Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/MrPdgxPVpPbyIawV9IGRafjQbFo.roa
File: MrPdgxPVpPbyIawV9IGRafjQbFo.roa (raw, json)
Hash identifier: g8YbCkMwXpa65DyWs0yFkmZwZtoUpdNbQ43ihXGDX0k=
Subject key identifier: 32:B3:DD:83:13:D5:A4:F6:F2:21:AC:15:F4:81:91:69:F8:D0:6C:5A
Certificate issuer: /CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Certificate serial: 01A1DA5D5A480C4BEF51518F5B7B0B57774F
Authority key identifier: B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/MrPdgxPVpPbyIawV9IGRafjQbFo.roa
Signing time: Sat 14 Nov 2026 14:01:53 +0000
ROA not before: Sat 14 Nov 2026 14:01:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47849
IP address blocks: 83.222.162.0/24 maxlen: 24
185.165.223.0/24 maxlen: 24
212.5.55.0/24 maxlen: 24
212.70.134.0/23 maxlen: 23
212.70.134.0/24 maxlen: 24
212.70.135.0/24 maxlen: 24
212.70.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:5d:5a:48:0c:4b:ef:51:51:8f:5b:7b:0b:57:77:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Validity
Not Before: Nov 14 14:01:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32b3dd8313d5a4f6f221ac15f4819169f8d06c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:25:c6:b4:ba:b9:09:b3:4e:56:0d:a5:49:
c2:4b:0e:2e:00:10:c2:68:17:22:ec:d9:62:b2:1c:
2a:94:0f:86:8c:b5:95:25:55:e4:99:1f:06:8a:d7:
e8:82:ae:55:bc:89:9d:5f:7d:20:a5:59:da:03:7e:
2d:22:91:d1:aa:08:cf:10:e8:8c:2a:3c:ef:c8:a3:
27:f3:73:b7:58:6b:09:89:18:e7:a8:43:78:4d:33:
76:ac:4b:62:cd:0f:2f:a2:bb:bf:5e:f3:9c:f2:41:
68:1a:a2:39:59:6d:51:f5:5c:40:e7:b8:3a:36:e4:
fe:d7:5e:d7:ca:26:5a:88:8c:74:0f:48:2d:49:e5:
0c:9e:45:e1:d9:90:92:e9:a1:2e:9e:bf:8c:52:01:
1f:94:8c:7f:9b:18:0e:b6:da:9c:11:57:52:b3:5c:
4d:33:ff:54:27:46:46:e4:f3:8b:e1:cc:7a:b4:1f:
1b:17:2e:5d:85:45:10:64:66:2c:0d:8e:91:a3:f6:
ad:49:94:d4:62:dd:0f:7c:db:4f:b4:58:a5:a3:80:
44:7f:dd:84:12:4f:53:70:a7:e5:80:26:ad:39:a2:
49:a2:71:8e:cc:76:3b:75:40:db:62:8f:7d:db:3d:
9f:1a:56:e3:93:77:71:1e:8a:f3:8f:12:6c:f4:91:
6c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B3:DD:83:13:D5:A4:F6:F2:21:AC:15:F4:81:91:69:F8:D0:6C:5A
X509v3 Authority Key Identifier:
keyid:B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/MrPdgxPVpPbyIawV9IGRafjQbFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.222.162.0/24
185.165.223.0/24
212.5.55.0/24
212.70.134.0/23
212.70.138.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d9:1f:0a:24:ee:87:e8:19:82:36:54:b7:50:99:04:54:96:
1b:ca:57:a6:e6:54:70:36:57:24:0b:89:0d:2b:b1:2c:9c:78:
4c:86:1d:e5:7a:f3:c2:c5:0a:b8:40:8d:3a:16:d6:bf:21:e5:
c0:c4:1d:90:cd:02:8f:33:75:ab:13:79:85:82:f8:97:9c:b7:
32:03:cb:5b:94:74:c9:71:4f:46:4e:2b:e0:f7:9c:51:8f:d7:
ad:e1:a2:b8:69:b6:ff:fc:2c:5e:e3:8d:9d:a7:c5:94:da:2b:
91:f7:5d:19:54:59:22:c8:c1:03:88:e9:e3:4e:ac:db:b8:86:
a3:e5:a2:5e:d5:89:dc:b8:1f:65:e9:89:0d:67:03:2d:9b:af:
78:9a:0c:d7:78:75:01:11:17:8c:84:c5:c4:95:ae:59:d8:73:
07:f5:28:f7:4e:12:84:aa:3a:4b:17:db:da:27:13:e4:3c:78:
0e:de:f1:ec:73:27:5c:3e:3c:a3:3b:61:12:cf:47:63:33:9a:
10:cb:9e:82:6b:65:6d:9a:8d:61:bc:cf:3a:6b:79:64:1b:52:
9b:83:37:d3:7b:c9:da:b2:bc:d2:85:09:3f:0e:91:37:89:e4:
31:89:8c:84:03:e4:61:6b:09:6b:75:6b:9b:06:77:10:8e:c9:
a0:45:26:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:04:07 2026 by rpki-client