Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/M9VkRsQh7O9SJFd5QSCVDx2QByQ.roa
File: M9VkRsQh7O9SJFd5QSCVDx2QByQ.roa (raw, json)
Hash identifier: 6o49cI6xASzQkI4in/kGeG35rJGXyyqi2u5rGr3Ibt0=
Subject key identifier: 33:D5:64:46:C4:21:EC:EF:52:24:57:79:41:20:95:0F:1D:90:07:24
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019FA8DC8FA4D100792BE61DB9F650C644AA
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/M9VkRsQh7O9SJFd5QSCVDx2QByQ.roa
Signing time: Tue 28 Jul 2026 13:14:14 +0000
ROA not before: Tue 28 Jul 2026 13:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 2.58.97.0/24 maxlen: 24
45.92.172.0/24 maxlen: 24
45.135.177.0/24 maxlen: 24
45.138.144.0/24 maxlen: 24
45.138.147.0/24 maxlen: 24
45.140.60.0/24 maxlen: 24
45.140.62.0/24 maxlen: 24
45.140.63.0/24 maxlen: 24
45.142.72.0/24 maxlen: 24
45.142.73.0/24 maxlen: 24
45.142.74.0/24 maxlen: 24
45.142.75.0/24 maxlen: 24
45.143.142.0/24 maxlen: 24
45.147.252.0/24 maxlen: 24
45.152.212.0/24 maxlen: 24
45.152.215.0/24 maxlen: 24
45.156.148.0/24 maxlen: 24
45.156.151.0/24 maxlen: 24
45.158.45.0/24 maxlen: 24
80.242.60.0/24 maxlen: 24
87.247.141.0/24 maxlen: 24
90.156.144.0/24 maxlen: 24
90.156.145.0/24 maxlen: 24
91.188.228.0/24 maxlen: 24
91.188.229.0/24 maxlen: 24
91.188.230.0/24 maxlen: 24
91.188.231.0/24 maxlen: 24
91.213.35.0/24 maxlen: 24
91.220.206.0/24 maxlen: 24
91.220.229.0/24 maxlen: 24
92.63.191.0/24 maxlen: 24
185.39.16.0/24 maxlen: 24
185.42.12.0/24 maxlen: 24
194.156.0.0/24 maxlen: 24
213.109.110.0/24 maxlen: 24
213.226.102.0/24 maxlen: 24
213.226.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:dc:8f:a4:d1:00:79:2b:e6:1d:b9:f6:50:c6:44:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 28 13:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33d56446c421ecef522457794120950f1d900724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:35:8f:41:8c:11:7e:b5:9a:30:ef:3a:5f:e0:
06:6c:e7:e5:59:06:45:8b:45:02:95:0f:d0:fb:20:
43:bd:9c:29:ad:5a:3d:fd:50:79:01:ec:67:f5:61:
8a:ba:16:19:04:46:66:00:9b:16:0d:5d:87:7c:c5:
aa:09:12:29:28:15:d1:65:0c:a2:93:cc:a4:5f:69:
c6:7b:e2:43:6d:15:8d:bd:c8:4f:0c:f0:9d:7a:43:
b8:18:d2:7d:e0:b5:79:85:3e:28:0c:d9:6b:d3:6d:
1e:54:6f:cd:85:85:1d:57:64:18:a1:71:8b:18:1c:
f6:02:d7:fa:57:bc:1c:4c:26:6f:46:ab:39:cb:11:
e2:ba:3b:0d:b9:a1:29:0f:93:3d:71:d0:29:e2:80:
5c:00:97:03:1b:d8:76:6e:7e:5f:1c:4c:e3:df:54:
aa:04:fa:8e:0e:22:99:c0:59:98:29:ce:2b:26:a2:
6f:cf:b6:5c:3b:c3:56:a8:3c:4d:d9:8c:b7:1a:48:
60:35:ac:f1:2b:e1:64:63:74:bc:81:98:05:6a:e2:
ce:d5:d8:52:2f:cb:fa:4e:e0:26:eb:71:73:53:a7:
f8:23:c5:cb:20:27:d9:cd:ee:9c:df:7a:82:aa:09:
f9:7b:64:de:88:aa:53:0a:0a:17:41:8d:92:42:24:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D5:64:46:C4:21:EC:EF:52:24:57:79:41:20:95:0F:1D:90:07:24
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/M9VkRsQh7O9SJFd5QSCVDx2QByQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.97.0/24
45.92.172.0/24
45.135.177.0/24
45.138.144.0/24
45.138.147.0/24
45.140.60.0/24
45.140.62.0/23
45.142.72.0/22
45.143.142.0/24
45.147.252.0/24
45.152.212.0/24
45.152.215.0/24
45.156.148.0/24
45.156.151.0/24
45.158.45.0/24
80.242.60.0/24
87.247.141.0/24
90.156.144.0/23
91.188.228.0/22
91.213.35.0/24
91.220.206.0/24
91.220.229.0/24
92.63.191.0/24
185.39.16.0/24
185.42.12.0/24
194.156.0.0/24
213.109.110.0/24
213.226.102.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:f7:31:5b:08:6f:c0:e7:c1:41:9c:be:64:48:d9:8a:3f:df:
40:3e:79:a4:9b:ce:86:10:da:04:7b:45:0e:2f:f6:6b:f6:ec:
10:8d:aa:0e:46:18:d8:85:49:ba:33:6f:ad:ac:ab:b2:22:0f:
e0:78:3c:e0:b3:92:9c:9f:72:50:3a:d9:4b:bd:0f:b0:8e:c5:
83:da:62:50:58:ed:e7:b2:ea:2e:4f:c4:9c:44:bb:59:0b:84:
7a:92:53:86:84:33:1f:32:55:19:e5:55:3f:54:cd:27:e4:a8:
20:02:0b:19:b8:c7:d8:1f:fb:cd:a2:f0:c8:62:92:41:7a:14:
e4:a7:f3:1e:38:ec:a9:11:bd:fe:17:95:a9:c7:19:7d:06:6a:
dc:c2:98:47:e6:9a:67:98:28:9c:58:e5:45:0e:00:cf:67:5d:
29:91:19:e0:37:e9:17:b1:6b:fc:42:51:72:bf:b9:e7:bd:f7:
77:06:fe:62:94:fa:63:89:46:ba:76:da:aa:aa:a5:a1:67:71:
c4:e4:d3:2e:40:81:b6:61:8d:74:c7:b1:84:ad:e5:ae:4f:08:
bb:e0:27:ef:97:30:15:2e:0c:02:ab:51:d8:a9:36:34:15:af:
99:80:3e:a1:bf:db:9d:ab:eb:f0:71:6d:0e:d2:7b:74:8d:f4:
69:ea:74:e6
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAZ+o3I+k0QB5K+YdufZQxkSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjYwNzI4MTMxNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2Q1NjQ0NmM0MjFlY2VmNTIyNDU3Nzk0MTIwOTUwZjFkOTAwNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzWPQYwRfrWaMO86X+AGbOflWQZF
i0UClQ/Q+yBDvZwprVo9/VB5Aexn9WGKuhYZBEZmAJsWDV2HfMWqCRIpKBXRZQyi
k8ykX2nGe+JDbRWNvchPDPCdekO4GNJ94LV5hT4oDNlr020eVG/NhYUdV2QYoXGL
GBz2Atf6V7wcTCZvRqs5yxHiujsNuaEpD5M9cdAp4oBcAJcDG9h2bn5fHEzj31Sq
BPqODiKZwFmYKc4rJqJvz7ZcO8NWqDxN2Yy3GkhgNazxK+FkY3S8gZgFauLO1dhS
L8v6TuAm63FzU6f4I8XLICfZze6c33qCqgn5e2TeiKpTCgoXQY2SQiQRpwIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFDPVZEbEIezvUiRXeUEglQ8dkAckMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvTTlWa1JzUWg3TzlTSkZkNVFTQ1ZEeDJRQnlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBrwQCAAEwgagDBAAC
OmEDBAAtXKwDBAAth7EDBAAtipADBAAtipMDBAAtjDwDBAEtjD4DBAItjkgDBAAt
j44DBAAtk/wDBAAtmNQDBAAtmNcDBAAtnJQDBAAtnJcDBAAtni0DBABQ8jwDBABX
940DBAFanJADBAJbvOQDBABb1SMDBABb3M4DBABb3OUDBABcP78DBAC5JxADBAC5
KgwDBADCnAADBADVbW4DBAHV4mYwDQYJKoZIhvcNAQELBQADggEBAHz3MVsIb8Dn
wUGcvmRI2Yo/30A+eaSbzoYQ2gR7RQ4v9mv27BCNqg5GGNiFSbozb62sq7IiD+B4
POCzkpyfclA62Uu9D7COxYPaYlBY7eey6i5PxJxEu1kLhHqSU4aEMx8yVRnlVT9U
zSfkqCACCxm4x9gf+82i8MhikkF6FOSn8x447KkRvf4XlanHGX0GatzCmEfmmmeY
KJxY5UUOAM9nXSmRGeA36Rexa/xCUXK/uee993cG/mKU+mOJRrp22qqqpaFnccTk
0y5AgbZhjXTHsYSt5a5PCLvgJ++XMBUuDAKrUdipNjQVr5mAPqG/252r6/BxbQ7S
e3SN9GnqdOY=
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:01:27 2026 by rpki-client