Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/mCShbji5nGGSg0DvgCwhA3QRVYI.roa
File: mCShbji5nGGSg0DvgCwhA3QRVYI.roa (raw, json)
Hash identifier: R466gNUHIbTJwb7nPtUhfJuYvFNJOcUua5W3Sb5roIc=
Subject key identifier: 98:24:A1:6E:38:B9:9C:61:92:83:40:EF:80:2C:21:03:74:11:55:82
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 019D681AE4AC454754C281496FCF3D77B553
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/mCShbji5nGGSg0DvgCwhA3QRVYI.roa
Signing time: Tue 07 Apr 2026 13:21:25 +0000
ROA not before: Tue 07 Apr 2026 13:21:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28917
IP address blocks: 62.140.224.0/19 maxlen: 19
62.140.250.0/24 maxlen: 24
80.77.164.0/22 maxlen: 24
80.77.164.0/24 maxlen: 24
80.77.165.0/24 maxlen: 24
80.77.166.0/24 maxlen: 24
80.77.167.0/24 maxlen: 24
80.77.169.0/24 maxlen: 24
93.191.8.0/21 maxlen: 21
93.191.11.0/24 maxlen: 24
93.191.12.0/23 maxlen: 23
185.221.44.0/22 maxlen: 22
2a02:2518::/29 maxlen: 29
2a02:2518::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:1a:e4:ac:45:47:54:c2:81:49:6f:cf:3d:77:b5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Apr 7 13:21:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9824a16e38b99c61928340ef802c210374115582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:0a:fe:24:e9:c6:ce:40:1c:16:cd:69:30:
64:a7:4e:e2:6f:16:a0:16:2d:bc:65:7e:f1:49:33:
4c:b7:ea:ad:cb:8e:c5:fb:fa:2c:8d:0e:cb:ce:6b:
fa:44:8d:db:03:bf:70:d0:55:29:84:26:73:e6:d7:
6c:47:fc:e4:f0:b1:eb:28:bd:97:57:3c:a8:e9:63:
de:cd:4c:ef:f5:ed:54:c3:80:e3:db:ba:e7:e6:de:
c4:73:59:90:92:1f:99:db:cc:87:40:ea:65:85:1a:
74:4d:35:92:f9:c1:6e:c4:69:d5:d4:5d:ca:35:41:
35:02:a4:a2:9d:4c:2a:dd:ce:f1:3c:95:3b:51:ac:
d8:85:b0:eb:f1:55:ae:ce:e6:14:da:05:2a:da:0b:
27:01:e7:4c:b8:cf:a9:7a:a3:3f:b4:d4:cf:57:64:
7b:71:bc:07:cf:0d:03:e8:aa:4f:db:9f:63:37:50:
ec:af:b2:88:0f:78:74:8d:de:8b:bc:5e:07:fa:70:
cf:9d:69:91:3e:3d:10:66:53:3a:af:7f:6f:62:5c:
37:51:82:40:12:4a:00:44:f1:7e:c1:34:87:5c:1c:
0a:c6:e0:21:c3:55:05:48:0b:dd:3e:86:a1:d3:dd:
bd:f8:64:75:81:df:76:b8:f0:f8:10:92:97:42:d4:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:24:A1:6E:38:B9:9C:61:92:83:40:EF:80:2C:21:03:74:11:55:82
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/mCShbji5nGGSg0DvgCwhA3QRVYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.224.0/19
80.77.164.0/22
80.77.169.0/24
93.191.8.0/21
185.221.44.0/22
IPv6:
2a02:2518::/29
Signature Algorithm: sha256WithRSAEncryption
97:20:69:9c:2a:a9:7a:90:26:5f:82:51:d2:cb:4f:60:33:47:
d3:74:c1:2f:4b:7b:d6:ad:ed:a2:14:6d:ad:d8:85:a0:04:a9:
7d:68:92:41:aa:e8:a9:a7:00:a1:74:b1:8b:75:94:b1:c7:a2:
df:8b:fb:cd:9c:11:cb:3e:73:fb:a2:4c:fc:45:e5:94:e2:72:
94:9a:f3:a3:e4:99:1c:fe:bc:dc:8b:e4:9c:3d:33:eb:75:d3:
bd:7f:19:09:d8:92:64:a8:75:fb:25:15:81:d0:22:f2:49:1a:
11:bd:fc:8c:22:af:2b:c5:99:dd:63:17:9c:7c:c7:16:5c:71:
9c:4f:d5:4e:65:d8:21:05:93:1e:e0:24:8f:43:44:54:fe:01:
30:4c:f7:8d:71:d1:54:bd:3a:a0:46:f9:90:a6:0e:24:3c:2c:
40:b3:8e:d3:8f:ad:e4:a5:8b:23:9a:42:e7:e0:2e:fc:6e:ba:
fc:44:e9:73:f1:fb:04:29:1d:af:8b:69:18:8d:0d:a1:d3:fb:
74:9d:e5:ac:aa:d2:35:fd:d0:f4:28:4a:5a:d4:21:6f:c9:a4:
d2:e9:8c:da:be:0f:87:25:b1:67:89:77:e6:e7:c1:71:4f:da:
30:0d:7d:b8:98:ac:41:91:01:95:3c:cd:f2:15:3d:d0:46:c5:
10:83:6e:9f
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZ1oGuSsRUdUwoFJb889d7VTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0
MzE3MjUwHhcNMjYwNDA3MTMyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODI0YTE2ZTM4Yjk5YzYxOTI4MzQwZWY4MDJjMjEwMzc0MTE1NTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWEK/iTpxs5AHBbNaTBkp07ibxag
Fi28ZX7xSTNMt+qty47F+/osjQ7Lzmv6RI3bA79w0FUphCZz5tdsR/zk8LHrKL2X
Vzyo6WPezUzv9e1Uw4Dj27rn5t7Ec1mQkh+Z28yHQOplhRp0TTWS+cFuxGnV1F3K
NUE1AqSinUwq3c7xPJU7UazYhbDr8VWuzuYU2gUq2gsnAedMuM+peqM/tNTPV2R7
cbwHzw0D6KpP259jN1Dsr7KID3h0jd6LvF4H+nDPnWmRPj0QZlM6r39vYlw3UYJA
EkoARPF+wTSHXBwKxuAhw1UFSAvdPoah0929+GR1gd92uPD4EJKXQtRwEwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFJgkoW44uZxhkoNA74AsIQN0EVWCMB8GA1UdIwQY
MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt
ZjRjNWZjM2NhMmM0LzEvbUNTaGJqaTVuR0dTZzBEdmdDd2hBM1FSVllJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0
LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFPozgAwQC
UE2kAwQAUE2pAwQDXb8IAwQCud0sMA0EAgACMAcDBQMqAiUYMA0GCSqGSIb3DQEB
CwUAA4IBAQCXIGmcKql6kCZfglHSy09gM0fTdMEvS3vWre2iFG2t2IWgBKl9aJJB
quippwChdLGLdZSxx6Lfi/vNnBHLPnP7okz8ReWU4nKUmvOj5Jkc/rzci+ScPTPr
ddO9fxkJ2JJkqHX7JRWB0CLySRoRvfyMIq8rxZndYxecfMcWXHGcT9VOZdghBZMe
4CSPQ0RU/gEwTPeNcdFUvTqgRvmQpg4kPCxAs47Tj63kpYsjmkLn4C78brr8ROlz
8fsEKR2vi2kYjQ2h0/t0neWsqtI1/dD0KEpa1CFvyaTS6Yzavg+HJbFniXfm58Fx
T9owDX24mKxBkQGVPM3yFT3QRsUQg26f
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:12 2026 by rpki-client