Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/1-qm2CRZ2R_TAj9KPtxHyZEhrhkQ.roa
File: 1-qm2CRZ2R_TAj9KPtxHyZEhrhkQ.roa (raw, json)
Hash identifier: xdsGrOZdOqlEDPQUaoxgQp+TCbHF40gsj6A5HmmM9AY=
Subject key identifier: FA:A9:B6:09:16:76:47:F4:C0:8F:D2:8F:B7:11:F2:64:48:6B:86:44
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368BFDC2AD5045629E94C3E35304C70
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/1-qm2CRZ2R_TAj9KPtxHyZEhrhkQ.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52008
IP address blocks: 185.58.206.0/24 maxlen: 24
185.172.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bf:dc:2a:d5:04:56:29:e9:4c:3e:35:30:4c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faa9b609167647f4c08fd28fb711f264486b8644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:41:4a:54:0d:61:1d:d6:b3:75:e7:14:30:
c7:f8:28:1f:59:c0:66:03:87:3c:3d:8e:70:7e:d7:
78:0b:e8:2c:62:8d:9f:b7:01:db:85:3e:95:41:3a:
c2:ab:9c:08:04:2e:74:e9:2d:28:52:79:76:27:1c:
b2:1d:85:ae:d8:cc:33:63:d5:2c:b3:35:dc:77:e0:
f4:f2:6f:7f:28:cd:2c:f5:48:3e:25:76:1e:de:84:
dc:c1:80:9e:65:28:f5:4d:c9:1f:2d:67:05:e1:94:
e2:3f:a4:35:ec:79:0b:2e:6c:32:95:f1:39:b8:0b:
00:e3:a5:61:d6:33:a2:fe:85:ff:f9:ff:7d:08:ea:
ba:a7:6a:53:67:5b:28:f5:e5:dc:3f:d4:36:63:cc:
25:69:76:67:b3:2c:ae:1f:66:9c:8c:25:1a:80:94:
2f:4e:8f:2b:e8:7c:14:4e:bd:2a:f4:be:71:fd:6f:
f5:fd:5a:ee:ca:c4:dc:7e:99:e4:50:19:45:e2:e0:
71:37:42:06:9e:03:f4:e5:a4:f4:ad:c6:c0:5a:19:
fe:34:d2:59:29:2b:87:43:15:2a:40:b4:74:4c:4a:
70:87:97:4b:64:13:22:df:76:a3:fc:73:c8:6a:c0:
98:76:58:45:d8:8a:a9:24:b8:7b:9d:9e:d3:60:98:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A9:B6:09:16:76:47:F4:C0:8F:D2:8F:B7:11:F2:64:48:6B:86:44
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/1-qm2CRZ2R_TAj9KPtxHyZEhrhkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.206.0/24
185.172.128.0/24
Signature Algorithm: sha256WithRSAEncryption
20:7d:98:85:40:c3:66:d9:b0:99:ff:51:29:02:ba:0a:96:ef:
60:ea:84:56:1c:84:1d:be:1b:8a:3e:b9:ea:ca:18:23:39:29:
be:44:e2:15:e0:c6:69:15:a7:86:60:34:a3:b0:af:82:92:b9:
24:ff:8d:3d:9f:04:10:8e:ed:88:e7:de:1a:3a:67:5d:9e:9c:
3b:cd:98:8e:af:8c:d2:34:44:7b:6b:99:64:e4:d5:38:66:29:
de:f4:15:f2:de:d0:77:db:86:d9:9f:57:22:64:85:4c:de:95:
76:4c:d3:6b:9f:81:8b:f2:3b:34:2f:41:e0:66:4c:24:d9:f2:
6d:25:d8:64:6b:9e:32:1a:b4:b5:50:7e:fe:21:72:70:5f:37:
59:bd:d7:df:d4:5b:2b:f7:47:35:53:ef:5f:15:39:f0:e7:6f:
65:1c:ef:c6:ff:19:2b:83:36:e8:ce:14:0c:00:74:0b:35:2f:
03:a0:80:e2:15:d6:3a:ef:5b:fb:87:cf:a8:f3:3d:f0:a4:6f:
95:bb:88:bf:a7:38:86:0a:fd:10:99:2a:aa:58:03:47:dc:7b:
e6:e6:2a:de:8b:42:63:e6:f0:8c:cf:1e:67:70:1b:a9:ce:8b:
f5:52:27:de:ec:7c:04:b0:03:46:b2:fd:2b:ad:6e:5f:5c:82:
9d:16:f3:68
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ8jaL/cKtUEVinpTD41MExwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTI0YzI4YmEyMDJmYzA4NmYwYjViYWEzMDJlNTdhZTg5
ZmUzMGEwHhcNMjYwNzAyMTUxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWE5YjYwOTE2NzY0N2Y0YzA4ZmQyOGZiNzExZjI2NDQ4NmI4NjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKBBSlQNYR3Ws3XnFDDH+CgfWcBm
A4c8PY5wftd4C+gsYo2ftwHbhT6VQTrCq5wIBC506S0oUnl2JxyyHYWu2MwzY9Us
szXcd+D08m9/KM0s9Ug+JXYe3oTcwYCeZSj1TckfLWcF4ZTiP6Q17HkLLmwylfE5
uAsA46Vh1jOi/oX/+f99COq6p2pTZ1so9eXcP9Q2Y8wlaXZnsyyuH2acjCUagJQv
To8r6HwUTr0q9L5x/W/1/VruysTcfpnkUBlF4uBxN0IGngP05aT0rcbAWhn+NNJZ
KSuHQxUqQLR0TEpwh5dLZBMi33aj/HPIasCYdlhF2IqpJLh7nZ7TYJjFCQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPqptgkWdkf0wI/Sj7cR8mRIa4ZEMB8GA1UdIwQY
MBaAFJmiTCi6IC/AhvC1uqMC5Xron+MKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvMS1xbTJDUloyUl9UQWo5S1B0eEh5WkVocmhrUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWEvN2IyMTI5LWNjNmMtNDcxMC1iYTQxLWI1N2EzNmYyYWZj
ZC8xL21hSk1LTG9nTDhDRzhMVzZvd0xsZXVpZjR3by5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALk6zgME
ALmsgDANBgkqhkiG9w0BAQsFAAOCAQEAIH2YhUDDZtmwmf9RKQK6CpbvYOqEVhyE
Hb4bij656soYIzkpvkTiFeDGaRWnhmA0o7CvgpK5JP+NPZ8EEI7tiOfeGjpnXZ6c
O82Yjq+M0jREe2uZZOTVOGYp3vQV8t7Qd9uG2Z9XImSFTN6VdkzTa5+Bi/I7NC9B
4GZMJNnybSXYZGueMhq0tVB+/iFycF83Wb3X39RbK/dHNVPvXxU58OdvZRzvxv8Z
K4M26M4UDAB0CzUvA6CA4hXWOu9b+4fPqPM98KRvlbuIv6c4hgr9EJkqqlgDR9x7
5uYq3otCY+bwjM8eZ3Abqc6L9VIn3ux8BLADRrL9K61uX1yCnRbzaA==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:24 2026 by rpki-client