Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MX7DYjswkIEqf0bHWu2DDUj1o4M.roa
File: MX7DYjswkIEqf0bHWu2DDUj1o4M.roa (raw, json)
Hash identifier: GMGgFZPwa9Zjk31ziLNjtsB3jvPcxTdZz4tVg41Gdjg=
Subject key identifier: 31:7E:C3:62:3B:30:90:81:2A:7F:46:C7:5A:ED:83:0D:48:F5:A3:83
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019EB06BC06AB2D035322334BD61235876C6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MX7DYjswkIEqf0bHWu2DDUj1o4M.roa
Signing time: Wed 10 Jun 2026 07:25:12 +0000
ROA not before: Wed 10 Jun 2026 07:25:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 77.81.88.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
86.107.51.0/24 maxlen: 24
89.37.194.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.90.75.0/24 maxlen: 24
93.115.105.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
212.192.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:6b:c0:6a:b2:d0:35:32:23:34:bd:61:23:58:76:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 10 07:25:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=317ec3623b3090812a7f46c75aed830d48f5a383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:b0:ee:1d:d6:1c:77:56:37:33:af:9e:b6:
78:a5:ef:54:3e:b4:76:4c:ac:a8:0b:93:c9:87:47:
00:d1:ad:b3:c6:3c:7e:17:35:5a:57:ef:80:37:b3:
e9:ad:8a:f3:4d:39:6e:df:e9:41:48:e6:c3:62:5c:
8c:7b:52:ec:d6:c6:bf:e5:81:60:4d:63:53:43:76:
c3:d4:66:11:cb:6a:94:c9:d6:20:10:07:5f:97:ab:
8a:53:8c:98:cf:6e:13:5b:ea:e7:31:57:74:f2:bd:
54:8e:db:93:35:43:ef:c0:c9:ae:d2:54:40:ff:4e:
cb:ac:b4:63:96:11:0f:fb:84:3e:cf:41:60:c5:3f:
ba:ed:0d:34:38:71:fb:3c:df:3c:ca:af:b9:0b:48:
33:8c:6b:3d:ef:c4:0c:0f:07:1e:37:c9:cf:70:b0:
ea:43:2c:4f:3a:d1:42:25:bf:f3:9f:94:c4:94:f9:
b8:4d:c9:c4:18:b4:4d:7a:cc:a8:c3:85:b9:52:6a:
f4:52:58:65:4c:e9:c9:b5:00:2b:72:ac:e5:a6:19:
56:80:1e:f3:9c:4f:29:7c:28:f7:48:13:c3:c2:26:
1e:c2:b3:90:01:e8:b7:0c:e9:02:6b:03:4d:8e:43:
9a:10:7b:65:61:c7:e9:a6:d6:b4:4d:17:87:af:53:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7E:C3:62:3B:30:90:81:2A:7F:46:C7:5A:ED:83:0D:48:F5:A3:83
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MX7DYjswkIEqf0bHWu2DDUj1o4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.88.0/24
77.81.100.0/24
86.105.4.0/24
86.107.51.0/24
89.37.194.0/24
89.43.62.0/24
89.45.162.0/24
91.132.51.0/24
93.90.75.0/24
93.115.105.0/24
188.241.137.0/24
194.135.18.0/24
212.192.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:29:3c:48:5e:cc:77:6d:19:c1:48:93:2d:e8:6b:48:32:9e:
b0:8d:41:c2:64:62:1e:3b:cb:de:cb:46:ef:cc:14:96:7a:70:
7c:e3:0a:11:e6:d3:18:68:98:15:f2:36:07:2d:a1:56:03:ff:
6d:0d:cc:f1:b9:2e:8d:3c:b1:b8:85:c5:10:7e:7f:4d:bd:19:
c5:22:31:02:47:82:24:3e:42:28:0d:c4:93:41:7e:dc:33:ef:
51:ed:bf:67:39:9b:02:bd:3a:e8:0e:59:27:b4:f1:c7:28:57:
52:7b:1d:f1:3a:97:50:a9:84:61:f5:02:81:1e:6d:60:45:22:
6d:ef:7e:e1:20:15:02:b7:4f:92:0b:31:2e:d8:90:4d:f4:8e:
16:ff:73:9d:45:38:c8:fa:cb:bc:a9:15:40:37:b0:fa:44:09:
d7:28:bf:bf:f5:35:ce:76:1f:1a:80:99:6b:7b:48:d2:52:7a:
e2:db:d6:37:fc:fa:e6:03:ff:63:8e:d5:54:ad:86:4c:a9:94:
65:25:c7:98:2e:88:6d:21:7c:5c:96:c1:8e:51:4d:65:7f:6e:
e8:75:fe:95:4b:40:40:58:a9:b8:d1:83:9a:89:44:73:3c:9b:
78:19:aa:ff:0b:65:b8:9e:a7:c6:b4:ab:6c:87:85:76:c1:5a:
1d:01:ea:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:35 2026 by rpki-client