Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/MyxHlmUk7ojXt90MP3VtwixFcuQ.roa
File: MyxHlmUk7ojXt90MP3VtwixFcuQ.roa (raw, json)
Hash identifier: 2H7qRtelfNsUhPHItl2aMd0DBTLdRDOBoRPp2vKay2Q=
Subject key identifier: 33:2C:47:96:65:24:EE:88:D7:B7:DD:0C:3F:75:6D:C2:2C:45:72:E4
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A1884A4119110093750F6B364972737E42
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/MyxHlmUk7ojXt90MP3VtwixFcuQ.roa
Signing time: Thu 29 Oct 2026 15:32:10 +0000
ROA not before: Thu 29 Oct 2026 15:32:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402390
IP address blocks: 193.31.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:4a:41:19:11:00:93:75:0f:6b:36:49:72:73:7e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Oct 29 15:32:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=332c47966524ee88d7b7dd0c3f756dc22c4572e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:32:fc:f8:66:44:7b:f4:12:2b:db:a3:36:
25:5a:22:33:38:7b:81:56:c6:9b:7f:9e:d0:05:b7:
72:35:20:19:8b:eb:72:9e:0a:27:5b:83:98:a2:f3:
0d:9d:65:32:e6:08:4f:b1:73:d0:5a:d4:a7:44:80:
d3:61:02:19:bb:31:76:1d:b2:b6:2a:de:b2:72:6e:
d1:ae:7e:05:8e:80:f1:c9:8b:ca:ca:a4:8b:a2:b7:
ee:96:ac:9e:ea:f4:fd:e5:96:ff:96:ab:d0:c7:b7:
53:37:dc:41:2d:eb:00:6a:0a:11:f1:82:8d:0c:aa:
22:97:87:b7:17:72:99:09:32:de:88:56:6c:1a:10:
4b:c0:0f:b7:67:86:8d:c9:9f:9a:bc:4f:68:82:e7:
62:43:7f:18:8a:4d:e8:5b:a4:68:f6:51:52:19:ee:
7d:b9:bb:30:0a:19:13:d7:70:f4:fa:7c:ba:5c:8c:
3e:b9:b4:69:05:ad:d7:06:d8:f4:7d:b7:2e:ef:96:
bf:33:00:68:87:17:e6:2d:87:90:29:53:06:7a:a9:
51:16:29:de:c8:8a:0c:19:db:7e:74:53:86:0a:dd:
54:1e:61:df:78:45:03:ee:9e:56:52:78:73:e3:9a:
9e:d3:5f:fc:2b:93:65:75:d8:46:64:35:08:31:c4:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2C:47:96:65:24:EE:88:D7:B7:DD:0C:3F:75:6D:C2:2C:45:72:E4
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/MyxHlmUk7ojXt90MP3VtwixFcuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.112.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:2d:70:b4:43:34:e8:58:a5:fe:64:86:39:b9:ec:0d:98:1a:
a4:f0:07:62:a0:d3:da:46:ee:6a:66:bf:89:2c:8d:50:d6:d6:
db:67:14:fa:ed:ca:10:2a:9d:75:cd:1f:36:2f:9f:f0:1d:19:
ef:08:8f:fe:17:d5:33:81:8f:72:ed:9f:8d:48:f3:c2:73:80:
04:a3:1e:5d:f5:4a:e7:fe:aa:6e:91:d2:5b:c8:58:05:fe:fb:
bc:99:ea:4a:23:89:57:e8:e2:1d:11:e9:1f:b8:8d:90:c2:79:
cf:d9:57:89:34:d3:ff:da:bd:b6:3d:39:db:17:18:7d:5d:3d:
62:ed:fd:1e:d2:99:03:5a:0d:be:bb:79:d8:5e:08:80:a7:79:
65:ca:fd:39:de:c6:eb:2a:38:3b:f5:59:ba:21:f5:fa:92:c7:
9b:99:4c:65:39:da:b2:fb:a6:6a:d9:d6:42:37:6a:6c:23:1d:
0d:07:ad:36:f6:f7:8b:6d:3b:00:d1:98:0c:31:7d:b4:58:5b:
7b:4b:40:e0:f0:8a:90:2f:bc:e6:a4:0e:7d:f9:f5:0d:f7:f8:
6d:e4:d1:36:c9:f6:a6:3d:69:bd:01:1b:02:a0:6b:20:05:41:
4c:fa:79:01:90:7d:dd:39:7b:ff:b2:cf:9c:62:ac:14:16:f1:
ac:df:14:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGISkEZEQCTdQ9rNklyc35CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYxMDI5MTUzMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzJjNDc5NjY1MjRlZTg4ZDdiN2RkMGMzZjc1NmRjMjJjNDU3MmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+gy/PhmRHv0EivbozYlWiIzOHuB
Vsabf57QBbdyNSAZi+tyngonW4OYovMNnWUy5ghPsXPQWtSnRIDTYQIZuzF2HbK2
Kt6ycm7Rrn4FjoDxyYvKyqSLorfulqye6vT95Zb/lqvQx7dTN9xBLesAagoR8YKN
DKoil4e3F3KZCTLeiFZsGhBLwA+3Z4aNyZ+avE9ogudiQ38Yik3oW6Ro9lFSGe59
ubswChkT13D0+ny6XIw+ubRpBa3XBtj0fbcu75a/MwBohxfmLYeQKVMGeqlRFine
yIoMGdt+dFOGCt1UHmHfeEUD7p5WUnhz45qe01/8K5NlddhGZDUIMcRs3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDMsR5ZlJO6I17fdDD91bcIsRXLkMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvTXl4SGxtVWs3b2pYdDkwTVAzVnR3aXhGY3VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR9wMA0G
CSqGSIb3DQEBCwUAA4IBAQAOLXC0QzToWKX+ZIY5uewNmBqk8AdioNPaRu5qZr+J
LI1Q1tbbZxT67coQKp11zR82L5/wHRnvCI/+F9UzgY9y7Z+NSPPCc4AEox5d9Urn
/qpukdJbyFgF/vu8mepKI4lX6OIdEekfuI2QwnnP2VeJNNP/2r22PTnbFxh9XT1i
7f0e0pkDWg2+u3nYXgiAp3llyv053sbrKjg79Vm6IfX6ksebmUxlOdqy+6Zq2dZC
N2psIx0NB6029veLbTsA0ZgMMX20WFt7S0Dg8IqQL7zmpA59+fUN9/ht5NE2yfam
PWm9ARsCoGsgBUFM+nkBkH3dOXv/ss+cYqwUFvGs3xSw
-----END CERTIFICATE-----
Generated at Sat Oct 31 10:02:53 2026 by rpki-client