Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MtmpJX3_rvDdoTG8lXobTlQHu4c.roa
File: MtmpJX3_rvDdoTG8lXobTlQHu4c.roa (raw, json)
Hash identifier: SHyjHPfVzhMtD6Rr2X+gUDmXKb0x6B9AveP7Lhqqb7Y=
Subject key identifier: 32:D9:A9:25:7D:FF:AE:F0:DD:A1:31:BC:95:7A:1B:4E:54:07:BB:87
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019C8B06D6F50CCDFF59E92C01063B871ECE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MtmpJX3_rvDdoTG8lXobTlQHu4c.roa
Signing time: Mon 23 Feb 2026 15:03:27 +0000
ROA not before: Mon 23 Feb 2026 15:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 79.121.132.0/22 maxlen: 24
79.121.132.0/23 maxlen: 24
79.121.134.0/23 maxlen: 24
79.121.140.0/22 maxlen: 24
79.121.140.0/23 maxlen: 24
79.121.142.0/23 maxlen: 24
79.121.144.0/23 maxlen: 24
79.121.148.0/22 maxlen: 24
79.121.148.0/23 maxlen: 24
79.121.150.0/23 maxlen: 24
79.121.154.0/23 maxlen: 24
79.121.156.0/23 maxlen: 24
79.121.162.0/23 maxlen: 24
79.121.164.0/22 maxlen: 24
79.121.164.0/23 maxlen: 24
79.121.166.0/23 maxlen: 24
79.121.168.0/23 maxlen: 24
79.121.178.0/23 maxlen: 24
79.121.180.0/23 maxlen: 24
79.121.184.0/23 maxlen: 24
79.121.200.0/21 maxlen: 24
79.121.212.0/22 maxlen: 24
79.121.212.0/23 maxlen: 24
79.121.214.0/23 maxlen: 24
79.121.216.0/22 maxlen: 24
79.121.216.0/23 maxlen: 24
79.121.218.0/23 maxlen: 24
79.121.222.0/23 maxlen: 24
79.121.226.0/23 maxlen: 24
79.121.232.0/22 maxlen: 24
79.121.232.0/23 maxlen: 24
79.121.234.0/23 maxlen: 24
79.121.238.0/23 maxlen: 24
87.82.214.0/23 maxlen: 23
92.244.174.0/23 maxlen: 24
92.244.176.0/23 maxlen: 24
92.244.180.0/23 maxlen: 24
92.244.182.0/23 maxlen: 24
92.244.184.0/23 maxlen: 24
92.244.190.0/23 maxlen: 24
93.152.73.0/24 maxlen: 24
93.152.87.0/24 maxlen: 24
95.177.0.0/23 maxlen: 24
95.177.8.0/23 maxlen: 24
95.177.20.0/23 maxlen: 24
95.177.54.0/23 maxlen: 24
95.177.64.0/23 maxlen: 24
95.177.68.0/22 maxlen: 24
95.177.68.0/23 maxlen: 24
95.177.70.0/23 maxlen: 24
95.177.72.0/23 maxlen: 24
95.177.76.0/22 maxlen: 24
95.177.76.0/23 maxlen: 24
95.177.78.0/23 maxlen: 24
95.177.80.0/22 maxlen: 24
95.177.80.0/23 maxlen: 24
95.177.82.0/23 maxlen: 24
95.177.104.0/22 maxlen: 24
95.177.104.0/23 maxlen: 24
95.177.106.0/23 maxlen: 24
95.177.114.0/23 maxlen: 24
95.177.124.0/22 maxlen: 24
95.177.124.0/23 maxlen: 24
95.177.126.0/23 maxlen: 24
109.174.176.0/22 maxlen: 24
109.174.180.0/22 maxlen: 24
109.174.184.0/22 maxlen: 24
109.174.188.0/22 maxlen: 24
109.204.6.0/23 maxlen: 24
109.204.12.0/23 maxlen: 24
109.204.20.0/23 maxlen: 24
109.204.28.0/23 maxlen: 24
109.204.32.0/23 maxlen: 24
109.204.40.0/23 maxlen: 24
109.204.44.0/23 maxlen: 24
109.204.50.0/23 maxlen: 24
109.204.54.0/23 maxlen: 24
109.204.58.0/23 maxlen: 24
109.204.60.0/23 maxlen: 24
109.204.72.0/23 maxlen: 24
109.204.82.0/23 maxlen: 24
109.204.92.0/23 maxlen: 24
109.204.95.0/24 maxlen: 24
109.204.101.0/24 maxlen: 24
109.204.112.0/23 maxlen: 24
109.204.120.0/23 maxlen: 24
109.204.124.0/23 maxlen: 24
195.40.18.0/23 maxlen: 23
195.40.26.0/23 maxlen: 24
195.40.28.0/23 maxlen: 23
195.40.30.0/23 maxlen: 24
195.40.86.0/24 maxlen: 24
195.40.100.0/23 maxlen: 24
195.40.114.0/23 maxlen: 24
195.40.116.0/23 maxlen: 23
195.40.118.0/23 maxlen: 24
195.40.162.0/23 maxlen: 23
195.40.166.0/23 maxlen: 24
195.40.180.0/24 maxlen: 24
195.40.188.0/23 maxlen: 23
195.172.98.0/23 maxlen: 23
195.172.102.0/23 maxlen: 24
195.172.110.0/23 maxlen: 24
195.172.112.0/23 maxlen: 24
195.172.124.0/24 maxlen: 24
195.172.204.0/23 maxlen: 24
195.172.212.0/23 maxlen: 23
195.172.214.0/23 maxlen: 24
195.172.216.0/23 maxlen: 24
195.172.218.0/23 maxlen: 24
195.172.220.0/23 maxlen: 24
195.172.222.0/23 maxlen: 24
212.134.11.0/24 maxlen: 24
212.134.65.0/24 maxlen: 24
212.134.72.0/23 maxlen: 23
212.134.78.0/24 maxlen: 24
212.135.0.0/24 maxlen: 24
212.135.2.0/23 maxlen: 23
212.135.5.0/24 maxlen: 24
212.135.10.0/23 maxlen: 24
212.135.174.0/24 maxlen: 24
212.135.178.0/24 maxlen: 24
212.135.190.0/23 maxlen: 24
212.135.236.0/23 maxlen: 24
217.79.104.0/22 maxlen: 24
217.79.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:06:d6:f5:0c:cd:ff:59:e9:2c:01:06:3b:87:1e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Feb 23 15:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32d9a9257dffaef0dda131bc957a1b4e5407bb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:76:fb:52:7e:70:f5:5b:d6:9b:85:34:4b:
10:66:23:17:d1:74:99:48:ae:64:ef:73:69:c0:e0:
e4:de:89:f6:38:a7:83:f6:93:2f:93:93:e1:6a:3e:
51:29:54:eb:e2:93:18:ef:3d:6a:e2:25:fc:df:27:
18:3f:9b:f9:53:29:2e:57:f2:59:b4:77:b9:26:43:
c6:40:41:d5:31:16:02:c6:f5:ba:5a:9d:89:62:5d:
cb:d2:7f:a3:2f:71:e0:ec:52:46:15:8e:7b:b6:a7:
8b:88:0e:05:13:c3:01:a8:6c:b8:dd:0e:32:57:e8:
b6:db:e2:68:c2:71:b0:7b:8b:6a:c1:05:b5:1b:fd:
d0:08:6c:20:a0:79:97:df:92:77:15:24:89:cf:f9:
1e:2e:fa:f9:99:49:46:8f:23:a3:11:06:d5:15:2a:
93:85:ef:79:4a:66:d0:f5:b6:c3:39:84:05:d6:90:
2c:32:e1:4b:09:7b:74:75:12:9e:19:57:ac:a3:95:
77:28:f1:ec:02:67:6a:31:f5:da:b0:06:38:de:34:
be:79:ad:dd:03:f1:98:bf:34:6a:a3:8e:c7:4b:16:
cb:b8:06:ad:7b:43:0d:33:59:f1:6a:a5:ae:24:fd:
6a:38:4e:61:52:06:2c:40:7d:54:cf:f1:6e:53:28:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D9:A9:25:7D:FF:AE:F0:DD:A1:31:BC:95:7A:1B:4E:54:07:BB:87
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MtmpJX3_rvDdoTG8lXobTlQHu4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.132.0/22
79.121.140.0-79.121.145.255
79.121.148.0/22
79.121.154.0-79.121.157.255
79.121.162.0-79.121.169.255
79.121.178.0-79.121.181.255
79.121.184.0/23
79.121.200.0/21
79.121.212.0-79.121.219.255
79.121.222.0/23
79.121.226.0/23
79.121.232.0/22
79.121.238.0/23
87.82.214.0/23
92.244.174.0-92.244.177.255
92.244.180.0-92.244.185.255
92.244.190.0/23
93.152.73.0/24
93.152.87.0/24
95.177.0.0/23
95.177.8.0/23
95.177.20.0/23
95.177.54.0/23
95.177.64.0/23
95.177.68.0-95.177.73.255
95.177.76.0-95.177.83.255
95.177.104.0/22
95.177.114.0/23
95.177.124.0/22
109.174.176.0/20
109.204.6.0/23
109.204.12.0/23
109.204.20.0/23
109.204.28.0/23
109.204.32.0/23
109.204.40.0/23
109.204.44.0/23
109.204.50.0/23
109.204.54.0/23
109.204.58.0-109.204.61.255
109.204.72.0/23
109.204.82.0/23
109.204.92.0/23
109.204.95.0/24
109.204.101.0/24
109.204.112.0/23
109.204.120.0/23
109.204.124.0/23
195.40.18.0/23
195.40.26.0-195.40.31.255
195.40.86.0/24
195.40.100.0/23
195.40.114.0-195.40.119.255
195.40.162.0/23
195.40.166.0/23
195.40.180.0/24
195.40.188.0/23
195.172.98.0/23
195.172.102.0/23
195.172.110.0-195.172.113.255
195.172.124.0/24
195.172.204.0/23
195.172.212.0-195.172.223.255
212.134.11.0/24
212.134.65.0/24
212.134.72.0/23
212.134.78.0/24
212.135.0.0/24
212.135.2.0/23
212.135.5.0/24
212.135.10.0/23
212.135.174.0/24
212.135.178.0/24
212.135.190.0/23
212.135.236.0/23
217.79.104.0/22
217.79.116.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:74:20:f9:45:51:12:57:75:3a:1d:62:fa:80:0f:1d:d6:14:
86:39:81:26:97:5a:be:17:fc:dc:2c:86:20:33:44:98:d9:83:
a1:3b:6b:46:88:a0:43:69:a7:8d:25:f2:b7:c2:5f:35:d0:9d:
c1:8b:67:e0:73:d4:6f:f2:02:d2:6c:ca:75:21:ab:11:93:f4:
e6:d5:f6:74:8f:d6:45:2a:ac:81:bf:f1:6f:dd:60:26:b5:d1:
22:e7:91:54:e9:ad:14:98:03:52:47:39:57:3f:8f:ad:c3:ab:
ef:48:88:79:58:fd:e1:5f:07:d6:c2:28:df:b5:48:f6:5c:a5:
3b:50:32:7b:de:ac:37:ef:dc:fc:4e:5e:c3:63:04:0c:72:6d:
77:52:ae:35:cc:73:f5:9d:be:4f:fe:08:63:00:4a:b1:09:24:
4b:03:85:aa:a2:2e:7b:23:e6:99:fc:53:a2:13:be:0f:76:b5:
76:93:e2:1a:3c:32:8a:93:cb:ce:92:eb:b5:0f:0b:13:13:61:
67:9e:4f:5f:fc:a8:b8:2d:d1:5d:b9:d6:1b:b8:31:ef:8b:5a:
c2:af:08:36:d2:a0:14:83:7a:fe:78:d6:3f:f9:10:e5:bf:6c:
3a:1a:a1:82:20:0b:38:04:40:a9:c3:ad:ce:28:8c:04:e1:51:
ea:32:86:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:34 2026 by rpki-client