Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MYloTAx1JaNDWbfwmJSau7IVR20.roa
File: MYloTAx1JaNDWbfwmJSau7IVR20.roa (raw, json)
Hash identifier: BLU+3xg0QzPs7rhOOpYUgmMPDDRoZABC3gYmIVV6qg8=
Subject key identifier: 31:89:68:4C:0C:75:25:A3:43:59:B7:F0:98:94:9A:BB:B2:15:47:6D
Certificate issuer: /CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Certificate serial: 019F236879E3571B0AE4659AA794EE204021
Authority key identifier: 31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MYloTAx1JaNDWbfwmJSau7IVR20.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5420
IP address blocks: 192.40.72.0/24 maxlen: 24
192.40.73.0/24 maxlen: 24
192.40.74.0/24 maxlen: 24
192.40.75.0/24 maxlen: 24
2001:67c:21a4::/48 maxlen: 48
2a06:f040::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 12:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:79:e3:57:1b:0a:e4:65:9a:a7:94:ee:20:40:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f8c144232176e5e0cda8dd6f5120f0558f1759
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3189684c0c7525a34359b7f098949abbb215476d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:90:39:dd:ac:60:dd:1c:92:c5:cb:8e:eb:
6a:ee:38:b1:a3:29:e4:be:b2:0f:5d:60:4a:91:eb:
00:2f:09:67:53:a8:e5:7c:d0:8a:5a:8a:9f:51:e0:
66:32:00:1d:ff:31:8f:32:5c:37:1a:02:f8:5c:5b:
f3:6e:0b:5a:d5:0f:75:40:5f:9b:ec:9e:56:b9:0b:
9e:11:6e:3a:be:f4:fe:6b:c8:2e:a4:31:88:2c:b4:
c5:4b:63:3a:68:7f:72:52:e4:3f:9a:04:4b:cf:d0:
c6:38:d8:05:3a:a1:0d:3d:74:36:f0:4f:95:89:0b:
97:c3:6c:ec:18:bc:81:63:ce:d5:e9:6c:0e:00:40:
37:8a:e0:ac:37:4f:0f:ba:46:42:0c:14:55:eb:f7:
e0:46:b8:0a:5d:82:be:d3:37:ea:f9:49:23:d6:e1:
3d:d6:6c:ef:04:3d:b9:8e:7c:ac:f2:a4:99:02:cb:
ff:c3:44:14:02:21:ce:2a:5d:3d:47:eb:8b:18:01:
60:b6:9a:db:96:a9:6a:e6:55:4b:a7:4b:92:79:64:
3f:77:24:d0:32:8a:9d:f6:8f:f4:a4:9b:7d:b9:89:
ae:e6:44:bc:cc:0a:a0:f1:cf:b4:cc:73:c8:7e:b8:
6f:ff:75:fd:33:71:49:4a:2c:ab:85:52:1c:0d:b6:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:89:68:4C:0C:75:25:A3:43:59:B7:F0:98:94:9A:BB:B2:15:47:6D
X509v3 Authority Key Identifier:
keyid:31:F8:C1:44:23:21:76:E5:E0:CD:A8:DD:6F:51:20:F0:55:8F:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfjBRCMhduXgzajdb1Eg8FWPF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MYloTAx1JaNDWbfwmJSau7IVR20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/MfjBRCMhduXgzajdb1Eg8FWPF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.72.0/22
IPv6:
2001:67c:21a4::/48
2a06:f040::/32
Signature Algorithm: sha256WithRSAEncryption
80:f0:22:7d:29:d1:19:a0:d3:af:61:0a:9b:fe:d1:e6:8c:96:
0e:5b:a3:60:45:8f:34:95:b6:23:4f:4b:4e:e1:cf:09:e3:a2:
91:a8:6e:3d:e9:1d:1c:6f:c4:01:00:6c:0e:6d:d7:0b:99:5d:
98:7f:05:a2:b0:ca:de:c1:b3:8b:d7:fc:1e:8a:ef:a5:e4:36:
d0:24:c4:34:ec:81:25:eb:55:df:8a:ae:c0:20:ba:bc:30:13:
65:05:97:96:79:63:c9:22:0a:53:62:af:78:d3:12:4d:85:2c:
7d:25:92:c1:3e:6e:a5:69:4e:d2:8e:45:b7:0c:43:13:14:b3:
82:d0:1d:b0:73:5e:37:db:1d:3f:74:e2:3e:f2:3d:f1:b0:ad:
3c:b5:38:b6:bc:9e:d6:6a:86:ce:bf:82:9f:94:f4:05:f0:66:
78:96:37:35:fc:e8:c6:3a:c2:a9:81:ef:b7:fb:c8:c3:45:21:
2f:57:cd:7f:c7:a1:0c:cf:33:59:0d:35:2d:f5:74:30:a7:ff:
3d:99:1b:46:4a:04:77:95:35:35:61:dd:ed:6f:89:82:21:10:
b5:78:b1:ec:7f:35:39:2d:17:1d:5e:6d:7d:9e:9c:5e:16:18:
4c:75:af:5b:ef:80:5b:27:4b:95:a3:d7:8c:9b:2e:57:60:73:
3c:33:ba:11
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ8jaHnjVxsK5GWap5TuIEAhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZjhjMTQ0MjMyMTc2ZTVlMGNkYThkZDZmNTEyMGYwNTU4
ZjE3NTkwHhcNMjYwNzAyMTUxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTg5Njg0YzBjNzUyNWEzNDM1OWI3ZjA5ODk0OWFiYmIyMTU0NzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxCQOd2sYN0cksXLjutq7jixoynk
vrIPXWBKkesALwlnU6jlfNCKWoqfUeBmMgAd/zGPMlw3GgL4XFvzbgta1Q91QF+b
7J5WuQueEW46vvT+a8gupDGILLTFS2M6aH9yUuQ/mgRLz9DGONgFOqENPXQ28E+V
iQuXw2zsGLyBY87V6WwOAEA3iuCsN08PukZCDBRV6/fgRrgKXYK+0zfq+Ukj1uE9
1mzvBD25jnys8qSZAsv/w0QUAiHOKl09R+uLGAFgtprblqlq5lVLp0uSeWQ/dyTQ
Moqd9o/0pJt9uYmu5kS8zAqg8c+0zHPIfrhv/3X9M3FJSiyrhVIcDbZWHwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDGJaEwMdSWjQ1m38JiUmruyFUdtMB8GA1UdIwQY
MBaAFDH4wUQjIXbl4M2o3W9RIPBVjxdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWZqQlJDTWhkdVhnemFqZGIxRWc4RldQRjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85ZDYwNmUtMDhhNi00ZjRhLWI5ODAt
YjVhYmY0NDBlODkzLzEvTVlsb1RBeDFKYU5EV2Jmd21KU2F1N0lWUjIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85ZDYwNmUtMDhhNi00ZjRhLWI5ODAtYjVhYmY0NDBlODkz
LzEvTWZqQlJDTWhkdVhnemFqZGIxRWc4RldQRjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCwChIMBYE
AgACMBADBwAgAQZ8IaQDBQAqBvBAMA0GCSqGSIb3DQEBCwUAA4IBAQCA8CJ9KdEZ
oNOvYQqb/tHmjJYOW6NgRY80lbYjT0tO4c8J46KRqG496R0cb8QBAGwObdcLmV2Y
fwWisMrewbOL1/weiu+l5DbQJMQ07IEl61Xfiq7AILq8MBNlBZeWeWPJIgpTYq94
0xJNhSx9JZLBPm6laU7SjkW3DEMTFLOC0B2wc1432x0/dOI+8j3xsK08tTi2vJ7W
aobOv4KflPQF8GZ4ljc1/OjGOsKpge+3+8jDRSEvV81/x6EMzzNZDTUt9XQwp/89
mRtGSgR3lTU1Yd3tb4mCIRC1eLHsfzU5LRcdXm19npxeFhhMda9b74BbJ0uVo9eM
my5XYHM8M7oR
-----END CERTIFICATE-----
Generated at Wed Jul 22 20:07:37 2026 by rpki-client