Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/MjlFeY87Fuw4BUyxFlxj8p6hgkc.roa
File: MjlFeY87Fuw4BUyxFlxj8p6hgkc.roa (raw, json)
Hash identifier: WfGaTzFvV1fHjHe4I5TMtv/UZQaQnBppL5sd8Jukkv0=
Subject key identifier: 32:39:45:79:8F:3B:16:EC:38:05:4C:B1:16:5C:63:F2:9E:A1:82:47
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01A0C4FF1792EC1B362A9E7217649E122CEA
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/MjlFeY87Fuw4BUyxFlxj8p6hgkc.roa
Signing time: Mon 21 Sep 2026 17:24:07 +0000
ROA not before: Mon 21 Sep 2026 17:24:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64445
IP address blocks: 31.193.188.0/24 maxlen: 24
37.156.174.0/24 maxlen: 24
45.83.56.0/22 maxlen: 24
45.83.57.0/24 maxlen: 24
45.83.58.0/24 maxlen: 24
45.83.59.0/24 maxlen: 24
45.86.144.0/24 maxlen: 24
45.86.145.0/24 maxlen: 24
45.86.146.0/24 maxlen: 24
77.81.103.0/24 maxlen: 24
86.104.67.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
89.34.236.0/24 maxlen: 24
89.34.237.0/24 maxlen: 24
89.34.239.0/24 maxlen: 24
89.39.201.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
89.40.142.0/24 maxlen: 24
89.40.143.0/24 maxlen: 24
89.40.227.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.43.34.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
89.43.52.0/24 maxlen: 24
89.44.237.0/24 maxlen: 24
91.212.52.0/24 maxlen: 24
91.229.186.0/24 maxlen: 24
92.114.86.0/24 maxlen: 24
92.114.87.0/24 maxlen: 24
93.113.144.0/24 maxlen: 24
93.115.57.0/24 maxlen: 24
94.176.108.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
94.177.10.0/24 maxlen: 24
94.177.21.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
94.177.48.0/24 maxlen: 24
94.177.49.0/24 maxlen: 24
94.177.96.0/24 maxlen: 24
94.177.98.0/24 maxlen: 24
94.177.99.0/24 maxlen: 24
176.223.64.0/24 maxlen: 24
185.184.240.0/22 maxlen: 24
185.184.241.0/24 maxlen: 24
185.184.242.0/24 maxlen: 24
185.198.244.0/24 maxlen: 24
185.198.245.0/24 maxlen: 24
185.198.246.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
188.208.16.0/24 maxlen: 24
188.211.248.0/24 maxlen: 24
188.214.199.0/24 maxlen: 24
188.215.6.0/24 maxlen: 24
188.215.7.0/24 maxlen: 24
188.215.94.0/24 maxlen: 24
188.240.80.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
188.240.228.0/24 maxlen: 24
188.241.66.0/24 maxlen: 24
188.241.67.0/24 maxlen: 24
188.241.126.0/24 maxlen: 24
188.241.138.0/24 maxlen: 24
188.241.139.0/24 maxlen: 24
188.241.143.0/24 maxlen: 24
188.241.213.0/24 maxlen: 24
193.239.141.0/24 maxlen: 24
217.198.177.0/24 maxlen: 24
2a04:68c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:ff:17:92:ec:1b:36:2a:9e:72:17:64:9e:12:2c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Sep 21 17:24:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=323945798f3b16ec38054cb1165c63f29ea18247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:18:d3:45:12:14:90:61:7b:55:d6:34:7a:
a6:31:c2:d6:05:90:8e:d9:54:3b:b8:f2:c4:66:c6:
6b:09:33:9b:00:4d:b1:a9:01:cb:13:7b:8a:07:80:
f4:2b:16:9f:ce:1b:1e:59:38:4c:bc:ac:b2:6e:d7:
18:58:1b:8b:03:37:93:13:cd:ce:65:39:38:c7:63:
dd:0c:4b:7e:49:2e:5f:05:a9:bf:70:33:e8:0d:90:
d2:c0:a2:91:45:5c:26:ca:9f:48:85:51:b4:57:ee:
cb:33:d0:11:11:bd:df:ff:3a:eb:68:ef:98:67:04:
17:68:29:06:d5:35:b2:fe:ab:9f:3b:95:a4:29:eb:
a2:2f:67:2a:e3:8b:5c:f5:80:2a:54:d7:41:13:50:
5a:cf:8a:d1:22:27:06:67:01:b4:38:4a:62:c6:ff:
6a:91:56:70:f2:0d:46:a2:da:05:bd:20:d6:93:7a:
ba:8b:ec:4a:a4:c8:bf:96:3e:23:8b:05:76:ef:f6:
82:8f:d4:a3:b3:e4:79:cc:c4:b9:9d:dc:92:a0:c6:
2e:67:e9:ed:db:71:d6:3a:3f:63:cf:85:6d:26:ab:
e7:89:a3:ca:c2:a0:fd:d2:2f:d7:47:0b:20:c4:11:
a7:3b:46:94:c8:9d:1d:e3:0a:c4:25:c0:f9:dd:90:
25:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:39:45:79:8F:3B:16:EC:38:05:4C:B1:16:5C:63:F2:9E:A1:82:47
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/MjlFeY87Fuw4BUyxFlxj8p6hgkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.188.0/24
37.156.174.0/24
45.83.56.0/22
45.86.144.0-45.86.146.255
77.81.103.0/24
86.104.67.0/24
86.107.110.0/24
89.34.236.0/23
89.34.239.0/24
89.39.201.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.34.0/23
89.43.52.0/24
89.44.237.0/24
91.212.52.0/24
91.229.186.0/24
92.114.86.0/23
93.113.144.0/24
93.115.57.0/24
94.176.108.0/24
94.176.212.0/24
94.177.10.0/24
94.177.21.0/24
94.177.48.0/23
94.177.96.0/24
94.177.98.0/23
176.223.64.0/24
185.184.240.0/22
185.198.244.0-185.198.246.255
188.208.16.0/23
188.211.248.0/24
188.214.199.0/24
188.215.6.0/23
188.215.94.0/24
188.240.80.0/24
188.240.228.0/23
188.241.66.0/23
188.241.126.0/24
188.241.138.0/23
188.241.143.0/24
188.241.213.0/24
193.239.141.0/24
217.198.177.0/24
IPv6:
2a04:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
ae:1b:52:5f:e9:b7:9a:7e:04:08:57:6b:12:d0:49:c6:94:ba:
36:01:0a:54:9c:0f:c3:c0:ba:23:09:df:20:2c:43:78:38:cf:
da:bf:6d:90:cb:4d:db:25:3c:f1:0d:e2:7d:2f:12:53:37:b3:
68:4e:01:57:3f:a7:95:c0:b6:c3:f9:7b:30:63:28:1f:c5:57:
8d:f2:39:02:95:f2:c5:d6:9c:cc:d2:0c:c5:6e:c9:f5:c3:d7:
8e:81:68:79:c3:00:54:f3:84:ec:e4:d8:3d:f7:a8:15:68:ba:
7c:25:85:22:63:e4:02:c3:7c:05:1e:c8:c7:1e:4a:e7:83:6e:
1d:f4:16:50:cc:87:d2:10:25:48:bc:c4:2b:f7:3c:ea:4e:1f:
24:f9:d8:e4:9f:2a:de:f4:63:66:d3:81:e5:5d:4f:5a:aa:e6:
e8:41:1a:1c:73:50:ee:6e:2e:59:d3:b5:98:cf:f6:11:6c:b6:
d4:42:e9:ff:21:23:46:69:ba:f2:fc:d9:f5:40:f2:b7:50:54:
55:4d:af:2e:43:76:43:58:7a:5c:48:11:a8:75:e8:c3:1e:b1:
87:05:5e:41:75:b5:9f:fa:f7:e3:ac:68:ae:77:07:26:a2:72:
0f:4f:63:d0:94:bf:c2:98:a0:4f:25:a5:7e:22:a7:ec:0d:bb:
50:a7:fb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:31:40 2026 by rpki-client