Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/mn83rmZT_xvF39iIUvANEDoD7u8.roa
File: mn83rmZT_xvF39iIUvANEDoD7u8.roa (raw, json)
Hash identifier: fTq2G2hv+R68ZQ05Fh6uayGS9PgUEOUmivCmPrgVDHQ=
Subject key identifier: 9A:7F:37:AE:66:53:FF:1B:C5:DF:D8:88:52:F0:0D:10:3A:03:EE:EF
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 019D7134D2EAFF0E855216E1456D3366F77C
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/mn83rmZT_xvF39iIUvANEDoD7u8.roa
Signing time: Thu 09 Apr 2026 07:46:20 +0000
ROA not before: Thu 09 Apr 2026 07:46:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3302
IP address blocks: 5.150.128.0/20 maxlen: 20
62.94.0.0/16 maxlen: 24
81.92.32.0/20 maxlen: 20
83.211.0.0/16 maxlen: 24
128.65.112.0/20 maxlen: 20
185.58.44.0/22 maxlen: 22
185.82.0.0/22 maxlen: 22
185.168.24.0/22 maxlen: 24
194.20.0.0/16 maxlen: 24
194.21.0.0/18 maxlen: 24
194.153.192.0/20 maxlen: 24
194.153.208.0/22 maxlen: 24
195.62.224.0/19 maxlen: 24
195.110.128.0/19 maxlen: 24
212.90.0.0/19 maxlen: 24
212.110.0.0/19 maxlen: 24
213.136.128.0/18 maxlen: 24
213.149.192.0/19 maxlen: 19
213.183.128.0/19 maxlen: 19
213.198.128.0/18 maxlen: 24
213.203.128.0/18 maxlen: 24
217.15.208.0/20 maxlen: 24
217.29.160.0/20 maxlen: 20
2001:750::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:34:d2:ea:ff:0e:85:52:16:e1:45:6d:33:66:f7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Apr 9 07:46:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a7f37ae6653ff1bc5dfd88852f00d103a03eeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:34:03:19:22:79:13:d4:52:ad:c2:1e:1a:
7e:ce:8b:cb:db:e5:c8:04:63:7d:26:52:69:4d:14:
30:e9:a8:e1:13:02:52:52:cd:ad:7b:09:a9:bd:78:
9d:25:47:8e:1d:28:3c:b1:86:02:08:bc:1a:55:d5:
c5:ab:5b:d6:43:b2:8a:8e:ac:86:ef:10:74:8c:17:
5b:1e:aa:ea:e3:a0:e9:a4:55:0d:a9:26:97:c5:9f:
a4:3e:a2:b9:60:49:d2:63:27:f8:25:a8:5a:cb:50:
1b:cf:84:02:09:18:b6:22:4b:9a:17:7c:64:64:89:
b3:99:e9:c2:c3:00:35:a1:63:10:c1:3b:df:8f:22:
b0:c5:a2:83:82:13:5e:e3:d7:2e:f9:39:a0:95:35:
af:08:a1:10:ee:45:dc:85:72:a6:7d:73:00:29:0b:
1b:bd:d1:97:f2:63:c5:6f:17:5b:eb:ff:f7:c5:8e:
d7:8b:92:c7:45:8a:51:6f:89:20:d2:d9:cc:ea:00:
41:f5:75:da:7f:7c:65:ce:dc:3d:22:e8:23:59:41:
62:dd:3e:b4:a5:b5:e5:d5:cd:0e:16:09:4d:ac:81:
11:1d:ab:bc:41:21:2a:a3:4e:52:fe:c5:d6:d5:19:
f3:28:13:ac:c0:e9:25:c6:c2:23:fa:ac:6c:5c:65:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7F:37:AE:66:53:FF:1B:C5:DF:D8:88:52:F0:0D:10:3A:03:EE:EF
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/mn83rmZT_xvF39iIUvANEDoD7u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.128.0/20
62.94.0.0/16
81.92.32.0/20
83.211.0.0/16
128.65.112.0/20
185.58.44.0/22
185.82.0.0/22
185.168.24.0/22
194.20.0.0-194.21.63.255
194.153.192.0-194.153.211.255
195.62.224.0/19
195.110.128.0/19
212.90.0.0/19
212.110.0.0/19
213.136.128.0/18
213.149.192.0/19
213.183.128.0/19
213.198.128.0/18
213.203.128.0/18
217.15.208.0/20
217.29.160.0/20
IPv6:
2001:750::/29
Signature Algorithm: sha256WithRSAEncryption
c9:b9:93:9e:27:a7:87:4b:2d:5e:ed:b9:4d:46:28:61:0b:82:
f1:8c:73:10:01:f1:d5:48:99:6c:8b:16:ac:47:5b:a2:4b:68:
64:75:0a:b5:5a:4e:6d:22:e9:6d:cb:5a:b3:35:4e:c3:7b:46:
25:8c:bb:75:09:11:e1:3c:ee:20:1f:8a:d2:3c:9e:2e:43:cf:
86:70:7b:6f:d0:c2:1c:a2:ed:9b:6d:d6:99:07:e9:c8:26:c0:
14:b3:9f:1b:c4:a8:48:4f:4b:41:ff:98:0f:ae:47:72:83:f9:
30:15:cb:a3:92:94:cb:d4:a6:70:af:38:ce:f6:2f:d4:b6:7c:
20:8e:c5:e5:ec:05:f9:a7:16:27:55:4e:73:d9:84:06:b0:e3:
46:f7:e1:d8:de:9b:23:30:fa:70:09:4f:de:94:74:15:a8:56:
3b:60:a6:f6:74:9d:ad:b3:a2:08:b1:bf:e7:fc:35:6d:18:31:
56:02:23:b8:a4:32:8d:8c:27:08:82:6c:3d:11:fc:c7:06:41:
31:6d:36:5b:2a:3a:37:9f:56:74:9b:89:a0:fc:b3:2b:65:ac:
d8:29:49:56:50:c4:ff:2f:88:f3:67:b2:73:fa:99:44:ae:ff:
52:0f:f1:68:8f:3c:cb:3d:d6:ac:63:bb:5d:db:b7:f4:c9:f1:
af:b9:8e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:47 2026 by rpki-client