Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/MtAyR7PLY25ZWgyaenhWmKqRrd8.roa
File: MtAyR7PLY25ZWgyaenhWmKqRrd8.roa (raw, json)
Hash identifier: 4yhQa448y8d2JWCEHwRljDu0UiHV7U3wHLuXGvN4ws8=
Subject key identifier: 32:D0:32:47:B3:CB:63:6E:59:5A:0C:9A:7A:78:56:98:AA:91:AD:DF
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A1CBF170B4AE0E50BEFEE20BADF13DC48A
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/MtAyR7PLY25ZWgyaenhWmKqRrd8.roa
Signing time: Wed 11 Nov 2026 18:49:20 +0000
ROA not before: Wed 11 Nov 2026 18:49:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60591
IP address blocks: 189.74.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:f1:70:b4:ae:0e:50:be:fe:e2:0b:ad:f1:3d:c4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Nov 11 18:49:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32d03247b3cb636e595a0c9a7a785698aa91addf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:03:b6:40:f5:dd:50:72:e5:01:36:d5:6c:ea:
c9:43:2d:f9:78:d6:84:27:0b:ef:6c:e6:25:8d:44:
ed:34:a1:01:3e:01:3c:8e:9f:ac:5c:d8:12:5d:74:
b4:f0:4f:0b:b2:6a:e7:40:76:37:54:78:cd:94:d0:
2a:2f:94:f4:b8:cf:84:52:f0:d4:19:0b:b5:00:98:
a5:a0:dd:30:07:dd:79:e4:98:bd:d5:de:8b:79:da:
fa:b8:80:77:29:69:0c:93:b7:ce:6f:b9:87:57:8b:
8c:19:1c:fb:9e:86:7b:80:a1:9b:6f:21:71:8b:f7:
ff:71:77:b0:42:35:21:6e:ff:92:45:78:a9:a5:f4:
33:3b:f5:72:72:76:b7:4d:09:1d:c1:b4:90:3f:4f:
00:d3:cf:18:7c:17:aa:61:55:2c:2a:90:c2:bc:e3:
98:aa:44:5a:ce:25:ab:9b:19:d3:01:2b:4f:d1:b5:
7a:36:b0:43:13:d2:97:ad:8c:ce:5f:b0:b7:bc:eb:
7b:fd:1a:ac:df:9a:9b:b1:c6:6c:24:18:c1:46:1b:
94:dc:6d:2d:e4:82:90:d7:24:5e:3d:92:3a:96:d6:
7d:02:83:a7:5e:66:ed:12:76:d5:f0:fc:d7:28:80:
c5:0f:54:b1:1a:a9:b3:25:0e:78:e6:59:de:41:bf:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D0:32:47:B3:CB:63:6E:59:5A:0C:9A:7A:78:56:98:AA:91:AD:DF
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/MtAyR7PLY25ZWgyaenhWmKqRrd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:34:ce:3d:80:59:4d:14:00:e5:05:f4:f0:f4:4f:5f:a9:a2:
35:3d:17:e3:80:3e:fe:e7:c7:c2:9a:12:5e:d6:5a:61:17:ed:
d9:31:ad:b3:20:15:ab:d5:88:d2:67:ab:78:e7:2d:2e:18:11:
f1:41:d0:ae:64:11:6d:db:fa:77:29:b5:e0:44:65:b0:47:06:
ff:ca:0b:ea:30:90:de:85:e5:27:d8:ef:5d:ce:eb:5e:60:43:
fc:71:1d:3a:b1:ea:23:7b:2a:51:7d:ad:54:7e:86:51:7a:eb:
11:0f:b4:f8:60:e8:9e:63:f7:fb:21:ac:6b:5d:b4:b1:c8:82:
01:84:f1:1e:bb:8f:b3:17:ca:59:d2:3c:78:93:ad:a1:29:90:
95:8b:a6:52:e0:e9:72:2f:10:7d:82:d7:d3:aa:e0:68:a1:da:
1f:07:b3:78:46:d0:a3:30:9e:3f:06:b6:76:e2:61:67:b6:e6:
3f:45:fa:c0:e1:55:3c:a5:e5:34:4f:37:6f:80:59:98:65:6e:
64:47:d5:f6:81:a4:aa:d6:02:9f:d2:9b:10:c6:c0:55:73:21:
91:d2:60:cf:c6:28:5a:f3:70:5b:be:6c:cf:c7:7b:33:ae:cc:
eb:69:c2:e2:bf:0f:9c:f2:0a:81:ed:4e:7e:2c:a9:cb:da:13:
45:10:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:06:13 2026 by rpki-client