Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/mln6aYemJ-VSaEKeRZGt2Vnrkyg.roa
File: mln6aYemJ-VSaEKeRZGt2Vnrkyg.roa (raw, json)
Hash identifier: ZjbIzsTsUVGIXpBPiMvFezlvhGdIUwjt60oGvSVVS0Q=
Subject key identifier: 9A:59:FA:69:87:A6:27:E5:52:68:42:9E:45:91:AD:D9:59:EB:93:28
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F23689EFCE5A6629DE23E78FCFCA4D507
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/mln6aYemJ-VSaEKeRZGt2Vnrkyg.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203598
IP address blocks: 62.228.240.0/24 maxlen: 24
87.228.203.0/24 maxlen: 24
93.109.224.0/24 maxlen: 24
93.109.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9e:fc:e5:a6:62:9d:e2:3e:78:fc:fc:a4:d5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a59fa6987a627e55268429e4591add959eb9328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:3a:e6:3a:07:0a:42:9e:ed:b2:ae:80:89:
02:ed:40:21:d9:ae:3a:2c:0d:72:c6:84:93:36:f0:
51:92:df:ae:c0:47:61:db:ea:d4:a4:6f:9d:28:78:
59:53:74:dc:58:58:79:94:4e:96:e4:57:b9:b9:39:
b4:60:e4:2a:aa:67:93:cc:63:04:6f:db:89:07:d1:
8b:c5:c3:a7:aa:53:fc:c5:12:a7:32:07:20:a6:16:
b3:76:b6:c8:25:e1:f1:a5:5e:f7:0d:10:1f:a5:a5:
93:d2:34:18:a1:18:48:4d:87:6a:6c:30:25:13:28:
c7:a3:63:1a:bd:ec:17:76:82:d2:87:62:3f:ec:5b:
cb:9b:49:36:05:c7:e6:23:3e:b8:19:a7:63:01:7b:
84:53:7a:f9:cf:7a:f4:a4:5b:18:87:4e:ef:a3:0c:
64:a8:be:2d:1d:80:9b:54:25:94:98:20:be:ad:8a:
2a:16:39:52:9b:9f:5a:2e:54:93:bc:87:95:f1:b5:
a8:e5:15:10:75:7b:e4:d5:56:80:25:d0:f4:b6:a9:
35:aa:5f:39:f5:f4:b7:e8:be:97:6c:1c:f3:8a:22:
00:d1:bb:76:68:11:0a:27:63:ad:73:ed:26:83:b3:
4f:4a:4d:f0:1a:3a:2d:b9:5f:84:6d:75:21:76:a5:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:59:FA:69:87:A6:27:E5:52:68:42:9E:45:91:AD:D9:59:EB:93:28
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/mln6aYemJ-VSaEKeRZGt2Vnrkyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.240.0/24
87.228.203.0/24
93.109.224.0/23
Signature Algorithm: sha256WithRSAEncryption
58:98:1d:11:c5:b5:72:2d:c9:22:36:ff:09:eb:56:24:38:cb:
3b:87:e4:7c:92:9a:4d:e4:55:0f:0f:ed:9a:4e:39:1f:31:63:
b1:00:44:0f:e0:f1:7e:e5:e6:9f:3c:53:4b:7e:93:27:90:bb:
e6:ab:8e:ad:cb:12:37:10:e7:1f:92:d0:40:9b:10:78:d9:e1:
30:b0:9d:b4:e6:4e:64:7c:f7:8b:fd:c0:fa:15:82:1e:c6:bf:
be:1f:f1:18:65:4a:21:21:00:00:af:b0:e5:d0:31:3b:ca:98:
c3:af:63:6f:2d:43:8b:b0:41:e3:c2:4f:5b:13:53:6e:c8:e5:
72:5d:77:d0:61:a4:38:87:44:d6:25:ee:7d:96:ab:cf:12:a9:
a0:c5:d7:a7:fd:72:1c:aa:8c:eb:d6:81:4d:0f:3b:bd:ab:08:
25:aa:c6:6d:db:25:c6:0f:47:0f:05:01:18:f1:66:cb:48:64:
f9:7b:64:47:16:8d:21:dd:c8:d2:0a:e3:3b:80:03:c6:31:01:
1c:05:92:f0:63:6f:9e:a1:29:37:c5:61:87:5a:dd:4b:6f:36:
d8:f9:d0:ac:ee:00:e6:af:48:f7:27:f0:85:df:d2:e9:df:66:
1b:72:08:bf:0a:01:4a:ef:bb:ea:a8:0c:41:07:7d:1e:c9:22:
f0:53:e5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:41 2026 by rpki-client