Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/mYlhn9D8TXW-ZihLJm67754Xdj4.roa
File: mYlhn9D8TXW-ZihLJm67754Xdj4.roa (raw, json)
Hash identifier: Y9SxZM3NYuycAqwaJe28rNr75mssTAqjZi084lcMkI4=
Subject key identifier: 99:89:61:9F:D0:FC:4D:75:BE:66:28:4B:26:6E:BB:EF:9E:17:76:3E
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F236945ACD617286DC4AE179A9CF24BB6
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/mYlhn9D8TXW-ZihLJm67754Xdj4.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56871
IP address blocks: 86.104.132.0/23 maxlen: 23
89.42.232.0/24 maxlen: 24
89.42.233.0/24 maxlen: 24
89.44.100.0/23 maxlen: 23
89.45.92.0/24 maxlen: 24
89.45.93.0/24 maxlen: 24
185.104.196.0/22 maxlen: 22
188.213.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:45:ac:d6:17:28:6d:c4:ae:17:9a:9c:f2:4b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9989619fd0fc4d75be66284b266ebbef9e17763e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:b0:c4:fd:5e:24:27:33:89:1e:88:c0:ee:
5c:d0:2e:f3:75:80:dc:90:d8:92:c8:57:d1:29:4d:
35:06:01:9f:84:b1:52:45:36:51:7c:16:16:51:8b:
5f:94:fb:39:9f:e2:e0:23:d1:5e:a6:f9:a2:ee:89:
32:25:5a:4f:d2:30:a9:4e:ac:e8:4d:e9:b4:d8:a7:
ea:98:31:2d:53:90:f8:e3:52:4d:e8:31:3b:58:56:
35:3a:b0:a7:06:10:08:2d:b4:43:32:d8:c0:6d:0b:
fe:6a:cd:bf:d2:38:3b:9e:92:69:1f:b9:6b:7e:9c:
a3:a5:23:78:61:67:2e:4d:e3:c1:d9:32:59:1f:6d:
17:66:4f:a6:d9:ad:81:71:9e:6e:e4:11:48:c9:2b:
a3:f9:c0:0d:3a:b8:09:d2:82:00:47:79:24:a9:30:
93:07:db:65:71:c6:bb:c0:c5:53:66:7c:39:5e:94:
39:19:0e:81:6a:9e:35:8a:50:8f:f6:8f:75:7a:35:
00:5c:4c:fc:fb:b0:0a:60:72:f1:b2:63:e0:60:94:
3a:ef:48:ed:76:f6:88:c9:7c:77:82:e4:c1:2d:27:
12:5f:1a:8f:33:e3:80:68:45:12:2c:81:a6:b6:3e:
9b:59:24:9e:35:56:c1:28:f3:77:87:7b:44:4f:f1:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:61:9F:D0:FC:4D:75:BE:66:28:4B:26:6E:BB:EF:9E:17:76:3E
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/mYlhn9D8TXW-ZihLJm67754Xdj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.132.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
185.104.196.0/22
188.213.233.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:78:16:1b:ce:0b:80:7c:fe:60:28:32:c7:23:6f:9e:37:76:
f4:28:dd:32:4a:84:60:a0:7f:09:ef:6a:9e:24:bf:78:e5:50:
1e:0f:83:ec:a7:99:db:28:75:d8:3d:55:22:06:cd:77:05:3c:
59:0d:b6:e5:72:30:f6:f4:74:39:a8:47:2b:f4:05:af:66:b2:
2d:fa:3c:f8:b9:69:f9:6a:22:22:3f:63:12:2c:d7:33:2f:fe:
9b:8b:eb:ff:16:df:7b:75:dc:12:d7:03:2f:23:18:07:29:89:
1f:66:7a:87:14:4d:70:75:6d:97:a2:cb:07:51:1b:8e:ea:57:
94:a4:59:7a:bc:17:5a:ba:9c:ab:ac:26:10:4b:63:39:c5:3c:
61:b5:4c:87:95:b5:f9:96:84:93:24:a0:78:69:f5:1e:9a:1c:
7e:30:38:ab:31:4b:bd:86:95:a4:47:4b:6e:5a:4c:fd:26:e3:
4a:57:90:b9:cb:2e:2f:26:46:09:63:d4:e5:79:f1:ea:0e:b1:
62:3b:9e:6a:2d:3a:72:7a:45:56:ee:b6:0a:a0:5b:41:d0:ad:
f1:f5:38:11:6f:00:3f:cf:69:79:64:60:41:42:ec:a8:0a:0f:
8a:27:7d:e7:b1:83:cd:10:e7:17:1f:b6:cc:d8:68:dd:32:b6:
32:8e:71:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:23:04 2026 by rpki-client