Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/mt-HnEQYxQtEQVmpuhDEruUVAAE.roa
File: mt-HnEQYxQtEQVmpuhDEruUVAAE.roa (raw, json)
Hash identifier: wa3pLGvZ/ZJj+LkyL+eUr96OI2NFAE57bOsLDVTcyPE=
Subject key identifier: 9A:DF:87:9C:44:18:C5:0B:44:41:59:A9:BA:10:C4:AE:E5:15:00:01
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 019DD8088101C8FC252EE57828F3C73C9C81
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/mt-HnEQYxQtEQVmpuhDEruUVAAE.roa
Signing time: Wed 29 Apr 2026 06:58:49 +0000
ROA not before: Wed 29 Apr 2026 06:58:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50810
IP address blocks: 37.98.68.0/22 maxlen: 22
37.98.72.0/21 maxlen: 21
37.98.72.0/22 maxlen: 22
37.98.76.0/22 maxlen: 22
37.98.104.0/21 maxlen: 22
37.98.112.0/21 maxlen: 24
93.119.208.0/20 maxlen: 24
178.131.0.0/18 maxlen: 24
178.131.64.0/19 maxlen: 22
178.131.96.0/20 maxlen: 22
178.131.112.0/21 maxlen: 22
178.131.128.0/18 maxlen: 24
188.211.0.0/20 maxlen: 24
188.211.15.0/24 maxlen: 24
188.212.240.0/21 maxlen: 24
188.213.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:08:81:01:c8:fc:25:2e:e5:78:28:f3:c7:3c:9c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Apr 29 06:58:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9adf879c4418c50b444159a9ba10c4aee5150001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:9b:d2:7c:c3:16:e2:f2:9c:29:19:bb:f6:
75:47:c0:04:93:91:8f:81:a3:51:3e:1e:e6:b2:ae:
3e:49:0b:d8:b6:a3:e6:7c:5d:d1:a4:16:1b:49:15:
80:6c:8a:8e:6e:12:5f:84:6e:35:60:13:e2:c9:a2:
b9:fd:99:52:c4:0f:56:1b:d1:cf:f9:62:12:88:5d:
1a:8c:bb:f9:f9:e3:68:05:ec:34:8c:ad:eb:63:73:
cd:f1:75:72:64:0a:3a:4a:37:c9:fe:e1:fb:e6:ec:
72:f8:95:39:03:d7:78:7b:5e:a7:50:39:9a:45:07:
80:1c:0a:7a:40:1f:5b:7a:a4:bc:9c:b0:0c:ed:99:
13:74:9c:14:ad:75:b5:75:2c:a2:61:16:43:2a:f8:
bc:25:a3:e0:5e:ed:6e:17:08:bb:a2:d8:0f:e4:88:
47:d8:1c:23:f7:27:bc:dd:64:bf:db:87:6c:72:fd:
f1:c9:fd:9a:70:cf:8b:24:63:93:4b:5d:88:8e:50:
56:7f:eb:a0:42:5f:04:24:72:50:cc:62:13:a7:7b:
9f:a7:f7:e1:13:9f:fc:a5:3f:42:e3:93:1a:23:d8:
f5:c4:4a:f7:71:2c:3e:16:e1:30:f6:3e:09:59:91:
68:b0:99:94:68:f1:db:c8:c2:9f:39:74:c5:f2:cc:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DF:87:9C:44:18:C5:0B:44:41:59:A9:BA:10:C4:AE:E5:15:00:01
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/mt-HnEQYxQtEQVmpuhDEruUVAAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.68.0-37.98.79.255
37.98.104.0-37.98.119.255
93.119.208.0/20
178.131.0.0-178.131.119.255
178.131.128.0/18
188.211.0.0/20
188.212.240.0/21
188.213.192.0/22
Signature Algorithm: sha256WithRSAEncryption
58:56:0c:2c:14:86:04:34:fb:b7:85:03:64:08:9d:1b:29:52:
8a:96:d8:f1:68:fe:0c:9d:48:1f:19:12:d7:0e:11:5a:3a:32:
fd:d8:ab:f3:ee:f9:59:0d:c7:26:b5:6e:5f:38:53:10:a1:75:
6c:59:88:93:df:d1:b8:f2:39:e3:a2:dd:60:63:df:b1:04:74:
f4:42:1e:2e:7c:76:5c:82:72:9f:ca:45:2b:d0:1c:cc:9a:c8:
b2:11:13:2e:3d:fc:26:b8:da:dc:c0:27:3e:7b:3a:0d:fa:8a:
36:c1:26:81:f6:70:66:83:e3:b3:6d:66:7e:43:16:75:68:bd:
30:a2:98:0d:d4:07:33:7d:80:8c:b0:c7:5a:bd:5a:d7:90:53:
0f:cd:b7:32:82:98:d2:d3:c3:d4:28:ae:fd:20:a7:1b:a9:68:
59:c3:08:4b:07:43:a1:ee:df:79:a5:b5:54:af:fe:e7:b2:ec:
65:fa:f5:b3:40:31:91:91:2d:a3:47:19:a4:dc:7b:67:6b:d1:
6b:d9:3f:17:a3:7b:ee:ca:0a:32:9a:c8:2e:ee:3e:96:a2:02:
94:dd:d3:58:9d:78:1c:56:55:d1:cc:b5:96:35:c9:b3:fe:f5:
45:e9:3e:ca:ba:e9:6c:1a:b3:26:fe:61:ec:71:ad:10:c2:82:
c1:98:69:cd
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgISAZ3YCIEByPwlLuV4KPPHPJyBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDdhYTkxYjA2ZDhjNmI4NzI4NGYzZjQ1YTIxZGMyODFm
N2JhNTUwHhcNMjYwNDI5MDY1ODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWRmODc5YzQ0MThjNTBiNDQ0MTU5YTliYTEwYzRhZWU1MTUwMDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP6b0nzDFuLynCkZu/Z1R8AEk5GP
gaNRPh7msq4+SQvYtqPmfF3RpBYbSRWAbIqObhJfhG41YBPiyaK5/ZlSxA9WG9HP
+WISiF0ajLv5+eNoBew0jK3rY3PN8XVyZAo6SjfJ/uH75uxy+JU5A9d4e16nUDma
RQeAHAp6QB9beqS8nLAM7ZkTdJwUrXW1dSyiYRZDKvi8JaPgXu1uFwi7otgP5IhH
2Bwj9ye83WS/24dscv3xyf2acM+LJGOTS12IjlBWf+ugQl8EJHJQzGITp3ufp/fh
E5/8pT9C45MaI9j1xEr3cSw+FuEw9j4JWZFosJmUaPHbyMKfOXTF8sz+VwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFJrfh5xEGMULREFZqboQxK7lFQABMB8GA1UdIwQY
MBaAFIhHqpGwbYxrhyhPP0WiHcKB97pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYt
Y2VhNzVkMGNkNjcxLzEvbXQtSG5FUVl4UXRFUVZtcHVoREVydVVWQUFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYtY2VhNzVkMGNkNjcx
LzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzBNBAIAATBHMAwDBAIlYkQD
BAQlYkAwDAMEAyViaAMEAyVicAMEBF130DALAwMAsoMDBAOyg3ADBAayg4ADBAS8
0wADBAO81PADBAK81cAwDQYJKoZIhvcNAQELBQADggEBAFhWDCwUhgQ0+7eFA2QI
nRspUoqW2PFo/gydSB8ZEtcOEVo6Mv3Yq/Pu+VkNxya1bl84UxChdWxZiJPf0bjy
OeOi3WBj37EEdPRCHi58dlyCcp/KRSvQHMyayLIREy49/Ca42tzAJz57Og36ijbB
JoH2cGaD47NtZn5DFnVovTCimA3UBzN9gIywx1q9WteQUw/NtzKCmNLTw9Qorv0g
pxupaFnDCEsHQ6Hu33mltVSv/uey7GX69bNAMZGRLaNHGaTce2dr0WvZPxeje+7K
CjKayC7uPpaiApTd01ideBxWVdHMtZY1ybP+9UXpPsq66Wwasyb+YexxrRDCgsGY
ac0=
-----END CERTIFICATE-----
Generated at Wed May 13 09:18:02 2026 by rpki-client