Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/mXS1m0698xLzrELXwB-RSderOto.roa
File: mXS1m0698xLzrELXwB-RSderOto.roa (raw, json)
Hash identifier: tg8KxS40CLvKrdh4HXk2p3m8IOhIJf3JG9Iax9TQ6ZA=
Subject key identifier: 99:74:B5:9B:4E:BD:F3:12:F3:AC:42:D7:C0:1F:91:49:D7:AB:3A:DA
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019D73006B6BB42FA0C1FE3498F5BF496431
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/mXS1m0698xLzrELXwB-RSderOto.roa
Signing time: Thu 09 Apr 2026 16:08:20 +0000
ROA not before: Thu 09 Apr 2026 16:08:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44388
IP address blocks: 85.120.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:00:6b:6b:b4:2f:a0:c1:fe:34:98:f5:bf:49:64:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Apr 9 16:08:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9974b59b4ebdf312f3ac42d7c01f9149d7ab3ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:bb:32:bf:96:4f:ce:3d:ef:ab:83:51:2e:
89:ae:8f:7a:88:c8:d2:73:57:2c:a6:4a:08:9a:b1:
e5:92:45:cc:16:a8:23:f5:9c:71:78:77:72:0f:1c:
f9:86:74:ea:c3:1a:a0:e4:e7:9d:e3:40:ea:9d:22:
23:45:1a:ef:16:80:5e:ea:fe:d0:6d:96:9e:6f:a5:
b2:1f:d0:b9:80:3c:aa:c2:28:bf:d8:0f:11:f0:cd:
56:c5:5d:42:2d:3b:42:82:b0:c5:dd:e4:57:78:00:
fa:c5:3e:c1:cd:a2:e3:08:34:07:a9:1c:76:3b:e2:
ad:67:d9:28:53:8b:0e:54:87:ec:f3:8d:af:93:dc:
7e:4f:86:b2:68:b1:74:af:72:e3:4f:df:85:4c:74:
09:bd:e8:9d:5a:de:53:7f:f4:3d:e2:9f:f0:3e:c4:
00:0d:f3:55:7d:3f:d3:e0:cb:ea:a4:4d:34:83:b8:
5d:59:6d:ac:54:18:cb:e8:c0:57:7b:e7:29:c0:64:
55:02:40:3f:e7:1a:c7:e5:89:8f:5e:a2:dd:98:da:
c0:96:24:64:7d:63:84:d6:4e:43:f9:c2:93:ce:98:
4a:c4:bf:50:b6:ce:cf:ea:f1:e7:c1:9b:9b:dd:2c:
14:b7:b5:f3:e2:74:c9:cc:9c:fa:f2:8a:f0:b8:bb:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:74:B5:9B:4E:BD:F3:12:F3:AC:42:D7:C0:1F:91:49:D7:AB:3A:DA
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/mXS1m0698xLzrELXwB-RSderOto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.144.0/24
Signature Algorithm: sha256WithRSAEncryption
87:90:c7:98:d3:bc:0e:61:43:6c:e8:65:7e:55:ce:e2:8f:a4:
01:10:dc:44:a8:0b:80:9a:b8:ef:bb:85:93:36:bd:c7:39:65:
c4:2f:64:11:c0:ee:a8:65:bd:d6:04:1c:73:37:57:60:13:cf:
55:b7:cf:16:98:70:41:88:47:9a:1a:43:7c:a3:02:c6:3d:0d:
da:46:5c:2e:d9:4c:61:01:ae:2b:be:fb:07:31:68:b4:2b:40:
b7:c0:b1:02:a4:9e:c6:e7:e7:f3:1f:d4:48:7a:a2:a5:38:3b:
a1:90:e4:01:ba:ed:1a:63:3c:bb:81:f5:b3:3c:78:19:ea:05:
0b:62:92:95:16:16:b3:f7:12:ba:4a:32:fa:0e:96:b7:58:c6:
ac:1d:ca:71:08:ad:0f:2f:fa:2a:fa:dd:be:f5:30:fe:33:5c:
cb:ca:ec:88:0e:38:25:2e:d8:6d:bc:c5:5a:40:c8:6e:c0:e2:
58:68:51:71:56:d0:ec:a3:19:02:df:a1:75:4f:99:f8:eb:92:
a6:f1:dd:6e:5e:93:32:e4:76:3b:be:88:79:bf:1e:bd:59:6f:
cd:ed:de:26:85:13:00:63:b9:c6:63:5c:48:9b:cb:4e:6d:8a:
5f:ad:48:c6:af:87:a4:1f:13:cc:0e:aa:1a:83:2f:97:49:f1:
26:f1:0a:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1zAGtrtC+gwf40mPW/SWQxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwNDA5MTYwODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTc0YjU5YjRlYmRmMzEyZjNhYzQyZDdjMDFmOTE0OWQ3YWIzYWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0G7Mr+WT84976uDUS6Jro96iMjS
c1cspkoImrHlkkXMFqgj9ZxxeHdyDxz5hnTqwxqg5Oed40DqnSIjRRrvFoBe6v7Q
bZaeb6WyH9C5gDyqwii/2A8R8M1WxV1CLTtCgrDF3eRXeAD6xT7BzaLjCDQHqRx2
O+KtZ9koU4sOVIfs842vk9x+T4ayaLF0r3LjT9+FTHQJveidWt5Tf/Q94p/wPsQA
DfNVfT/T4MvqpE00g7hdWW2sVBjL6MBXe+cpwGRVAkA/5xrH5YmPXqLdmNrAliRk
fWOE1k5D+cKTzphKxL9Qts7P6vHnwZub3SwUt7Xz4nTJzJz68orwuLvpWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJl0tZtOvfMS86xC18AfkUnXqzraMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvbVhTMW0wNjk4eEx6ckVMWHdCLVJTZGVyT3RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXiQMA0G
CSqGSIb3DQEBCwUAA4IBAQCHkMeY07wOYUNs6GV+Vc7ij6QBENxEqAuAmrjvu4WT
Nr3HOWXEL2QRwO6oZb3WBBxzN1dgE89Vt88WmHBBiEeaGkN8owLGPQ3aRlwu2Uxh
Aa4rvvsHMWi0K0C3wLECpJ7G5+fzH9RIeqKlODuhkOQBuu0aYzy7gfWzPHgZ6gUL
YpKVFhaz9xK6SjL6Dpa3WMasHcpxCK0PL/oq+t2+9TD+M1zLyuyIDjglLthtvMVa
QMhuwOJYaFFxVtDsoxkC36F1T5n465Km8d1uXpMy5HY7voh5vx69WW/N7d4mhRMA
Y7nGY1xIm8tObYpfrUjGr4ekHxPMDqoagy+XSfEm8Qon
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:55:29 2026 by rpki-client