Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/mYq9qnRkmchFRK-Wzd0qP6BpgSk.roa
File: mYq9qnRkmchFRK-Wzd0qP6BpgSk.roa (raw, json)
Hash identifier: xi+lW9NPHKW3h3DS6hMmwPhyI8zaqr3w5TDNrGj4I8s=
Subject key identifier: 99:8A:BD:AA:74:64:99:C8:45:44:AF:96:CD:DD:2A:3F:A0:69:81:29
Certificate issuer: /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Certificate serial: 019D24950391FD507AC55F2B805EFEBC72D5
Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/mYq9qnRkmchFRK-Wzd0qP6BpgSk.roa
Signing time: Wed 25 Mar 2026 10:40:38 +0000
ROA not before: Wed 25 Mar 2026 10:40:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42183
IP address blocks: 185.82.96.0/22 maxlen: 24
185.82.96.0/24 maxlen: 24
185.82.97.0/24 maxlen: 24
185.82.98.0/24 maxlen: 24
185.82.99.0/24 maxlen: 24
2a05:8ec0::/29 maxlen: 29
2a05:8ec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:95:03:91:fd:50:7a:c5:5f:2b:80:5e:fe:bc:72:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Validity
Not Before: Mar 25 10:40:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=998abdaa746499c84544af96cddd2a3fa0698129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:b5:17:38:fc:b9:35:ad:28:51:25:c0:ce:
ce:7c:f4:8c:4d:98:bd:84:63:8e:ec:f9:39:00:45:
b1:74:3b:cc:dc:83:d7:71:0f:59:78:fe:42:9f:98:
b4:20:1a:4b:55:9d:b8:76:ce:44:e4:67:36:1a:ac:
c7:c6:d6:ce:92:62:3b:ce:5a:ce:81:e4:99:f8:25:
23:79:39:77:d0:93:82:71:47:09:a0:cc:57:57:4b:
4a:a1:dd:24:d7:a7:d6:a9:be:49:ae:e5:e6:62:b8:
1d:ac:43:0b:85:a4:ab:5a:10:32:c3:0c:80:04:57:
7a:8e:77:6a:f1:87:c6:71:00:35:e2:2a:95:c3:40:
8c:8e:55:1a:a8:a2:a4:b6:45:ae:00:fb:52:ec:e0:
38:77:3f:c0:0a:55:64:88:e5:88:5c:45:31:33:1e:
97:4b:82:5f:dd:78:6d:8e:0f:8a:4b:70:13:a0:b1:
d9:2c:f8:ae:31:c3:76:56:72:84:16:f9:5a:ea:78:
db:94:93:b9:2c:15:90:d5:34:ef:fb:d8:ec:16:30:
71:3b:37:1e:ae:31:14:35:13:98:c7:0b:88:3a:2c:
8c:97:3e:de:20:ab:1f:61:b6:ae:46:e4:1d:c2:3c:
7a:cb:93:6f:6d:af:1c:3f:b6:7d:3c:6e:56:14:28:
06:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8A:BD:AA:74:64:99:C8:45:44:AF:96:CD:DD:2A:3F:A0:69:81:29
X509v3 Authority Key Identifier:
keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/mYq9qnRkmchFRK-Wzd0qP6BpgSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.96.0/22
IPv6:
2a05:8ec0::/29
Signature Algorithm: sha256WithRSAEncryption
88:79:c0:d2:1e:7c:53:b6:b8:19:b3:16:b4:d7:cc:00:53:28:
f7:46:b7:8a:ad:4d:27:89:c2:17:79:f0:05:d6:d5:bf:59:89:
4f:34:07:ff:6a:4a:db:e2:26:ec:b0:8e:f3:a3:b5:7d:06:bd:
7a:39:56:8e:1f:9f:bb:b8:99:cc:c7:10:d3:b9:36:fd:72:6d:
7b:3b:03:21:50:ca:2d:de:4d:8f:c0:65:83:5f:76:1c:4d:6a:
65:a3:e7:be:27:ba:b0:82:9b:fe:0d:ce:90:ed:e0:56:76:74:
3c:ec:49:6b:15:f3:85:7f:0d:c0:1c:2a:e6:7a:7f:e5:28:77:
d6:6d:28:36:5d:f9:53:f1:97:4f:48:b1:1f:a4:e6:46:cf:4b:
a3:20:d3:bb:d7:e0:d7:a9:22:c9:3a:cf:fa:5b:19:18:50:90:
07:e8:d0:6f:e5:19:01:eb:5c:47:93:85:a7:78:74:13:e0:3e:
b4:46:ae:70:0b:1f:3e:42:36:b9:f3:b3:46:b1:25:98:f9:b9:
b9:e6:ca:64:e0:8d:72:6f:e8:38:fa:70:bd:7d:a6:13:21:14:
e2:6b:37:15:9a:79:4f:ca:5d:74:4e:83:ab:51:a5:c7:49:08:
c2:81:37:7a:e4:c1:1b:fa:06:ee:e3:05:50:e0:24:d4:56:16:
21:f3:f5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:19:39 2026 by rpki-client