Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/MILVHtAzKMa9zF0E8EWGFaSImYk.roa
File: MILVHtAzKMa9zF0E8EWGFaSImYk.roa (raw, json)
Hash identifier: 3jg3bQI1fLlU/5PObAXv1qeozPMatKAIIF7iKwFgKHw=
Subject key identifier: 30:82:D5:1E:D0:33:28:C6:BD:CC:5D:04:F0:45:86:15:A4:88:99:89
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019FB643AB3B346DBFB93740AAF67E937CF4
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/MILVHtAzKMa9zF0E8EWGFaSImYk.roa
Signing time: Fri 31 Jul 2026 03:41:55 +0000
ROA not before: Fri 31 Jul 2026 03:41:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 83.98.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b6:43:ab:3b:34:6d:bf:b9:37:40:aa:f6:7e:93:7c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 31 03:41:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3082d51ed03328c6bdcc5d04f0458615a4889989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:77:ce:0d:da:8b:18:3c:a7:22:60:00:a7:
9d:41:cc:cd:e5:27:4a:54:69:08:07:5b:e1:07:c4:
04:f4:af:6f:81:5e:50:b4:57:0a:86:32:6f:ac:d3:
4c:dd:65:f1:6c:56:88:78:ae:37:17:2f:ef:2e:84:
89:d2:c9:31:32:c2:43:45:48:51:37:2d:0d:27:d2:
7b:d3:e6:16:9c:62:33:69:7c:5d:f5:28:46:5f:29:
53:97:07:a3:97:37:17:53:91:97:8f:6d:b4:14:e8:
a6:71:19:f3:87:be:e9:2e:15:d4:2d:35:b8:6c:5d:
42:38:09:fd:e9:6c:68:b1:e2:60:af:7c:7c:a8:62:
7d:ec:9d:b2:58:51:3e:a9:dd:09:ac:d3:02:d2:3e:
03:c7:ff:dc:70:50:f4:ae:5d:a5:d0:a7:2f:6d:e9:
b5:f0:31:a7:d8:df:a9:78:ad:3c:05:f6:40:29:7a:
f0:5c:71:c6:8c:dc:c6:d3:09:3b:99:d0:9b:b1:a5:
29:07:52:9e:7e:27:96:06:2c:29:64:6d:f2:ee:15:
72:97:b4:8a:78:5e:4a:dd:ae:04:05:4f:4c:ef:e9:
7c:52:74:70:21:8a:a4:b9:b0:3d:38:48:c7:8d:c2:
2e:e8:45:61:99:15:21:1d:70:a0:96:86:eb:65:49:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:82:D5:1E:D0:33:28:C6:BD:CC:5D:04:F0:45:86:15:A4:88:99:89
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/MILVHtAzKMa9zF0E8EWGFaSImYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.198.0/24
Signature Algorithm: sha256WithRSAEncryption
19:fa:c6:aa:64:f3:82:1e:81:61:98:1f:57:f9:b0:ca:d6:89:
75:ad:1a:91:89:3a:16:46:2d:27:49:5c:4e:de:00:c0:c9:e7:
7e:38:64:95:cd:aa:50:06:d0:34:16:35:ba:19:f2:da:e7:60:
a0:e5:39:c7:3c:88:2e:23:a7:df:83:d4:ef:38:d3:56:6f:ab:
ef:1c:2e:47:e5:c4:29:a6:b5:83:04:24:3e:26:f2:ed:de:64:
fe:72:f5:ac:21:57:70:dc:e1:94:70:a3:81:b4:b6:e1:86:32:
0d:2e:ff:7d:48:86:ea:be:4d:38:a5:da:8a:98:74:12:08:1d:
1f:f9:e2:92:bc:f2:e9:3b:6b:f2:b3:b4:21:65:97:77:6a:95:
95:7a:3b:a4:f9:ee:69:e9:a3:f7:17:9c:80:43:6a:ca:1d:aa:
64:81:7d:f2:97:97:73:1b:37:68:9f:ce:f9:00:7a:9f:5e:df:
fd:b1:a9:ce:af:0b:a4:f8:4e:24:8e:df:7c:3a:71:fa:1d:ce:
69:5d:a7:9d:b7:bc:86:92:f3:39:68:3a:71:28:d2:d2:8f:fe:
fa:dd:89:b7:1c:f4:72:e0:57:30:5e:05:b9:89:1b:0d:c4:89:
db:d8:37:69:5a:7f:a0:d1:c6:6e:f0:10:ff:c8:85:c6:82:98:
d6:42:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:11 2026 by rpki-client