Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/mYNh-Bk4y33XhOAMSs0MQA7LbcE.roa
File: mYNh-Bk4y33XhOAMSs0MQA7LbcE.roa (raw, json)
Hash identifier: iBLXRuhftJlhiPxjhOMoBQKlQtMobGlCuN55cj0Y6VQ=
Subject key identifier: 99:83:61:F8:19:38:CB:7D:D7:84:E0:0C:4A:CD:0C:40:0E:CB:6D:C1
Certificate issuer: /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial: 01A07C1C3C11FAFB88D124EA6163AF0BD45C
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/mYNh-Bk4y33XhOAMSs0MQA7LbcE.roa
Signing time: Mon 07 Sep 2026 13:43:40 +0000
ROA not before: Mon 07 Sep 2026 13:43:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197938
IP address blocks: 194.0.22.0/24 maxlen: 24
2001:678:1a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:1c:3c:11:fa:fb:88:d1:24:ea:61:63:af:0b:d4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Validity
Not Before: Sep 7 13:43:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=998361f81938cb7dd784e00c4acd0c400ecb6dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:59:2f:ce:ec:ec:b1:92:1d:db:3c:b8:ad:
61:d9:f9:29:8e:0b:f9:30:e3:51:76:ed:a7:c7:5b:
1c:96:74:b7:d5:e6:32:98:e5:24:3d:40:0b:78:30:
ee:d1:69:1c:82:53:a3:1f:29:4e:67:57:3d:ff:c4:
a6:32:3a:4f:6a:af:dd:41:99:8f:6d:9e:66:c9:07:
6b:44:87:09:1b:25:d7:11:c3:e3:59:34:82:0d:cd:
11:54:5c:5c:35:c1:da:1f:7a:09:7b:de:45:99:d9:
93:fb:9e:d0:10:d7:6c:89:e6:14:88:1b:8d:0e:10:
ff:59:ce:80:c3:5c:2e:95:4c:ee:f8:2c:5d:45:26:
9f:3d:5c:ee:4f:14:31:04:58:9b:e1:2d:f5:07:67:
33:87:42:08:48:9f:2f:70:0b:44:2f:1b:d4:93:5a:
23:5d:21:2d:bc:a1:e3:91:1e:c6:be:f3:4d:83:c8:
28:fe:b1:37:44:c7:4c:2b:49:3b:77:e6:46:c1:88:
1a:dc:a2:b8:c0:40:00:2b:f7:14:e4:99:e8:33:9d:
08:46:1b:f6:49:f3:fa:c5:d1:78:4c:25:5d:fe:34:
b0:5f:84:51:87:33:33:2a:92:48:43:18:ef:e1:07:
b9:63:c6:fa:00:1c:eb:65:5c:6e:6e:dd:e2:0c:18:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:83:61:F8:19:38:CB:7D:D7:84:E0:0C:4A:CD:0C:40:0E:CB:6D:C1
X509v3 Authority Key Identifier:
keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/mYNh-Bk4y33XhOAMSs0MQA7LbcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.22.0/24
IPv6:
2001:678:1a::/48
Signature Algorithm: sha256WithRSAEncryption
9b:a4:77:ce:59:03:a2:2d:50:a9:98:9b:c7:73:8d:2a:f2:00:
18:8b:13:82:95:a4:fd:07:4f:6c:34:ae:a4:2c:13:7d:03:8b:
05:77:4f:b1:ad:f9:e8:a7:ee:5b:d6:63:be:42:f7:b4:e7:4d:
a3:03:c1:80:08:6b:8e:54:83:80:98:48:71:b2:94:db:10:09:
27:30:2a:64:ab:3f:0e:94:40:85:e5:57:be:59:f9:fb:6f:33:
b6:6d:8a:9a:96:de:63:f6:89:32:72:20:9a:01:1b:02:09:b5:
3e:91:77:9d:27:2c:c8:e6:64:d5:b8:af:80:4b:8a:23:c8:00:
57:6d:3d:9c:28:9e:10:38:0c:06:df:62:45:69:f7:ed:80:8a:
1c:a6:d6:50:79:d1:fe:f5:80:18:6c:e1:12:33:4f:16:94:8e:
64:c0:80:58:63:62:b4:9a:4a:b4:7a:1b:7e:b1:bd:cb:97:c2:
72:36:35:fb:f3:36:d8:31:0b:f2:9e:12:4d:7e:ca:d0:cf:b5:
37:0c:4b:8b:07:aa:b4:d6:ec:ef:8d:85:f6:24:b2:13:b3:2e:
df:9a:ea:60:a1:30:73:f9:be:66:04:2d:3d:cd:48:89:6b:c8:
54:28:70:a7:8b:31:8e:47:e0:73:58:45:88:05:f7:51:2d:2c:
2c:19:1e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 10:12:49 2026 by rpki-client