Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/mY4Ps2ODyoJOR0xKvF6KJHBSMik.roa
File: mY4Ps2ODyoJOR0xKvF6KJHBSMik.roa (raw, json)
Hash identifier: UmvKuUUkINXoOW+jyUXuOgnlOY9eMq6JudtGUkNm/Ow=
Subject key identifier: 99:8E:0F:B3:63:83:CA:82:4E:47:4C:4A:BC:5E:8A:24:70:52:32:29
Certificate issuer: /CN=8836bd8fad393e5131a023729315b356014e6637
Certificate serial: 019B7D5CB36C32FD63C9D66422E724C027A3
Authority key identifier: 88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/mY4Ps2ODyoJOR0xKvF6KJHBSMik.roa
Signing time: Fri 02 Jan 2026 06:19:45 +0000
ROA not before: Fri 02 Jan 2026 06:19:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51485
IP address blocks: 192.40.70.0/24 maxlen: 24
192.40.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:b3:6c:32:fd:63:c9:d6:64:22:e7:24:c0:27:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8836bd8fad393e5131a023729315b356014e6637
Validity
Not Before: Jan 2 06:19:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=998e0fb36383ca824e474c4abc5e8a2470523229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:39:97:4e:6b:69:a9:fa:7e:e5:83:d6:f5:
3c:e5:54:b8:c3:1d:1f:3e:8d:6f:36:3c:a3:c1:12:
52:df:71:75:a9:ed:5e:69:38:6a:97:10:87:df:ff:
c0:87:6c:fe:bc:f2:64:26:b3:bc:66:f8:bc:af:e8:
33:38:fe:b6:11:20:34:d0:4d:a9:97:6a:18:42:fd:
56:5a:44:50:ad:b7:30:7c:1f:0e:be:33:c7:a6:38:
f6:87:88:3d:a6:5d:04:bb:d6:b3:ce:a6:c0:0d:08:
af:c8:f9:fd:9c:6e:0c:c6:aa:78:65:5a:fd:cc:39:
52:3b:2c:da:7f:8b:90:46:f9:3e:82:2a:c9:62:e5:
4a:fe:0d:08:f7:42:81:ea:b7:aa:3b:8a:d0:78:1d:
62:b2:db:f3:d1:c1:a3:4e:dd:32:0a:9e:c6:87:af:
a6:97:9f:90:0c:62:fd:7d:f1:c4:57:2f:e8:bc:31:
ce:1a:99:5f:42:83:88:e1:87:55:3f:8a:eb:5a:ea:
9b:48:3c:e7:74:2c:67:0d:c4:f5:26:ba:0c:00:8e:
79:9d:0c:8c:db:cc:7c:26:e8:25:66:2c:17:5c:3e:
66:ff:0d:ef:35:f9:59:b3:d8:8f:ef:90:74:14:94:
20:3e:08:3e:1e:bb:ae:1a:a3:02:5a:ff:33:0d:1e:
e3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8E:0F:B3:63:83:CA:82:4E:47:4C:4A:BC:5E:8A:24:70:52:32:29
X509v3 Authority Key Identifier:
keyid:88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/mY4Ps2ODyoJOR0xKvF6KJHBSMik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.70.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:63:31:28:00:96:c6:a5:12:66:9c:bb:46:93:c7:9a:c3:87:
0f:71:53:29:21:a0:70:d3:8c:57:bc:2e:7b:c0:73:b5:4e:78:
9c:04:59:a3:58:75:90:13:31:1c:94:aa:d0:dd:28:c8:89:fe:
b4:d1:0a:85:c5:d0:8d:f3:3c:58:a9:f6:33:67:b3:1a:c1:b1:
38:a7:56:ec:11:48:d7:06:51:87:97:74:3c:b5:b9:fb:85:22:
d2:25:16:0f:0c:83:68:14:44:55:31:1d:21:ab:8b:90:43:d3:
fa:bc:92:a8:fc:60:93:9b:f2:cf:14:c2:ff:9c:42:ca:5c:3e:
68:e9:25:2a:fc:c4:d0:e3:5b:ab:4c:36:ad:39:9f:56:8f:31:
2d:66:4b:f1:15:4d:30:8b:43:c4:18:8c:6f:d7:ce:7a:51:f1:
6e:11:b7:10:d9:16:de:57:f9:7b:8b:5d:09:c6:f1:b5:a7:2c:
54:43:c6:97:c1:e9:e1:df:58:0c:ed:13:b7:12:b3:50:d5:e3:
03:b6:99:89:36:83:24:b0:f3:88:60:ec:89:a6:c4:e9:60:8f:
ab:6a:8e:9b:bf:ed:ad:b7:ed:7b:8c:d4:83:f7:23:01:9b:68:
a2:2f:c0:e2:78:c0:88:72:ab:79:55:78:c7:69:f9:64:bd:12:
22:93:60:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:04:50 2026 by rpki-client