Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/4iVBnzLWQlT0wjcqtYz4opQLHVs.roa
File: 4iVBnzLWQlT0wjcqtYz4opQLHVs.roa (raw, json)
Hash identifier: dm9TtSsEaze4nNbBHMe+X6LZYkeFMZKcr4lk7ciPROM=
Subject key identifier: E2:25:41:9F:32:D6:42:54:F4:C2:37:2A:B5:8C:F8:A2:94:0B:1D:5B
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C17C28DB98A1A2C817EADDA2112F
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/4iVBnzLWQlT0wjcqtYz4opQLHVs.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57371
IP address blocks: 185.200.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c1:7c:28:db:98:a1:a2:c8:17:ea:dd:a2:11:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e225419f32d64254f4c2372ab58cf8a2940b1d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:5a:fb:18:fc:01:fd:77:15:f0:26:de:60:
7a:eb:a1:50:1a:4d:48:dd:9c:2e:ff:c6:a5:54:15:
5e:9e:69:c8:d0:13:88:ce:03:1c:26:8d:19:4d:3d:
97:53:88:9c:9a:fb:bd:6d:c1:52:2c:67:3e:13:80:
c5:a4:b1:c8:22:96:e7:ea:fa:d5:4e:71:ac:72:52:
b6:6a:15:1c:76:ea:02:b0:f3:2c:60:d8:ef:cd:73:
6e:e6:68:0d:4d:84:07:3c:0a:77:4e:7a:c8:33:1d:
82:15:8f:b6:fc:ce:b4:e2:66:6b:18:4a:65:1f:55:
8c:5c:88:d4:1f:e3:86:44:a9:67:6d:c0:9d:a3:6b:
17:29:b2:a3:e7:0d:1b:ba:9b:aa:f3:cc:b7:77:a6:
98:98:e0:de:79:57:1d:16:5f:5d:75:89:b4:56:9d:
3b:a2:2a:a5:ef:d7:94:5d:b1:11:b9:9e:e1:25:10:
dc:a5:cc:f4:f9:a2:00:ba:26:29:f4:8d:93:d3:41:
1a:aa:c9:02:76:19:cf:3b:05:a9:a1:39:5d:6e:96:
d3:9b:dd:05:87:d8:6a:7d:c9:fd:d8:6e:d0:6e:cc:
bd:f9:28:3a:e4:ee:cd:f9:4a:a3:78:44:15:a4:fa:
06:b8:88:20:78:ca:d3:69:52:c5:dd:23:40:40:84:
9f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:25:41:9F:32:D6:42:54:F4:C2:37:2A:B5:8C:F8:A2:94:0B:1D:5B
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/4iVBnzLWQlT0wjcqtYz4opQLHVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.189.0/24
Signature Algorithm: sha256WithRSAEncryption
17:30:4c:c6:38:b0:a9:a3:7d:c0:47:b4:6d:f1:b7:48:f9:b7:
c1:fa:fe:66:64:7e:18:34:0e:9a:c2:90:1d:cd:23:50:f5:4d:
a3:25:c8:fc:c4:9a:50:ea:f0:90:d2:32:3c:3f:4c:52:5d:aa:
05:69:18:e0:34:45:de:e1:98:bb:5f:95:d1:cd:6f:f4:71:8d:
f0:5f:35:59:c0:46:da:98:47:ff:24:58:23:54:b9:92:6d:d3:
48:7e:c4:07:71:46:ee:0b:6b:57:3a:28:7b:37:03:16:39:6b:
fd:8e:48:ba:20:ad:28:31:7a:a7:ff:9d:92:fa:81:e2:51:89:
59:48:72:20:4b:20:d1:ae:f9:5f:aa:4f:c1:69:5f:99:51:23:
21:b1:8d:e2:64:38:8a:10:0d:bb:37:50:10:1c:08:d6:8b:77:
2e:e1:61:bf:2d:7a:37:b3:4f:79:01:32:1f:e4:b8:e0:3a:99:
d5:a9:cb:ab:73:78:c7:44:c5:3e:8b:34:48:f4:b0:a9:ec:81:
37:e5:e2:7e:a6:6d:44:cb:57:f3:19:47:a0:41:7c:eb:c5:98:
37:12:46:c0:b4:e9:fe:36:c9:af:89:43:09:69:18:43:62:6f:
d7:a1:48:1a:0e:d0:8a:99:7d:2c:e5:b1:32:ab:0c:bc:00:e3:
79:7e:c7:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaMF8KNuYoaLIF+rdohEvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTI0YzI4YmEyMDJmYzA4NmYwYjViYWEzMDJlNTdhZTg5
ZmUzMGEwHhcNMjYwNzAyMTUxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjI1NDE5ZjMyZDY0MjU0ZjRjMjM3MmFiNThjZjhhMjk0MGIxZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzZa+xj8Af13FfAm3mB666FQGk1I
3Zwu/8alVBVenmnI0BOIzgMcJo0ZTT2XU4icmvu9bcFSLGc+E4DFpLHIIpbn6vrV
TnGsclK2ahUcduoCsPMsYNjvzXNu5mgNTYQHPAp3TnrIMx2CFY+2/M604mZrGEpl
H1WMXIjUH+OGRKlnbcCdo2sXKbKj5w0bupuq88y3d6aYmODeeVcdFl9ddYm0Vp07
oiql79eUXbERuZ7hJRDcpcz0+aIAuiYp9I2T00EaqskCdhnPOwWpoTldbpbTm90F
h9hqfcn92G7Qbsy9+Sg65O7N+UqjeEQVpPoGuIggeMrTaVLF3SNAQISf1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOIlQZ8y1kJU9MI3KrWM+KKUCx1bMB8GA1UdIwQY
MBaAFJmiTCi6IC/AhvC1uqMC5Xron+MKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvNGlWQm56TFdRbFQwd2pjcXRZejRvcFFMSFZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuci9MA0G
CSqGSIb3DQEBCwUAA4IBAQAXMEzGOLCpo33AR7Rt8bdI+bfB+v5mZH4YNA6awpAd
zSNQ9U2jJcj8xJpQ6vCQ0jI8P0xSXaoFaRjgNEXe4Zi7X5XRzW/0cY3wXzVZwEba
mEf/JFgjVLmSbdNIfsQHcUbuC2tXOih7NwMWOWv9jki6IK0oMXqn/52S+oHiUYlZ
SHIgSyDRrvlfqk/BaV+ZUSMhsY3iZDiKEA27N1AQHAjWi3cu4WG/LXo3s095ATIf
5LjgOpnVqcurc3jHRMU+izRI9LCp7IE35eJ+pm1Ey1fzGUegQXzrxZg3EkbAtOn+
NsmviUMJaRhDYm/XoUgaDtCKmX0s5bEyqwy8AON5fsdx
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:00 2026 by rpki-client