Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bNvw_3GWJpjWYoc9KlTzEDc19iM.roa
File: bNvw_3GWJpjWYoc9KlTzEDc19iM.roa (raw, json)
Hash identifier: gFRcHeVb9sdwZ9fQeg7hdEjJi6xKg1UG74wq119Hg+M=
Subject key identifier: 6C:DB:F0:FF:71:96:26:98:D6:62:87:3D:2A:54:F3:10:37:35:F6:23
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01A0A927BB79B497ECF4DAC09A6F4107FA2A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bNvw_3GWJpjWYoc9KlTzEDc19iM.roa
Signing time: Wed 16 Sep 2026 07:39:08 +0000
ROA not before: Wed 16 Sep 2026 07:39:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 80.96.58.0/23 maxlen: 24
80.96.68.0/24 maxlen: 24
80.96.108.0/24 maxlen: 24
80.96.112.0/24 maxlen: 24
80.96.113.0/24 maxlen: 24
80.97.124.0/24 maxlen: 24
80.97.128.0/20 maxlen: 20
81.180.92.0/23 maxlen: 24
85.120.81.0/24 maxlen: 24
85.120.216.0/23 maxlen: 24
85.120.252.0/24 maxlen: 24
85.120.253.0/24 maxlen: 24
85.120.254.0/24 maxlen: 24
85.121.4.0/23 maxlen: 24
85.121.149.0/24 maxlen: 24
85.121.176.0/22 maxlen: 24
85.121.183.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
194.102.105.0/24 maxlen: 24
217.156.8.0/23 maxlen: 24
217.156.13.0/24 maxlen: 24
217.156.64.0/24 maxlen: 24
217.156.65.0/24 maxlen: 24
217.156.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:27:bb:79:b4:97:ec:f4:da:c0:9a:6f:41:07:fa:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 16 07:39:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cdbf0ff71962698d662873d2a54f3103735f623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:33:f5:64:78:93:08:93:91:c2:de:29:cb:
68:be:09:bf:d5:5b:fc:d9:5a:ef:b7:92:13:ba:17:
79:b3:8f:0e:23:92:77:5f:7c:5a:f6:f6:eb:cb:b1:
6e:22:48:3f:ff:44:dc:a0:5c:25:dc:c1:fd:c0:bf:
c0:8f:b1:08:36:b6:14:f9:49:17:ad:1f:7c:87:59:
6d:1d:a4:1c:08:be:6c:75:73:92:9c:01:09:45:94:
9b:5e:51:8c:12:ac:30:e2:d0:dc:d9:25:8b:43:ad:
f9:76:47:cc:9a:7b:9c:1a:95:a2:57:86:9f:c8:1b:
54:d6:d8:e2:7f:3a:db:3d:de:52:85:79:01:cb:b5:
e6:38:8b:b1:5b:73:74:9d:c7:25:5f:78:00:6e:a8:
a4:64:13:b7:35:03:ea:61:30:c0:69:7b:fd:e1:07:
cc:79:f5:7f:fa:c4:4c:7d:61:34:c6:52:e4:b4:7f:
b2:97:ee:a0:ae:45:1c:78:89:9a:b5:a4:45:ad:c3:
e7:05:69:c0:54:e7:af:64:d3:b7:04:77:0a:db:ea:
58:1b:4d:e8:42:ec:c4:39:e2:20:d6:11:52:4b:75:
5a:77:8f:22:e4:7e:17:ac:76:f1:4e:11:50:77:3d:
78:73:67:e4:35:7b:dd:a9:e8:b8:3b:dc:e4:ed:f1:
a9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DB:F0:FF:71:96:26:98:D6:62:87:3D:2A:54:F3:10:37:35:F6:23
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bNvw_3GWJpjWYoc9KlTzEDc19iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.58.0/23
80.96.68.0/24
80.96.108.0/24
80.96.112.0/23
80.97.124.0/24
80.97.128.0/20
81.180.92.0/23
85.120.81.0/24
85.120.216.0/23
85.120.252.0-85.120.254.255
85.121.4.0/23
85.121.149.0/24
85.121.176.0/22
85.121.183.0/24
85.122.114.0/24
194.102.105.0/24
217.156.8.0/23
217.156.13.0/24
217.156.64.0/23
217.156.123.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:94:39:6d:34:d1:77:98:e9:15:dc:3d:60:0d:11:c1:50:1d:
cb:f8:30:55:03:f4:2f:62:1d:26:e6:6c:ef:01:9f:b2:0c:84:
ea:ea:3c:e7:8a:ed:9c:75:69:4c:86:56:c7:9b:ab:d9:81:42:
57:b0:61:52:8e:f4:a5:13:c2:51:e9:77:ad:80:04:00:24:76:
48:ac:3e:6f:a8:ff:69:99:74:f4:53:03:2a:66:3f:b2:be:96:
68:56:58:88:7f:fc:c1:97:14:a1:4d:68:60:c1:63:16:27:69:
50:04:e0:a8:62:8a:b4:2a:5a:75:a0:93:e7:dc:97:e5:ad:d1:
6c:0e:ae:a9:59:51:14:fd:15:b9:37:b7:65:18:8a:05:34:9c:
94:79:7f:f7:4c:2f:28:63:3a:0e:34:14:b9:11:00:cd:15:64:
34:9f:fa:30:c8:b3:64:fa:6c:79:05:5e:d0:c7:da:77:72:75:
95:94:a1:d0:c5:b9:a3:bc:a2:1a:b9:0f:8e:de:1d:74:08:34:
49:34:e6:3d:58:9c:aa:6d:b1:6b:9a:ad:55:a0:83:e0:b6:33:
40:26:ed:e1:29:53:5d:2e:f0:df:80:ec:5e:62:91:c2:a5:68:
db:f4:1a:0c:26:13:8a:c7:c4:b2:3f:9f:cb:fb:e0:14:d7:9a:
db:09:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:20:54 2026 by rpki-client