Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/99amBODsi9s5b9k8-QBJkKF-3q4.roa
File: 99amBODsi9s5b9k8-QBJkKF-3q4.roa (raw, json)
Hash identifier: OHHvjBhCrGH4FeeziC6XYn1JSgPeAHm7eeCU0qJDW20=
Subject key identifier: F7:D6:A6:04:E0:EC:8B:DB:39:6F:D9:3C:F9:00:49:90:A1:7E:DE:AE
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 019F04D1A6223111AAA3151FFC9913289F94
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/99amBODsi9s5b9k8-QBJkKF-3q4.roa
Signing time: Fri 26 Jun 2026 16:44:36 +0000
ROA not before: Fri 26 Jun 2026 16:44:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201079
IP address blocks: 185.113.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:d1:a6:22:31:11:aa:a3:15:1f:fc:99:13:28:9f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Jun 26 16:44:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7d6a604e0ec8bdb396fd93cf9004990a17edeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4c:a4:15:21:27:d1:3e:49:ff:e0:d0:9b:93:
b1:dd:74:95:6c:c7:54:fc:00:3c:98:52:e6:69:df:
b7:e1:ab:12:34:c8:d2:4c:d7:73:76:6c:4f:6c:7f:
c6:3c:e2:71:24:de:ee:7f:9b:ed:c5:28:5a:13:d1:
ea:ed:66:3b:30:80:30:38:b5:ff:67:ca:03:8f:dc:
83:17:6c:ff:15:99:2c:37:d9:74:b5:49:5d:f7:7f:
23:eb:34:28:84:52:97:02:7b:66:e7:1f:0f:bb:9c:
a1:85:80:5f:ba:40:cc:3e:3e:69:e5:6a:20:6e:85:
e6:3e:0c:fa:9d:10:cc:69:b1:79:bd:4d:74:0d:d7:
6f:cb:7c:c0:7e:eb:6b:f4:c3:e5:af:fa:68:bd:55:
ba:af:f3:94:53:28:4e:bc:ca:98:fd:21:d6:01:f9:
58:09:a0:24:02:9a:5e:68:dc:72:50:fd:e9:d4:a8:
b1:d6:65:f7:0c:6c:5d:27:56:cd:db:ab:ec:87:24:
55:8d:dd:79:f8:52:7e:8b:3d:79:b5:b5:62:1e:5c:
0e:9a:68:22:c9:d8:34:a7:82:86:e0:c3:b2:df:a0:
e9:31:28:5b:97:72:10:7e:f3:b7:a0:dc:0c:27:53:
26:ce:21:26:89:0e:81:98:24:7a:90:a2:75:70:17:
64:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D6:A6:04:E0:EC:8B:DB:39:6F:D9:3C:F9:00:49:90:A1:7E:DE:AE
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/99amBODsi9s5b9k8-QBJkKF-3q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.220.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d3:8e:1e:e7:e0:cb:54:d7:63:65:ef:6a:88:17:b9:61:a1:
21:e7:0e:1b:70:f3:a6:8f:de:df:1e:a6:72:01:23:82:e8:18:
f5:01:c9:1f:4c:07:c0:7b:49:ef:85:86:68:4f:c1:2a:71:21:
06:cd:bd:ac:22:1a:71:40:93:21:68:85:1f:86:84:06:b2:0a:
07:3b:47:28:e7:c4:2b:cd:6d:8f:f8:55:e4:22:49:fd:31:7f:
51:51:e3:0d:b6:e3:fc:9f:d7:be:84:af:6a:98:13:29:40:5f:
48:69:7e:67:20:0e:c8:e2:6b:fe:dc:85:54:88:dc:ac:ca:c2:
a1:b9:45:39:17:a1:29:53:bc:76:b1:38:f1:4b:83:b4:91:9a:
31:84:37:d1:91:15:c7:10:34:c3:5b:3d:d6:76:6c:b4:4b:87:
73:11:80:21:1c:8b:cd:21:6a:af:40:f0:65:d1:d2:9c:35:9f:
dc:ec:03:62:44:23:29:38:32:db:72:27:18:9b:6c:b5:e7:c1:
35:c6:16:73:d8:7d:b2:6c:e0:78:72:94:c3:f9:18:e8:e5:d0:
79:a4:b6:dd:4e:8b:dd:50:fb:84:2a:5b:b1:f1:d2:59:e5:f6:
99:b6:f0:70:7e:27:fe:60:47:20:3d:55:f1:44:fe:70:ec:d5:
f8:3e:b7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:51 2026 by rpki-client