Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/MTfYuDupOZ8EKCi-cknXFTLRkO0.roa
File: MTfYuDupOZ8EKCi-cknXFTLRkO0.roa (raw, json)
Hash identifier: RTLFO/MqJcOk7O9hGvJVoHZCD/NBbtH1miZAgX+NBmY=
Subject key identifier: 31:37:D8:B8:3B:A9:39:9F:04:28:28:BE:72:49:D7:15:32:D1:90:ED
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A15A38CC7F9669333042536F9C1330720D
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/MTfYuDupOZ8EKCi-cknXFTLRkO0.roa
Signing time: Tue 20 Oct 2026 16:50:34 +0000
ROA not before: Tue 20 Oct 2026 16:50:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218911
IP address blocks: 79.98.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:38:cc:7f:96:69:33:30:42:53:6f:9c:13:30:72:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 20 16:50:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3137d8b83ba9399f042828be7249d71532d190ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:8c:27:0f:fe:ec:87:78:fb:77:9a:33:c8:
f2:8c:33:2f:d9:30:58:cf:21:20:cd:da:0b:5a:f1:
42:1b:8a:bb:d8:9c:17:cb:3a:95:b1:e0:c5:da:10:
38:8c:7a:5c:e0:2d:a3:dd:c0:b0:7e:b0:9f:4c:f4:
8f:f7:3a:3c:9d:37:de:50:ec:ed:80:d4:68:8f:4d:
05:30:01:6a:f2:c4:d8:bf:39:6d:0b:95:b7:f8:99:
55:30:6f:d2:40:08:bc:03:66:f3:98:6f:65:fc:d1:
fa:09:28:0f:fa:90:cf:28:ba:ae:92:8b:d7:00:ba:
e1:3e:fe:36:3c:58:98:ae:7b:01:fb:7a:7d:e7:2f:
f1:0f:ca:cc:77:25:ae:ee:0f:4a:f1:46:72:92:81:
3d:fa:0d:04:f7:e9:80:15:bc:d0:64:6c:d9:9a:29:
e0:8a:23:0d:ed:02:08:0a:b2:20:ad:91:35:d8:7d:
b9:5b:f3:fe:9a:b7:aa:68:74:45:a8:ac:88:a8:02:
00:51:39:13:28:31:07:dc:ec:6c:4d:29:b8:46:a4:
b1:53:5c:fa:05:1b:63:f7:11:71:60:fc:dd:34:dc:
0f:47:20:7c:be:4d:b8:41:67:a6:66:2c:b1:5a:20:
3c:21:1a:3e:eb:87:14:19:5d:44:c9:03:3a:06:fc:
f6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:37:D8:B8:3B:A9:39:9F:04:28:28:BE:72:49:D7:15:32:D1:90:ED
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/MTfYuDupOZ8EKCi-cknXFTLRkO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.244.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:76:8c:b0:fe:5b:41:19:f0:36:00:d3:1e:68:af:e3:fd:60:
56:ce:ab:29:05:1b:3a:35:4b:8c:df:5b:75:7f:3c:a3:01:bd:
22:2b:b5:19:55:86:a9:62:ae:8f:85:ad:63:d0:1e:70:a9:38:
8d:81:74:88:6e:25:54:c6:4d:e2:6f:3d:d2:5c:61:2c:dc:95:
af:ba:e2:87:01:66:9b:02:f8:90:81:64:11:10:34:be:e5:03:
4b:f2:25:0d:ff:f9:2e:88:37:51:4e:d1:ed:92:a0:36:83:92:
55:10:41:1c:fe:a5:05:f5:94:f7:2a:35:38:6e:ad:34:73:f2:
22:22:fe:b3:28:b1:bc:2e:12:28:27:01:0f:be:a4:a6:b5:a5:
97:27:74:b3:f1:04:dc:37:b0:a6:09:44:0d:94:f2:a8:ed:0c:
50:3a:6e:b8:c8:db:a9:fb:3c:79:8e:7a:fc:ad:02:32:66:e3:
95:ca:8f:02:e1:fa:96:06:b9:60:19:cc:bb:16:5b:f1:00:c3:
e9:46:5c:01:33:f6:37:56:a8:8e:b7:93:b9:36:29:78:00:18:
1e:3f:13:7a:c2:ab:d8:e3:33:1d:b6:4c:1d:b8:67:fc:74:eb:
f4:0c:2c:1e:6e:b4:89:4b:01:2e:ee:43:b6:c1:cd:f2:15:44:
89:4f:3e:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFaOMx/lmkzMEJTb5wTMHINMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYxMDIwMTY1MDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTM3ZDhiODNiYTkzOTlmMDQyODI4YmU3MjQ5ZDcxNTMyZDE5MGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznSMJw/+7Id4+3eaM8jyjDMv2TBY
zyEgzdoLWvFCG4q72JwXyzqVseDF2hA4jHpc4C2j3cCwfrCfTPSP9zo8nTfeUOzt
gNRoj00FMAFq8sTYvzltC5W3+JlVMG/SQAi8A2bzmG9l/NH6CSgP+pDPKLqukovX
ALrhPv42PFiYrnsB+3p95y/xD8rMdyWu7g9K8UZykoE9+g0E9+mAFbzQZGzZming
iiMN7QIICrIgrZE12H25W/P+mreqaHRFqKyIqAIAUTkTKDEH3OxsTSm4RqSxU1z6
BRtj9xFxYPzdNNwPRyB8vk24QWemZiyxWiA8IRo+64cUGV1EyQM6Bvz2JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDE32Lg7qTmfBCgovnJJ1xUy0ZDtMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvTVRmWXVEdXBPWjhFS0NpLWNrblhGVExSa08wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT2L0MA0G
CSqGSIb3DQEBCwUAA4IBAQB7doyw/ltBGfA2ANMeaK/j/WBWzqspBRs6NUuM31t1
fzyjAb0iK7UZVYapYq6Pha1j0B5wqTiNgXSIbiVUxk3ibz3SXGEs3JWvuuKHAWab
AviQgWQREDS+5QNL8iUN//kuiDdRTtHtkqA2g5JVEEEc/qUF9ZT3KjU4bq00c/Ii
Iv6zKLG8LhIoJwEPvqSmtaWXJ3Sz8QTcN7CmCUQNlPKo7QxQOm64yNup+zx5jnr8
rQIyZuOVyo8C4fqWBrlgGcy7FlvxAMPpRlwBM/Y3VqiOt5O5Nil4ABgePxN6wqvY
4zMdtkwduGf8dOv0DCwebrSJSwEu7kO2wc3yFUSJTz4A
-----END CERTIFICATE-----
Generated at Sun Oct 25 07:53:32 2026 by rpki-client