Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/0moWnPi0NmXg8ah58PWaEWF5lcM.roa
File: 0moWnPi0NmXg8ah58PWaEWF5lcM.roa (raw, json)
Hash identifier: jBjH2yW9S9fuBXRPB7Ym8Pqfh87Rz4RF/kvrdT4rPQk=
Subject key identifier: D2:6A:16:9C:F8:B4:36:65:E0:F1:A8:79:F0:F5:9A:11:61:79:95:C3
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368B8AE34A3DA972B7E9DCB3AC3916A
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/0moWnPi0NmXg8ah58PWaEWF5lcM.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28753
IP address blocks: 45.138.72.0/24 maxlen: 24
185.94.166.0/24 maxlen: 24
185.125.51.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b8:ae:34:a3:da:97:2b:7e:9d:cb:3a:c3:91:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d26a169cf8b43665e0f1a879f0f59a11617995c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:ef:a7:3e:30:8d:d4:06:29:7b:87:69:c5:
10:bb:43:05:51:1d:37:b5:06:be:6f:7e:6d:90:8f:
56:40:7f:28:05:62:84:7f:41:df:00:f5:f1:2a:dc:
b5:f0:58:cf:33:8c:8f:1b:87:d0:48:51:33:95:08:
a1:55:88:ec:50:f4:97:a4:c9:88:31:93:bf:6c:bc:
46:60:a7:f1:1c:96:cb:5c:9f:5b:f9:58:d6:e0:b9:
d7:44:94:07:21:72:28:bf:51:d7:26:30:a6:22:44:
a2:7b:62:fa:ea:fc:6d:fa:81:04:13:f9:70:e3:a2:
ef:04:bd:ba:3e:3e:16:74:18:72:1c:a1:b9:c0:95:
eb:61:2e:df:f5:db:5e:f9:fc:9a:6a:37:16:2c:25:
6a:bc:33:ad:f0:70:a9:2d:9a:c8:5d:f9:09:ce:e9:
c0:f4:11:2d:b4:1e:87:cc:f0:d7:55:c4:16:1a:84:
f3:5e:05:b5:10:ab:db:4c:ec:f4:d2:ac:9f:c4:e2:
74:88:fa:a0:49:48:00:e1:ba:be:bc:ab:aa:c8:20:
f7:bf:3f:3b:a8:04:37:f2:46:42:a0:cb:ea:b0:ec:
bb:dd:4d:c8:f7:bb:1d:8b:7e:26:e1:29:6e:d3:24:
7a:d4:a3:04:e3:3a:d5:02:b4:49:b7:7b:c7:9a:28:
ed:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6A:16:9C:F8:B4:36:65:E0:F1:A8:79:F0:F5:9A:11:61:79:95:C3
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/0moWnPi0NmXg8ah58PWaEWF5lcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.72.0/24
185.94.166.0/24
185.125.51.0/24
185.172.130.0/23
Signature Algorithm: sha256WithRSAEncryption
70:69:dd:d9:4b:85:ae:d7:0e:a5:e4:d7:0b:6d:60:90:f9:e5:
74:1f:c9:75:0e:1b:b0:06:17:79:17:b8:87:34:5e:67:01:5b:
0b:3a:00:a6:0f:2c:7a:7c:6a:b2:f8:8b:10:23:b2:1b:92:e3:
04:31:46:2d:26:02:42:25:09:10:dc:81:85:14:f8:ef:09:6a:
53:f7:87:54:ba:bc:9c:ce:03:12:5e:06:15:90:d4:3a:3b:4c:
d6:1c:84:d6:c6:5f:0b:f6:44:6d:3c:20:75:c9:ef:85:f2:e3:
94:0a:72:4a:24:9f:23:14:d0:ce:a5:43:ea:93:dd:d4:56:e7:
01:f1:2b:5d:6d:1b:8e:05:61:8e:8a:88:3a:c6:08:e6:32:d6:
10:e8:d8:76:8c:91:b5:15:14:46:c3:d0:81:ce:51:92:9b:55:
c9:6f:54:69:d5:a5:73:05:a0:7d:03:26:d3:dd:0a:7d:80:d9:
ed:f2:53:6a:3b:36:8a:57:75:cc:19:83:7a:8f:4c:4f:15:c3:
48:3f:5b:1d:62:cd:c4:d1:52:f0:1a:2c:8a:d3:7d:cd:4c:89:
62:25:19:9b:5b:dc:ec:17:86:ca:d1:f3:ed:07:e8:9c:93:aa:
e3:96:fc:12:58:8e:01:46:e6:24:02:9b:d5:ae:c9:4e:1e:26:
46:20:41:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:28 2026 by rpki-client