Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/mYlIbN3LB8bV3lwISREgPgBByvw.roa
File: mYlIbN3LB8bV3lwISREgPgBByvw.roa (raw, json)
Hash identifier: C0TkVLAd1KKo4NjDmBzOATD2MUTpaU2DZlnsTmNbbOA=
Subject key identifier: 99:89:48:6C:DD:CB:07:C6:D5:DE:5C:08:49:11:20:3E:00:41:CA:FC
Certificate issuer: /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Certificate serial: 01A05DD3204C3DD3F98F7AC10AB30DE6CF05
Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/mYlIbN3LB8bV3lwISREgPgBByvw.roa
Signing time: Tue 01 Sep 2026 16:35:12 +0000
ROA not before: Tue 01 Sep 2026 16:35:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15510
IP address blocks: 46.17.88.0/21 maxlen: 24
91.192.192.0/22 maxlen: 24
91.215.184.0/22 maxlen: 24
185.27.244.0/22 maxlen: 24
193.164.206.0/23 maxlen: 24
193.200.80.0/23 maxlen: 24
194.116.174.0/23 maxlen: 24
195.8.126.0/24 maxlen: 24
212.42.25.0/24 maxlen: 24
2a03:be80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:d3:20:4c:3d:d3:f9:8f:7a:c1:0a:b3:0d:e6:cf:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Validity
Not Before: Sep 1 16:35:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9989486cddcb07c6d5de5c084911203e0041cafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:81:42:82:0b:68:d0:8b:71:15:0b:c7:a4:
b8:f5:dd:e1:4c:8e:40:40:57:1d:17:23:65:c5:47:
6c:78:87:d5:e0:17:58:79:2d:e8:38:20:9e:84:b8:
af:56:68:36:b7:61:f0:1d:8f:07:99:18:41:6d:da:
e2:54:5e:8a:ef:cd:7f:24:40:5d:44:6d:93:cd:ac:
52:d1:a4:59:ac:06:3b:82:50:6a:c0:8e:cf:b8:d2:
7f:cd:9c:35:e8:4b:e1:a1:e3:ef:32:99:d7:87:98:
ba:98:0d:c3:ae:bd:20:98:2c:5e:a3:30:49:e7:40:
f5:8a:4b:c3:3c:b9:7f:c0:a8:9b:82:72:5b:ff:61:
b6:e7:6a:aa:d1:71:7c:04:5a:57:d8:81:71:ac:9b:
d5:7f:74:38:69:35:42:4a:f2:06:fb:98:82:85:a3:
2f:66:5f:d9:e0:41:93:8a:5d:91:60:84:b7:a3:5c:
28:25:10:0b:ac:2d:51:25:5f:a0:fc:8e:ec:67:c7:
c1:11:81:78:db:76:9c:69:59:19:0a:cc:af:eb:9b:
f8:e1:b5:6f:7a:d5:7f:c7:4f:03:aa:a2:b7:ec:2d:
25:7c:4a:1e:ad:d2:b4:70:bb:44:fe:bf:95:17:f7:
34:f4:a1:24:ba:8a:04:fa:f1:cf:21:8b:41:6b:63:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:48:6C:DD:CB:07:C6:D5:DE:5C:08:49:11:20:3E:00:41:CA:FC
X509v3 Authority Key Identifier:
keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/mYlIbN3LB8bV3lwISREgPgBByvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.88.0/21
91.192.192.0/22
91.215.184.0/22
185.27.244.0/22
193.164.206.0/23
193.200.80.0/23
194.116.174.0/23
195.8.126.0/24
212.42.25.0/24
IPv6:
2a03:be80::/32
Signature Algorithm: sha256WithRSAEncryption
7d:f2:c2:0f:e0:d3:bd:ee:b7:7c:aa:35:5b:5a:e9:7f:02:00:
95:a0:7d:75:a0:f4:b1:5c:45:fb:4f:d9:ec:ca:b5:8e:60:5c:
9b:0f:f5:82:a7:47:4d:e8:47:a5:01:0c:23:1c:9b:d3:9f:0e:
e9:58:2a:aa:6e:a1:76:7c:fb:64:24:16:91:08:56:cd:45:12:
00:d8:31:85:50:aa:ce:a9:a4:6f:24:7b:ea:8b:8a:09:7c:ac:
b1:22:1b:32:7b:2f:b1:2e:28:dc:25:e0:0c:1c:b9:72:94:b4:
6b:c2:57:ad:6d:27:30:1c:6c:4d:7f:fc:e3:59:ed:51:6e:19:
c1:0f:65:03:88:5e:fe:5b:43:ff:c7:25:88:81:41:92:85:6d:
ad:54:d3:3b:7c:6b:22:6a:7a:71:57:ef:2f:71:bb:81:53:4a:
46:2c:d2:57:d4:72:b0:12:cf:d1:f4:14:1e:df:2c:51:79:e2:
01:cb:8a:d8:04:d0:b8:5e:01:8f:71:aa:19:a1:24:54:eb:b6:
ef:19:a6:a9:a4:6c:e2:d7:69:55:89:44:73:ab:c3:d5:d5:10:
ea:15:b0:d7:df:ce:c8:7c:32:4c:79:64:a8:d4:60:b1:c1:f5:
a0:c5:25:1e:c1:e5:38:fd:fa:52:fc:0a:36:0f:fd:99:c3:04:
e4:97:06:14
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAaBd0yBMPdP5j3rBCrMN5s8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjUxZDA2NzA3MTVlYjY5ZWZhMmZiZmYxOTk4YzNiZGJk
OGE5ZjUwHhcNMjYwOTAxMTYzNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTg5NDg2Y2RkY2IwN2M2ZDVkZTVjMDg0OTExMjAzZTAwNDFjYWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmWBQoILaNCLcRULx6S49d3hTI5A
QFcdFyNlxUdseIfV4BdYeS3oOCCehLivVmg2t2HwHY8HmRhBbdriVF6K781/JEBd
RG2TzaxS0aRZrAY7glBqwI7PuNJ/zZw16EvhoePvMpnXh5i6mA3Drr0gmCxeozBJ
50D1ikvDPLl/wKibgnJb/2G252qq0XF8BFpX2IFxrJvVf3Q4aTVCSvIG+5iChaMv
Zl/Z4EGTil2RYIS3o1woJRALrC1RJV+g/I7sZ8fBEYF423acaVkZCsyv65v44bVv
etV/x08DqqK37C0lfEoerdK0cLtE/r+VF/c09KEkuooE+vHPIYtBa2PExwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFJmJSGzdywfG1d5cCEkRID4AQcr8MB8GA1UdIwQY
MBaAFI31HQZwcV62nvovv/GZjDvb2Kn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDkt
N2E3OTRkNWNlZDNkLzEvbVlsSWJOM0xCOGJWM2x3SVNSRWdQZ0JCeXZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDktN2E3OTRkNWNlZDNk
LzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDLhFYAwQC
W8DAAwQCW9e4AwQCuRv0AwQBwaTOAwQBwchQAwQBwnSuAwQAwwh+AwQA1CoZMA0E
AgACMAcDBQAqA76AMA0GCSqGSIb3DQEBCwUAA4IBAQB98sIP4NO97rd8qjVbWul/
AgCVoH11oPSxXEX7T9nsyrWOYFybD/WCp0dN6EelAQwjHJvTnw7pWCqqbqF2fPtk
JBaRCFbNRRIA2DGFUKrOqaRvJHvqi4oJfKyxIhsyey+xLijcJeAMHLlylLRrwlet
bScwHGxNf/zjWe1RbhnBD2UDiF7+W0P/xyWIgUGShW2tVNM7fGsianpxV+8vcbuB
U0pGLNJX1HKwEs/R9BQe3yxReeIBy4rYBNC4XgGPcaoZoSRU67bvGaappGzi12lV
iURzq8PV1RDqFbDX387IfDJMeWSo1GCxwfWgxSUeweU4/fpS/Ao2D/2ZwwTklwYU
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:27:41 2026 by rpki-client