Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/mNyKHvh-ZzvywHbRbPxAB2YITpM.roa
File: mNyKHvh-ZzvywHbRbPxAB2YITpM.roa (raw, json)
Hash identifier: DMHicFuCe2CjcnqaSuEwET4bEyq4MbNuoENqwOAycio=
Subject key identifier: 98:DC:8A:1E:F8:7E:67:3B:F2:C0:76:D1:6C:FC:40:07:66:08:4E:93
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 019E632BD25C85EF970C12A8CE58149A4A1B
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/mNyKHvh-ZzvywHbRbPxAB2YITpM.roa
Signing time: Tue 26 May 2026 07:24:36 +0000
ROA not before: Tue 26 May 2026 07:24:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.64.89.0/24 maxlen: 24
194.163.68.0/24 maxlen: 24
194.163.80.0/22 maxlen: 24
194.163.92.0/24 maxlen: 24
194.233.31.0/24 maxlen: 24
194.233.148.0/24 maxlen: 24
194.233.149.0/24 maxlen: 24
194.233.150.0/24 maxlen: 24
194.233.151.0/24 maxlen: 24
195.180.128.0/22 maxlen: 24
195.180.139.0/24 maxlen: 24
195.180.149.0/24 maxlen: 24
195.180.150.0/23 maxlen: 24
195.252.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 14:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:2b:d2:5c:85:ef:97:0c:12:a8:ce:58:14:9a:4a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: May 26 07:24:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98dc8a1ef87e673bf2c076d16cfc400766084e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:65:28:ce:e0:c9:54:80:13:67:fa:e5:fb:
13:b4:6e:ea:ed:b8:3c:83:49:91:b1:52:65:8c:7d:
40:a6:ed:cf:ec:11:97:77:23:0b:ca:a2:2b:50:d3:
1d:9b:d7:e4:9e:b0:1f:18:45:e5:e3:d5:56:6c:17:
5a:7c:56:03:48:a3:f5:8c:68:ca:da:dc:8f:7f:3b:
b1:e9:e9:84:1f:b0:9a:12:f3:98:b1:c1:42:66:44:
b8:e6:7d:cc:b7:58:3e:0a:e7:56:ed:8e:3a:91:47:
e0:cc:f3:88:aa:f0:6d:22:fb:ac:69:e4:8a:62:8a:
8e:a1:82:79:16:6a:76:9a:e4:4c:f9:8d:55:8e:a9:
63:b5:ec:e2:3d:01:6d:99:cb:e7:50:53:e0:01:ab:
9d:d4:d8:96:79:8f:dc:a4:29:62:5a:71:47:5b:eb:
e3:be:a1:71:1a:ac:c7:8c:db:d4:39:1d:47:bd:12:
25:f4:79:86:1a:cc:4b:bd:fe:68:d9:98:2d:32:cd:
11:2e:c7:40:7a:02:91:58:3c:03:a1:a8:76:08:df:
8a:b3:f4:56:1f:10:fa:f7:2a:f3:1f:06:db:f5:9c:
5c:de:df:ba:18:de:0f:19:f8:06:31:a8:51:59:8b:
bc:c8:cb:cb:4d:e8:75:75:c1:32:56:bf:3f:de:1e:
b6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DC:8A:1E:F8:7E:67:3B:F2:C0:76:D1:6C:FC:40:07:66:08:4E:93
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/mNyKHvh-ZzvywHbRbPxAB2YITpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.89.0/24
194.163.68.0/24
194.163.80.0/22
194.163.92.0/24
194.233.31.0/24
194.233.148.0/22
195.180.128.0/22
195.180.139.0/24
195.180.149.0-195.180.151.255
195.252.175.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c9:2a:e7:d6:91:b3:0e:a4:79:90:f6:15:35:a9:02:66:46:
30:83:c2:6f:29:7c:16:08:45:2b:03:04:15:28:31:0a:a2:90:
8b:32:7e:74:b4:7a:dd:2c:62:75:1f:af:d7:86:be:17:ed:20:
f8:0f:b7:0c:fa:d5:b1:6b:97:9e:ff:9e:a1:0a:3c:ca:9f:31:
31:92:54:c5:62:50:40:90:15:13:60:86:21:54:46:ba:36:ca:
19:23:a4:a4:9b:bf:60:ac:3c:63:28:81:1c:7a:de:99:a1:ed:
fc:68:93:61:55:dc:41:57:29:3f:92:f5:e6:b6:aa:78:3a:c3:
f1:19:c0:06:11:50:4a:db:38:dd:af:35:57:12:75:35:4f:d8:
95:b0:08:27:14:98:30:29:dc:15:ea:5e:f8:eb:d9:19:9f:d6:
00:08:94:86:8b:61:c6:f4:be:02:15:93:2e:bd:78:80:f8:a9:
41:2b:39:c1:6a:47:ea:45:92:de:ad:45:01:48:cb:3a:87:ed:
2c:7d:68:de:cc:c2:d6:6d:3c:5a:21:a6:6c:0f:79:3e:a8:41:
59:48:f2:5c:b9:65:98:83:ff:0d:c1:13:a8:2c:eb:3f:81:3f:
28:5b:cc:c0:bf:16:32:a3:35:b2:bd:48:2f:06:d1:62:10:b6:
00:39:13:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 9 00:45:34 2026 by rpki-client