Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mLYoqSxzMXDlnOqg_q_eXVbkkPY.roa
File: mLYoqSxzMXDlnOqg_q_eXVbkkPY.roa (raw, json)
Hash identifier: TGIRextxJYd9Ydd+hmrh3goE6Ag2fvaEkYjfHRTXPv8=
Subject key identifier: 98:B6:28:A9:2C:73:31:70:E5:9C:EA:A0:FE:AF:DE:5D:56:E4:90:F6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A03E9466F4C59F1E21DF012500966FB951
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mLYoqSxzMXDlnOqg_q_eXVbkkPY.roa
Signing time: Wed 26 Aug 2026 14:58:28 +0000
ROA not before: Wed 26 Aug 2026 14:58:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 89.125.167.0/24 maxlen: 24
167.17.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:94:66:f4:c5:9f:1e:21:df:01:25:00:96:6f:b9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 26 14:58:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98b628a92c733170e59ceaa0feafde5d56e490f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:3e:34:87:85:f9:4c:4a:d2:1f:73:b3:4a:
c1:a9:82:88:c0:08:cb:9b:37:3a:0e:e9:e4:44:34:
cd:3a:3c:b6:e4:76:41:3c:a8:80:3e:94:58:ad:22:
42:ed:2b:fc:95:9f:6c:3a:af:97:1b:3e:4c:07:8f:
6a:63:b9:de:95:16:62:8b:56:7b:c7:47:45:c7:62:
96:c2:08:49:44:5d:52:a0:2b:3c:6b:32:ca:fc:23:
d8:eb:16:fe:57:b8:c4:c8:6f:fb:dc:23:45:11:91:
ee:87:c7:1f:35:bd:1b:1c:50:5e:1e:10:98:58:8e:
74:6e:9c:72:4e:86:dc:96:92:86:ff:82:f3:26:ac:
28:ac:10:8d:c7:96:ce:31:c1:43:00:41:f8:3e:34:
53:10:45:cf:f2:ee:60:54:1f:5a:e2:f0:9d:d1:94:
dd:73:f8:72:85:5c:7e:58:1c:d2:db:7f:2b:cf:fa:
94:65:c3:15:81:da:39:5c:89:3f:73:46:d1:43:76:
42:37:9f:3f:f3:92:bb:db:a8:6b:f2:7b:60:bd:0f:
67:38:d5:ea:c0:5b:5c:6c:17:f0:de:44:4b:83:e3:
dc:2f:22:01:e1:6c:62:c6:06:94:82:05:07:87:5e:
47:35:a1:cd:99:64:16:07:f0:6e:33:d3:67:38:9a:
bd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B6:28:A9:2C:73:31:70:E5:9C:EA:A0:FE:AF:DE:5D:56:E4:90:F6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mLYoqSxzMXDlnOqg_q_eXVbkkPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.167.0/24
167.17.34.0/24
Signature Algorithm: sha256WithRSAEncryption
51:0a:bf:c8:9f:cd:f2:aa:cc:cc:04:ce:94:6f:95:36:03:46:
f0:b7:d5:c5:4d:4e:2b:c4:25:67:11:47:98:4f:3b:e2:79:cb:
6a:a4:d1:ae:d6:31:78:a8:78:5d:38:be:dc:6b:23:17:9a:ae:
a7:98:fb:f7:5e:e3:40:5d:b3:c1:b5:df:3f:af:47:03:33:e1:
4b:a2:29:73:a4:ba:c2:b6:6f:0e:f8:5d:9a:75:dc:b9:46:54:
90:d2:b7:d3:43:95:fd:9c:4b:ef:6c:9a:ca:c7:95:86:73:5f:
47:62:73:19:87:98:bd:7b:c3:9f:b4:c1:23:66:7a:6c:fe:7e:
c7:c6:c0:bb:1c:16:e8:de:58:31:8b:d2:27:98:10:00:c4:41:
08:10:80:07:e5:83:b1:8e:3a:08:41:f1:77:71:27:b1:e3:d3:
10:a2:66:26:d2:0e:1e:f9:e0:54:e3:c5:7c:f4:8e:56:56:87:
ac:3c:23:76:f6:c8:a7:f1:2b:2e:69:f0:ff:55:2d:8f:2d:83:
77:a6:2d:d4:86:bc:2b:65:84:0c:2b:bf:bd:ba:35:b1:91:77:
ca:44:2d:ad:2e:da:8d:06:21:36:5f:a0:21:14:b2:47:a2:f0:
0e:bf:6b:ac:ec:1c:48:84:85:6b:76:51:3d:19:97:a7:2e:ec:
87:a8:e5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:03 2026 by rpki-client