Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/0IykwYfA-W8rumq9P_eRzl-s6UM.roa
File: 0IykwYfA-W8rumq9P_eRzl-s6UM.roa (raw, json)
Hash identifier: TcshYoS/31JYTepfmYEsFqaD2svoM7tVxT7akeTDIuA=
Subject key identifier: D0:8C:A4:C1:87:C0:F9:6F:2B:BA:6A:BD:3F:F7:91:CE:5F:AC:E9:43
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368BB8F86F770BD5A48D87B34B13437
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/0IykwYfA-W8rumq9P_eRzl-s6UM.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43278
IP address blocks: 185.17.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bb:8f:86:f7:70:bd:5a:48:d8:7b:34:b1:34:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d08ca4c187c0f96f2bba6abd3ff791ce5face943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:d6:c4:22:79:ff:f6:a0:b8:9d:c8:5f:61:
e0:80:c8:07:50:9e:41:dc:7d:7e:d3:94:f0:6d:f3:
da:dc:83:34:33:7d:b5:e4:2b:95:f6:12:6c:04:0f:
82:1c:db:7d:cb:ea:0c:bf:12:e1:08:a7:b7:8c:06:
0d:71:12:3a:88:c0:5d:01:9e:7c:f9:e6:09:e7:fd:
b5:0d:1d:98:2d:83:a9:87:86:db:68:8a:9e:e7:ed:
0b:42:29:cf:81:07:87:f6:46:fd:15:3a:53:87:67:
ea:18:bb:0a:33:12:57:ec:44:97:5c:23:d1:cf:ad:
9d:24:cc:2a:43:e8:92:ba:56:4b:bd:b9:4d:b8:d0:
90:ce:f9:a7:2c:ca:bc:eb:d8:0f:5c:85:4a:83:3b:
cb:6b:cd:5d:9d:c0:37:41:e0:ad:8b:13:36:10:62:
b0:5f:78:bb:e0:d5:e9:c1:64:d8:c8:7c:94:1b:db:
c0:c1:1e:35:86:19:c8:18:6b:1b:d4:98:50:21:d2:
bc:9b:69:14:0c:c4:19:00:ba:7a:a6:9a:78:76:62:
f0:d8:29:5b:de:21:20:9c:e8:a5:25:1c:d3:47:67:
fb:15:86:e2:50:ff:b1:3a:ec:ee:80:72:28:c8:2f:
93:ef:a9:84:a8:a1:ce:72:7b:97:0d:6d:36:88:b6:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8C:A4:C1:87:C0:F9:6F:2B:BA:6A:BD:3F:F7:91:CE:5F:AC:E9:43
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/0IykwYfA-W8rumq9P_eRzl-s6UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.0.0/24
Signature Algorithm: sha256WithRSAEncryption
01:1c:ee:21:c5:02:20:39:cc:20:73:64:92:44:17:24:3e:d9:
70:c2:e0:9b:ce:da:46:f7:9f:65:54:fb:e0:21:2c:f9:33:b5:
4d:e4:1a:3f:21:2f:5b:54:4e:be:d2:a5:2a:48:77:f6:06:86:
aa:08:5b:38:1b:52:2f:4b:2b:70:3d:d3:ea:e3:39:98:59:1f:
5c:1e:50:2b:d9:14:4f:67:3b:cb:b1:cf:0f:1c:af:70:bc:79:
9a:9e:7b:13:98:a8:82:23:77:a8:b7:60:a5:18:f3:06:e9:0a:
3b:31:dc:80:84:a1:57:f9:30:d3:ca:b4:e6:ec:26:bf:1e:6a:
f1:60:50:ae:8f:10:56:23:8d:23:21:74:34:c7:35:85:9f:20:
f0:a6:8b:5f:82:ad:08:fd:bd:dd:91:32:b2:f6:db:66:f2:02:
42:a6:e3:92:35:3c:ab:a6:27:bf:bd:0a:37:a4:cd:8c:d1:bf:
51:7a:1d:95:87:76:9f:0e:67:75:a7:59:3b:35:9b:f3:39:ff:
b9:b2:c9:68:8c:6c:25:06:2c:ab:31:34:ac:27:b3:6f:e2:42:
b5:f7:2c:b4:fc:b9:d2:3e:a4:c5:3c:5a:15:3e:9a:c4:21:66:
51:bc:f1:34:aa:8a:a9:2d:6f:5f:ae:fd:12:bc:68:2c:b1:9c:
eb:46:1b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:43 2026 by rpki-client