Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/MNQFqrdvbEoxedHfrXynKifNGnY.roa
File: MNQFqrdvbEoxedHfrXynKifNGnY.roa (raw, json)
Hash identifier: O31r8g9C5kBDn8OSezJHwFB/Y59lZjW3Z0fIfncmogI=
Subject key identifier: 30:D4:05:AA:B7:6F:6C:4A:31:79:D1:DF:AD:7C:A7:2A:27:CD:1A:76
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 019E3A86DA160C958B5E75803F1116C395BA
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/MNQFqrdvbEoxedHfrXynKifNGnY.roa
Signing time: Mon 18 May 2026 09:59:36 +0000
ROA not before: Mon 18 May 2026 09:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50436
IP address blocks: 5.28.64.0/18 maxlen: 19
5.28.64.0/19 maxlen: 19
5.28.96.0/19 maxlen: 19
37.120.0.0/17 maxlen: 18
77.64.128.0/17 maxlen: 24
77.64.162.0/23 maxlen: 23
77.64.172.0/24 maxlen: 24
77.64.176.0/23 maxlen: 23
77.64.183.0/24 maxlen: 24
77.64.220.0/23 maxlen: 24
82.119.0.0/19 maxlen: 22
83.221.64.0/19 maxlen: 24
89.186.128.0/19 maxlen: 24
92.206.0.0/16 maxlen: 24
92.206.8.0/21 maxlen: 24
92.206.22.0/23 maxlen: 24
92.206.32.0/20 maxlen: 24
92.206.48.0/20 maxlen: 24
92.206.76.0/22 maxlen: 24
92.206.208.0/24 maxlen: 24
92.206.209.0/24 maxlen: 24
92.206.250.0/23 maxlen: 23
92.206.254.0/23 maxlen: 24
94.139.0.0/19 maxlen: 20
94.139.28.0/23 maxlen: 23
95.168.128.0/19 maxlen: 24
217.68.167.0/24 maxlen: 24
2a02:2455:8000::/36 maxlen: 36
2a02:2455:9000::/36 maxlen: 40
2a02:2455:a000::/36 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:86:da:16:0c:95:8b:5e:75:80:3f:11:16:c3:95:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: May 18 09:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30d405aab76f6c4a3179d1dfad7ca72a27cd1a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:24:e1:f7:d4:13:9d:4b:de:8c:12:fb:f5:3d:
be:f6:01:d1:92:77:1c:92:0c:df:c4:ee:d9:1d:cf:
eb:6f:a5:ba:2c:f4:63:ff:da:f4:7f:be:61:cf:d0:
b7:8f:53:4a:c8:47:f8:81:bd:c1:e6:e6:2e:ae:f5:
f4:10:76:fc:2a:83:84:18:7e:cd:d4:61:60:74:d2:
a1:13:4c:ce:c7:88:66:97:bc:b0:5a:93:1b:85:a1:
42:d7:f9:38:b4:8d:60:69:77:7f:6e:0e:88:c6:9e:
f6:07:63:cd:e5:eb:12:75:37:8b:a6:e7:0b:a2:3f:
a1:bc:a5:e0:47:94:a9:40:75:4d:1d:07:8a:da:d9:
43:19:f4:7e:be:cd:52:14:c7:67:d2:e9:6a:19:8c:
9e:99:36:48:80:0a:f9:12:b8:42:ce:26:09:30:0b:
f2:06:44:bd:eb:1a:17:1f:e5:72:fb:c1:aa:f6:d8:
d2:f9:b4:0c:42:30:3a:9e:6c:63:6b:47:94:b7:75:
db:6c:07:70:8e:25:4d:b7:b6:8c:43:bd:ea:58:de:
9e:18:97:50:80:83:29:a9:90:85:d6:0a:11:62:ce:
c9:e9:5a:01:28:6a:8b:4e:b2:15:be:ec:6a:ab:d7:
47:8e:1a:c6:9a:6c:f7:15:5c:e9:d2:a2:db:62:91:
42:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D4:05:AA:B7:6F:6C:4A:31:79:D1:DF:AD:7C:A7:2A:27:CD:1A:76
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/MNQFqrdvbEoxedHfrXynKifNGnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.64.0/18
37.120.0.0/17
77.64.128.0/17
82.119.0.0/19
83.221.64.0/19
89.186.128.0/19
92.206.0.0/16
94.139.0.0/19
95.168.128.0/19
217.68.167.0/24
IPv6:
2a02:2455:8000::-2a02:2455:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3f:86:79:7f:b4:68:b9:d7:81:20:91:75:ac:6d:7b:5a:d5:7d:
86:b5:4f:63:45:d5:1f:28:2d:53:02:23:fc:98:f9:a6:48:ef:
6b:69:08:ee:8b:cd:91:58:51:08:38:24:fb:8f:c8:cc:79:e1:
9b:52:d8:a2:5a:8d:10:5e:9c:72:df:98:72:6d:f5:53:ec:79:
aa:a3:47:54:9f:23:87:0f:49:27:90:0b:e3:62:ac:50:50:ae:
2b:bc:9a:1a:fa:5c:0f:9c:57:e8:8c:ef:5e:c6:f4:52:78:9f:
f2:3e:ad:8b:f7:4b:4f:65:b1:37:ab:67:2e:0f:5b:f5:e6:7d:
0b:cc:67:91:92:49:17:4d:24:c7:33:8b:72:c7:aa:f6:64:48:
32:12:0f:6e:6a:28:f4:6b:d9:b1:11:5e:6d:ee:2d:c0:c4:cf:
b2:8a:ef:bc:e3:5b:77:b8:72:08:bf:26:c3:22:0c:c9:33:f2:
35:77:4a:e0:c8:f5:c8:78:12:cd:7d:3b:09:60:a2:25:46:90:
68:62:47:d6:8c:1a:17:46:21:ce:94:62:ba:51:e1:4e:c5:b7:
8c:fb:d3:ac:05:66:da:df:77:60:1b:3f:f1:fa:d7:e2:71:58:
1a:b0:84:68:4a:ed:ca:83:2e:d2:b6:c4:0c:8e:b7:f9:b1:22:
8f:24:eb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:15:09 2026 by rpki-client