e3:fa:70:
63:e0:29:0c:50:cc:e5:1c:e6:fe:77:41:0f:ad:cd:
96:a8:65:0c:fd:46:00:40:a1:61:21:c0:af:42:93:
e4:ed:4c:ad:6b:ae:59:af:7b:2c:d9:7f:99:a3:c6:
a6:e6:1a:7d:fe:03:5a:1b:28:54:21:e7:a9:f3:6c:
7b:da:c7:f0:75:43:af:63:f9:4d:90:f6:4a:f3:ba:
36:ca:28:0d:6d:6e:f2:35:b4:64:12:c5:56:48:fb:
c3:c6:02:9b:a2:c2:1e:90:85:cb:cc:60:08:0a:31:
42:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:76:60:69:9D:21:C1:70:B4:2B:C9:22:0E:2D:4C:D7:B3:0F:18:01
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1nZgaZ0hwXC0K8kiDi1M17MPGAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.12.0/24
80.96.43.0/24
80.96.47.0/24
80.96.51.0/24
80.96.57.0/24
80.96.67.0/24
80.96.69.0/24
80.96.72.0/24
80.96.79.0/24
80.96.219.0/24
80.97.147.0-80.97.149.255
81.180.27.0/24
81.181.30.0/24
81.181.112.0/24
81.181.128.0/24
81.181.147.0/24
81.181.167.0/24
81.181.246.0/24
85.120.20.0/24
85.120.23.0/24
193.226.16.0/24
193.226.116.0/24
193.226.125.0/24
193.226.127.0/24
193.230.158.0/24
193.230.171.0/24
193.230.229.0/24
193.231.75.0/24
193.231.108.0/24
193.231.184.0/24
193.231.194.0/24
193.231.233.0/24
193.231.236.0/24
193.231.238.0/24
193.231.252.0/24
194.102.98.0/24
194.102.134.0/24
194.102.229.0/24
194.153.224.0/24
194.153.227.0/24
217.156.14.0/24
217.156.41.0/24
217.156.97.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a0:24:18:7d:a6:a8:5d:ee:5c:76:79:4c:67:f0:80:17:08:
03:f7:37:fb:7d:cd:69:53:c4:5b:ca:75:c7:a9:b0:3c:a3:83:
5f:95:2e:f4:e6:3f:3a:f3:34:92:e9:5d:52:e6:cd:96:b9:50:
58:60:f7:10:fc:94:7c:33:5d:1c:ec:a6:86:07:7a:e1:56:f1:
0a:65:65:99:b6:32:ae:94:9c:2e:18:3e:6e:85:e0:a1:0f:04:
dd:49:e2:dd:da:49:00:a6:17:f8:d0:88:e1:22:8d:93:8e:7c:
ea:1d:75:68:7b:e8:68:f3:e7:7f:36:5f:8a:cf:e0:3e:0f:e5:
a3:3c:b3:74:39:92:8f:28:8b:ee:60:50:75:a5:51:57:a9:40:
e3:b8:3b:33:36:60:77:36:47:22:9c:05:8b:69:df:c1:28:57:
2a:ae:4b:d0:2a:ec:71:bf:93:09:c1:3c:09:60:7e:fb:0a:7f:
30:16:70:90:06:7c:2f:e0:54:10:b2:ec:1b:2d:f4:ad:ef:74:
0f:51:2f:d6:2b:3d:c4:bd:5f:14:98:aa:57:84:32:e1:12:7e:
14:42:dd:1b:58:fc:a5:eb:c6:00:94:b5:cd:67:bc:5d:82:c4:
67:3f:7f:ea:05:b2:c7:83:14:2b:4d:af:52:4b:b6:fa:51:93:
72:c0:14:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:32:35 2026 by rpki-client