Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/_99RUrGdci44Oq4_4xcT9uSL-jY.roa
File: _99RUrGdci44Oq4_4xcT9uSL-jY.roa (raw, json)
Hash identifier: YvmqrGHSZPjUN26szsH0GLTZcYZv0BvXR40esmV5asY=
Subject key identifier: FF:DF:51:52:B1:9D:72:2E:38:3A:AE:3F:E3:17:13:F6:E4:8B:FA:36
Certificate issuer: /CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Certificate serial: 019F2368EBDA0D45A3AC1F43E2E7FF9EF866
Authority key identifier: 67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/_99RUrGdci44Oq4_4xcT9uSL-jY.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198333
IP address blocks: 176.123.51.0/24 maxlen: 24
194.139.6.0/23 maxlen: 23
194.139.6.0/24 maxlen: 24
194.139.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:eb:da:0d:45:a3:ac:1f:43:e2:e7:ff:9e:f8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675837b4a776dca3624e897f1c74e6e27d1fc154
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffdf5152b19d722e383aae3fe31713f6e48bfa36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:ea:08:36:df:35:5d:a1:9d:77:9e:d7:26:
12:bb:04:2d:8b:0f:b5:13:16:ef:25:fc:89:8a:22:
9d:c8:4a:4e:25:ef:19:e3:75:63:14:03:cf:00:4d:
d7:f5:31:16:f0:94:e1:f3:00:5b:ab:e9:c3:05:87:
de:40:b1:f4:c2:5e:fb:e9:52:8e:7f:01:e7:df:4c:
f8:6a:09:55:17:d3:ca:c1:89:0d:53:52:53:8a:ee:
98:31:2f:34:d3:ee:99:5e:ae:f4:52:ec:a3:d1:54:
4e:22:4d:2b:7f:b2:8a:28:ec:21:3d:24:06:5b:c0:
55:70:de:f8:97:ad:f2:6a:a5:8f:26:a1:22:d2:2f:
ac:68:bb:a3:05:ca:e2:99:29:68:30:ea:00:1c:e8:
b1:1e:1d:52:f4:11:4a:3a:39:21:8c:2b:51:5f:77:
20:f8:e9:b6:78:fe:87:54:5e:87:ea:7d:7a:81:92:
d2:88:94:80:0b:a7:0b:9a:ff:7d:2c:95:4e:7a:fa:
37:08:a6:d5:47:19:7f:35:8e:49:9b:82:93:4d:eb:
d6:d6:6b:a6:5f:65:b1:92:82:db:73:36:4b:4e:33:
d0:eb:81:f6:b1:54:fa:3f:a3:5b:89:ed:41:da:3e:
95:1e:42:f9:83:5d:23:b9:bb:bd:c2:e5:90:6c:fb:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DF:51:52:B1:9D:72:2E:38:3A:AE:3F:E3:17:13:F6:E4:8B:FA:36
X509v3 Authority Key Identifier:
keyid:67:58:37:B4:A7:76:DC:A3:62:4E:89:7F:1C:74:E6:E2:7D:1F:C1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1g3tKd23KNiTol_HHTm4n0fwVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/_99RUrGdci44Oq4_4xcT9uSL-jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/Z1g3tKd23KNiTol_HHTm4n0fwVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.51.0/24
194.139.6.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:ef:e3:23:ca:78:de:e0:f4:1b:fd:0d:fb:66:cc:33:5b:a8:
e7:a7:7e:eb:48:cb:c9:64:33:15:73:f2:8d:3d:70:e3:6c:a2:
ff:5f:fb:73:af:b4:3c:62:f6:1d:eb:ee:e1:4d:3c:26:d0:2c:
0e:2e:77:5a:41:95:7e:d7:97:f1:85:05:16:f9:d5:36:83:b4:
b8:89:26:95:bd:5f:57:85:e8:fa:a4:8c:6b:61:18:16:c4:43:
c0:40:f8:de:db:7d:55:9a:4d:c3:69:3b:a8:8a:21:28:c5:39:
30:97:31:4f:2e:14:fc:fe:ce:29:ed:25:67:8c:92:54:be:f3:
9d:03:59:ab:15:e9:4b:f2:eb:f6:50:cf:df:ab:c5:c2:da:10:
9e:78:fa:0f:9a:4c:8f:5f:1d:99:20:3b:32:1e:17:bb:d5:42:
b8:aa:3f:e2:3f:9c:1b:60:78:53:b8:98:de:8b:52:7a:ab:26:
ee:1a:5e:ba:46:83:50:ca:c1:8b:a4:dc:a4:3a:35:9f:44:df:
64:db:d3:b0:bb:02:8f:77:7b:a5:f1:f2:84:82:7e:fa:ef:9e:
2c:1c:15:d8:ee:d1:ce:70:19:41:a4:6e:26:cc:b5:ee:8e:9b:
da:6f:91:da:c9:07:4e:55:65:92:fe:c6:24:5e:d5:f4:b9:38:
63:3c:c7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:11:48 2026 by rpki-client