Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/mYgjhTH0BS3qrs0ZjiO_8_EBYtI.roa
File: mYgjhTH0BS3qrs0ZjiO_8_EBYtI.roa (raw, json)
Hash identifier: CgpuCBWQUKpo80yS5uyAF0yCv9LrXxgg9n9BYvmd7yM=
Subject key identifier: 99:88:23:85:31:F4:05:2D:EA:AE:CD:19:8E:23:BF:F3:F1:01:62:D2
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 019FA789120AEB40941EA2590576D444E0EE
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/mYgjhTH0BS3qrs0ZjiO_8_EBYtI.roa
Signing time: Tue 28 Jul 2026 07:03:25 +0000
ROA not before: Tue 28 Jul 2026 07:03:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49562
IP address blocks: 185.2.172.0/22 maxlen: 22
185.2.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:89:12:0a:eb:40:94:1e:a2:59:05:76:d4:44:e0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Jul 28 07:03:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9988238531f4052deaaecd198e23bff3f10162d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:82:54:f8:82:5a:7b:2f:2a:81:49:c8:13:7a:
57:bb:24:06:14:35:e6:91:90:45:5e:73:5a:c1:27:
a4:97:65:ea:5b:f2:b2:45:a7:4c:52:c1:fe:13:95:
10:29:36:2d:c0:78:66:dd:20:84:df:47:0a:7e:88:
db:2d:57:c0:e4:b7:ff:fa:ea:0a:fc:97:63:eb:ca:
aa:0f:ff:2e:72:f8:88:20:c6:86:c6:55:35:e5:a6:
7b:9e:a9:f2:72:1b:7e:1f:9f:fb:3b:1f:a9:4b:ee:
46:e4:94:af:94:49:22:ab:ca:f7:15:ed:06:9e:ae:
da:2f:0a:c2:44:93:6a:bc:27:33:95:82:8b:65:85:
fd:1d:80:d4:b2:c1:01:67:fa:42:a3:52:4d:f0:eb:
85:68:56:70:7b:df:81:87:b2:70:f7:53:ad:ed:9a:
3e:c4:93:a8:f1:62:32:7f:0f:7c:c1:ef:93:2f:0b:
46:e2:7f:ba:87:d6:ac:97:0a:99:d0:98:38:59:43:
81:cb:58:c7:62:fd:97:5e:9f:2d:68:5c:58:d0:90:
c0:3d:2d:fb:ad:bd:63:3c:d8:7b:b3:f3:80:3f:7a:
f6:47:81:fb:fb:e8:65:a6:72:74:ea:bb:7d:ea:83:
f0:25:fc:74:c4:65:53:96:3b:70:72:2b:a5:c9:cf:
36:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:88:23:85:31:F4:05:2D:EA:AE:CD:19:8E:23:BF:F3:F1:01:62:D2
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/mYgjhTH0BS3qrs0ZjiO_8_EBYtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.172.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:54:29:5f:fe:dd:41:22:b4:38:71:19:82:1d:11:a2:ce:c3:
fa:6e:c3:46:b1:21:63:3e:2b:43:76:c8:bc:89:4f:15:de:b3:
87:b2:a5:c4:f6:fb:39:f2:e5:cf:42:74:be:3a:5d:13:6c:ae:
66:de:a3:93:7c:40:47:6d:5e:9d:d9:7f:24:dd:61:86:72:c2:
62:30:70:f6:8d:a9:e7:d8:0d:b2:ca:dd:a8:2a:84:f9:09:5a:
9e:7c:08:16:cb:1f:06:3e:5d:c1:e8:04:66:6b:25:84:ce:47:
6f:32:4e:eb:7c:99:27:70:14:39:e6:4c:84:37:af:81:30:22:
1a:e5:90:18:84:f2:6e:ce:d6:e7:f8:93:64:7f:6f:20:d4:bb:
59:1a:bf:ee:67:c0:23:cb:11:4a:e1:1a:e6:32:ba:ad:23:76:
5f:1c:30:d3:0b:ee:23:04:bf:c1:77:53:d0:52:52:90:1e:6e:
c0:08:e3:bf:45:60:05:7d:6a:f1:f6:35:f2:1f:ac:87:8b:87:
55:22:f0:fb:70:a6:c8:18:fb:5f:ea:3d:c0:11:0b:ff:e4:65:
fe:ca:5b:f3:06:e1:68:eb:26:3e:c2:18:1c:46:3d:8f:87:b6:
7a:f0:d3:20:cb:a6:41:3c:29:fa:d3:8a:6e:ee:45:47:8d:47:
25:35:ed:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+niRIK60CUHqJZBXbURODuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk
Y2UyMDUwHhcNMjYwNzI4MDcwMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTg4MjM4NTMxZjQwNTJkZWFhZWNkMTk4ZTIzYmZmM2YxMDE2MmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoJU+IJaey8qgUnIE3pXuyQGFDXm
kZBFXnNawSekl2XqW/KyRadMUsH+E5UQKTYtwHhm3SCE30cKfojbLVfA5Lf/+uoK
/Jdj68qqD/8ucviIIMaGxlU15aZ7nqnycht+H5/7Ox+pS+5G5JSvlEkiq8r3Fe0G
nq7aLwrCRJNqvCczlYKLZYX9HYDUssEBZ/pCo1JN8OuFaFZwe9+Bh7Jw91Ot7Zo+
xJOo8WIyfw98we+TLwtG4n+6h9aslwqZ0Jg4WUOBy1jHYv2XXp8taFxY0JDAPS37
rb1jPNh7s/OAP3r2R4H7++hlpnJ06rt96oPwJfx0xGVTljtwciulyc82dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJmII4Ux9AUt6q7NGY4jv/PxAWLSMB8GA1UdIwQY
MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et
ODcyYjM3MTBjMmExLzEvbVlnamhUSDBCUzNxcnMwWmppT184X0VCWXRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx
LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQKsMA0G
CSqGSIb3DQEBCwUAA4IBAQBdVClf/t1BIrQ4cRmCHRGizsP6bsNGsSFjPitDdsi8
iU8V3rOHsqXE9vs58uXPQnS+Ol0TbK5m3qOTfEBHbV6d2X8k3WGGcsJiMHD2jann
2A2yyt2oKoT5CVqefAgWyx8GPl3B6ARmayWEzkdvMk7rfJkncBQ55kyEN6+BMCIa
5ZAYhPJuztbn+JNkf28g1LtZGr/uZ8AjyxFK4RrmMrqtI3ZfHDDTC+4jBL/Bd1PQ
UlKQHm7ACOO/RWAFfWrx9jXyH6yHi4dVIvD7cKbIGPtf6j3AEQv/5GX+ylvzBuFo
6yY+whgcRj2Ph7Z68NMgy6ZBPCn604pu7kVHjUclNe09
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:15:11 2026 by rpki-client