Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/mYLN78ICJLHl7O9hLXw6VEbnnwk.roa
File: mYLN78ICJLHl7O9hLXw6VEbnnwk.roa (raw, json)
Hash identifier: t8gHECZIoYqrf13gRRy1nXbebHV2mNd1f9yJrfFQKGk=
Subject key identifier: 99:82:CD:EF:C2:02:24:B1:E5:EC:EF:61:2D:7C:3A:54:46:E7:9F:09
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01A1212F5834EDF00968F23F1D87C1BB0879
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/mYLN78ICJLHl7O9hLXw6VEbnnwk.roa
Signing time: Fri 09 Oct 2026 15:01:53 +0000
ROA not before: Fri 09 Oct 2026 15:01:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 80.246.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2f:58:34:ed:f0:09:68:f2:3f:1d:87:c1:bb:08:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 9 15:01:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9982cdefc20224b1e5ecef612d7c3a5446e79f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:e7:aa:f1:fd:73:58:fc:ee:71:4b:f6:04:
22:d5:9f:01:29:e0:80:15:23:5a:90:88:1a:44:28:
fc:30:1b:f8:b8:db:ec:1d:a0:d7:34:aa:a2:fe:46:
dd:e1:c5:ba:89:a9:6c:94:9f:f7:bb:57:c6:9a:8e:
09:e3:8c:a1:94:80:db:bd:83:45:df:b7:d8:94:0d:
67:cc:ae:fe:47:07:7e:e5:12:92:56:d8:44:11:db:
c2:be:75:bc:7e:70:89:18:b2:0b:f9:b7:98:a3:68:
f2:c7:1e:ca:6c:0d:55:47:83:c3:f5:8e:4d:2e:69:
06:ce:32:b7:5d:17:20:a4:27:06:3c:5f:16:c7:ec:
fa:bb:27:7f:83:63:7b:d1:a6:d4:24:b7:21:b3:58:
7b:46:fa:11:6f:ca:08:b1:f4:42:79:e8:0e:b8:b6:
ab:01:71:13:56:5a:7b:5b:3b:ac:4e:0e:08:a0:82:
58:a8:0d:57:0f:7b:45:c2:60:06:eb:1f:0e:82:e7:
9b:44:a1:76:aa:26:83:ed:1d:31:8f:53:5e:ff:37:
78:b6:b8:e7:32:fd:36:03:23:7d:7d:ad:11:22:26:
b4:41:73:74:3d:c7:6e:0e:9d:c8:cc:9d:ba:9b:5e:
54:a5:95:42:11:b9:45:e4:d5:53:45:ca:69:3e:a9:
57:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:82:CD:EF:C2:02:24:B1:E5:EC:EF:61:2D:7C:3A:54:46:E7:9F:09
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/mYLN78ICJLHl7O9hLXw6VEbnnwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:4b:fa:b1:09:4b:6f:fd:12:91:f4:22:6d:6e:a3:e7:57:32:
fd:a0:92:a2:db:b9:64:e8:16:51:d4:0d:ff:78:b9:e6:2a:b3:
f2:9a:c5:e5:ff:03:fc:6b:ae:ec:a1:11:1c:55:77:18:ce:ec:
3c:e5:89:0c:d1:54:ff:26:01:c5:4a:36:36:7a:72:a9:87:76:
2f:d2:68:50:da:3d:18:1f:72:76:b6:4f:82:17:1b:e2:f1:38:
d2:23:6e:b8:ad:77:01:04:82:3d:b3:b7:4f:00:f7:37:49:ee:
f7:71:3a:b4:ba:f2:b1:e5:f9:bb:49:f4:e4:21:26:a9:2c:1d:
c7:3b:e4:93:75:b3:b3:a9:5b:a9:7b:20:09:e4:64:13:e7:72:
c2:86:47:d4:70:b4:68:ff:6d:fe:d3:c8:14:b0:45:31:36:72:
41:14:37:2d:8f:c6:80:57:91:ab:ca:6c:54:f7:5d:25:5a:2d:
57:2b:6f:91:90:f8:e9:8d:87:36:88:37:c4:b7:2f:00:10:5b:
f1:d9:56:00:4e:b7:87:5c:7b:ce:55:e2:ca:2e:1f:99:68:17:
3d:2a:94:9f:a3:3a:9a:eb:c2:df:cf:ad:6c:df:18:5e:62:e8:
ad:e9:c5:bc:43:d8:27:49:64:d9:e2:db:e8:2b:85:ef:a8:76:
f3:33:39:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:08:34 2026 by rpki-client