Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mYrGnGNOG_KxHBKzA0PktHtB0zg.roa
File: mYrGnGNOG_KxHBKzA0PktHtB0zg.roa (raw, json)
Hash identifier: V9wGq3KpCLuxeuzuSnwYl7+y69qwZ/9joaNny8p514w=
Subject key identifier: 99:8A:C6:9C:63:4E:1B:F2:B1:1C:12:B3:03:43:E4:B4:7B:41:D3:38
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019F885FE98DFF15B8CFE5049A62D99A22D0
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mYrGnGNOG_KxHBKzA0PktHtB0zg.roa
Signing time: Wed 22 Jul 2026 05:50:14 +0000
ROA not before: Wed 22 Jul 2026 05:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 109.121.47.0/24 maxlen: 24
194.28.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:5f:e9:8d:ff:15:b8:cf:e5:04:9a:62:d9:9a:22:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 22 05:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=998ac69c634e1bf2b11c12b30343e4b47b41d338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:27:6f:a5:51:1b:62:60:59:5d:9a:9d:32:
8c:82:13:db:8c:21:0e:97:6b:9f:45:3f:2b:bb:14:
27:91:b4:49:66:6c:03:65:5e:e0:b5:14:d8:84:95:
f1:af:42:fc:f7:49:35:e3:cc:7d:19:2d:23:6e:9f:
1c:18:1c:00:34:5f:d3:c9:aa:b7:c8:c3:be:be:e0:
b4:13:c3:4b:e4:72:da:22:c5:8d:b9:ae:6d:6e:67:
ad:8e:0b:6b:30:33:a7:2b:a3:f4:ae:fa:bd:39:83:
e8:c2:1b:03:37:81:32:b7:a3:6f:d9:d4:94:53:2b:
f8:b4:9c:a9:7f:a4:e4:2a:9c:7e:af:b7:30:a0:b0:
4a:68:12:86:b8:cf:e4:31:78:48:ee:e7:27:3c:75:
c4:1a:f2:84:ed:92:99:56:6f:6b:fa:18:93:79:fc:
ad:74:17:03:fd:a3:2d:79:b4:a1:e8:14:9d:ac:58:
c8:8d:74:7b:70:62:19:63:04:f7:d0:6b:25:ff:d3:
30:fb:f7:d7:a5:bf:c2:ab:31:13:96:e4:d3:a7:b2:
28:69:a9:9c:89:7e:3a:53:2e:72:ca:3a:28:2a:3b:
5b:31:38:00:6b:92:68:31:d0:af:ca:1d:f2:dd:0a:
dd:09:7d:77:fd:a3:a3:85:ac:30:12:7f:b7:f7:e9:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8A:C6:9C:63:4E:1B:F2:B1:1C:12:B3:03:43:E4:B4:7B:41:D3:38
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mYrGnGNOG_KxHBKzA0PktHtB0zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.47.0/24
194.28.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ff:66:90:df:89:9d:40:98:05:63:2f:ac:79:c1:91:70:7d:
73:be:49:87:a0:33:90:2d:0d:58:f8:4f:89:50:e5:5e:2e:53:
1a:e0:56:91:1e:34:60:98:29:98:32:a9:33:81:89:b6:06:7a:
0a:82:6e:9f:4b:13:9a:87:b1:9a:e7:a1:0f:c1:ff:73:b7:0c:
81:a9:c9:17:e6:25:c1:75:16:9c:56:5d:38:cc:61:1c:72:93:
12:92:52:ba:43:fe:71:1e:43:4e:cf:1b:33:d5:a7:c7:a0:66:
ce:1f:1c:b4:36:fb:8f:c4:b6:3e:ec:1f:90:05:23:e6:45:c3:
da:ec:ed:27:df:14:96:ba:04:e9:3b:7d:a9:07:77:96:f2:0e:
01:6f:9a:a3:9f:55:17:37:e6:bf:44:ef:b8:2c:da:2b:06:28:
4d:ac:75:e8:cc:82:27:0b:e3:b0:13:91:a3:23:b3:57:5d:49:
72:07:2c:00:f8:c2:3e:8a:69:a6:dd:18:be:3a:eb:81:98:57:
c6:5d:e0:70:9b:5b:8b:68:b0:cd:cb:65:9e:34:92:ca:de:c0:
67:ad:f4:c9:78:74:ed:d9:12:31:8e:f6:b6:f9:91:35:17:8e:
52:5b:f8:4d:e7:cc:7e:92:6c:54:40:95:8d:2a:d5:3b:68:c3:
39:5d:24:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:04:02 2026 by rpki-client