Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/mt2zCmNdnBgEuyHQRB2CTEl3Yus.roa
File: mt2zCmNdnBgEuyHQRB2CTEl3Yus.roa (raw, json)
Hash identifier: Yc9rJNj4pZitXQDHf0wlaTuKFQBYh33LRX7jBVTgYxk=
Subject key identifier: 9A:DD:B3:0A:63:5D:9C:18:04:BB:21:D0:44:1D:82:4C:49:77:62:EB
Certificate issuer: /CN=73f82e0ed0f36e099237cc42cf8778b407828001
Certificate serial: 019C1F1EAF75DF87F6BEAA5ACA829CF18FE1
Authority key identifier: 73:F8:2E:0E:D0:F3:6E:09:92:37:CC:42:CF:87:78:B4:07:82:80:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/mt2zCmNdnBgEuyHQRB2CTEl3Yus.roa
Signing time: Mon 02 Feb 2026 16:10:30 +0000
ROA not before: Mon 02 Feb 2026 16:10:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200998
IP address blocks: 141.98.32.0/24 maxlen: 24
141.98.33.0/24 maxlen: 24
141.98.34.0/24 maxlen: 24
141.98.35.0/24 maxlen: 24
195.114.100.0/24 maxlen: 24
195.114.101.0/24 maxlen: 24
195.182.1.0/24 maxlen: 24
2a09:e40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1f:1e:af:75:df:87:f6:be:aa:5a:ca:82:9c:f1:8f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f82e0ed0f36e099237cc42cf8778b407828001
Validity
Not Before: Feb 2 16:10:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9addb30a635d9c1804bb21d0441d824c497762eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:c7:57:d5:b1:2c:c4:b5:09:41:97:3a:ee:
a5:31:21:01:d3:ad:ab:c7:d8:87:41:2b:d7:63:8a:
7b:cf:b0:12:85:b1:53:48:d7:77:4f:df:7f:bb:0c:
6c:b7:fd:79:17:6b:0a:40:94:9a:1d:ff:f2:1c:35:
c4:0a:28:2f:18:f3:f9:ad:ac:f0:83:84:cc:a4:ea:
d9:83:4b:54:3c:c5:9b:6e:02:9e:99:e8:4f:09:5a:
4c:5a:72:af:32:3e:26:d8:b8:06:13:df:6d:ca:e1:
a6:ae:fa:fe:34:8e:49:eb:19:e7:03:d5:5c:0b:e8:
87:03:ce:fc:e3:41:5d:9b:f6:fe:73:4f:c5:59:08:
12:1c:15:0e:5d:6e:24:92:3d:ec:9a:ac:fc:44:8f:
27:aa:9c:60:b2:a6:8d:c3:b3:bd:d3:db:6d:10:80:
1c:e0:5d:56:e5:47:d0:2f:84:bc:b4:25:75:48:e2:
08:7c:2a:15:e8:1e:1f:bb:20:cf:69:fa:dd:97:3a:
53:dc:b1:cb:c6:39:98:bc:6a:f6:e6:1a:2a:2b:3d:
89:d6:cb:e2:b9:4b:b2:3b:80:52:86:83:3b:2e:dd:
10:2f:4b:bc:26:01:19:d4:e9:1b:53:6d:99:f9:2f:
d0:ca:da:d2:9b:81:b1:9b:93:c3:40:89:17:2f:79:
23:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DD:B3:0A:63:5D:9C:18:04:BB:21:D0:44:1D:82:4C:49:77:62:EB
X509v3 Authority Key Identifier:
keyid:73:F8:2E:0E:D0:F3:6E:09:92:37:CC:42:CF:87:78:B4:07:82:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/mt2zCmNdnBgEuyHQRB2CTEl3Yus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.32.0/22
195.114.100.0/23
195.182.1.0/24
IPv6:
2a09:e40::/32
Signature Algorithm: sha256WithRSAEncryption
a1:81:5f:68:23:3e:66:d8:9e:a7:61:5d:e0:58:e6:36:b0:a5:
8b:92:f5:4d:4f:c9:d0:97:cd:9c:ba:be:a4:7f:f2:79:96:bd:
39:ba:9e:7b:a6:6c:8c:eb:21:b0:c5:7f:9b:72:ce:a9:7e:cc:
b8:09:d4:cf:b4:a7:97:1f:60:f1:2f:f3:9c:4d:f9:cd:3c:a5:
b0:31:12:63:87:f5:c6:dc:79:f9:81:43:45:5b:5a:84:d1:4c:
b4:24:a5:d2:99:e5:ec:6a:46:78:a4:4b:84:61:dd:fb:4d:5f:
32:3f:92:27:f8:59:fa:25:75:52:89:e9:4d:85:2e:a5:3e:a7:
bf:73:5b:43:31:b1:22:b0:23:02:02:a2:f7:74:e1:07:bd:87:
f8:d6:6f:04:f7:ee:dc:0c:65:3d:80:ed:fe:bf:0f:6e:a5:ea:
46:55:b4:42:51:e4:8b:13:3f:0e:29:7f:eb:a6:8b:f4:a6:1f:
f3:e2:d2:dc:7e:e2:8c:5c:9b:43:c5:1d:fa:bc:de:28:e2:25:
e6:af:15:1b:49:c7:9c:c3:f9:66:9f:92:6f:93:62:ff:10:12:
1c:43:63:80:e5:3a:a3:f3:42:95:2f:46:38:6e:38:b0:f0:7a:
1e:af:66:70:88:89:3b:70:26:fa:81:ef:4d:1e:23:7c:61:25:
eb:9a:9d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:27:00 2026 by rpki-client