Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/5ITN6KJOJRMl6Apg4XVMACPu4zs.roa
File: 5ITN6KJOJRMl6Apg4XVMACPu4zs.roa (raw, json)
Hash identifier: f2ajYNMoYZCoFjwGjedw9GPMjjW//klgogLUebK+az4=
Subject key identifier: E4:84:CD:E8:A2:4E:25:13:25:E8:0A:60:E1:75:4C:00:23:EE:E3:3B
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368B98EDDCA3237BE008F6A0DF41372
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/5ITN6KJOJRMl6Apg4XVMACPu4zs.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42922
IP address blocks: 185.252.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b9:8e:dd:ca:32:37:be:00:8f:6a:0d:f4:13:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e484cde8a24e251325e80a60e1754c0023eee33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7e:a9:7d:6d:37:69:72:6d:f9:4f:16:e2:e1:
9e:3f:54:4e:7a:f6:41:e0:39:84:46:3a:27:c4:48:
2e:f0:d0:1b:19:1e:7c:b1:49:ab:3d:a6:74:e6:88:
1e:73:de:f8:66:a4:76:96:76:26:e9:a2:fc:d5:72:
67:40:17:ec:c6:63:9e:a5:af:03:ca:16:df:17:75:
e8:b8:67:c3:d9:3d:7b:51:6f:9d:d6:99:37:bb:09:
58:7e:80:9b:97:76:9b:28:d3:c6:f2:88:ca:8c:b3:
10:3b:0a:f2:c9:3e:a2:13:09:00:fc:9f:69:01:e9:
37:7d:98:b7:a1:e4:7f:0f:be:46:c2:91:b0:98:b0:
48:c8:b3:d4:76:25:64:f7:a6:83:21:b3:e9:48:42:
fd:77:59:08:a1:35:d5:71:5d:67:ff:cd:55:e7:68:
82:fa:b3:a1:47:a1:e2:3b:2c:ab:dd:62:45:c5:06:
ac:a8:d9:5e:10:13:03:5c:e9:6c:c1:74:79:d6:16:
e9:48:94:bd:72:10:c2:a2:bd:40:6d:44:71:1a:e3:
89:a1:b1:54:05:94:fe:f2:23:38:04:12:99:91:20:
be:ce:9e:35:00:e4:de:0d:b5:92:c5:89:48:06:24:
23:39:61:40:df:87:89:20:32:92:68:53:00:60:f2:
73:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:84:CD:E8:A2:4E:25:13:25:E8:0A:60:E1:75:4C:00:23:EE:E3:3B
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/5ITN6KJOJRMl6Apg4XVMACPu4zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.145.0/24
Signature Algorithm: sha256WithRSAEncryption
24:dc:12:e7:5d:0b:79:a6:f7:cd:fa:40:5e:b6:98:e5:16:d1:
a3:f4:85:93:1f:92:dd:e1:38:d3:2e:d6:1f:36:15:1e:c5:d7:
c4:87:9f:ac:f3:49:c3:2e:48:24:90:64:3c:fe:54:e5:f3:c8:
2b:06:73:2a:17:65:4b:de:15:08:b6:c4:30:97:b4:5f:34:eb:
f8:2b:1f:4a:df:0c:30:d9:0a:c1:15:01:a7:e1:f9:42:15:41:
e6:fd:8c:ce:80:a6:7b:f8:45:00:bd:8e:0d:47:d6:97:9c:55:
d1:2c:b3:ba:e8:58:a2:33:e1:21:de:fe:0b:d4:7d:f7:55:62:
24:a7:cb:93:c2:3f:42:57:0d:1b:11:03:27:32:95:7c:c2:d1:
30:3f:0d:d4:f8:a5:91:db:04:a6:b2:e2:83:0b:55:11:6c:24:
30:bd:95:f5:9c:49:d0:1f:31:e0:66:f6:9f:2d:fb:0a:38:21:
73:96:9f:31:fc:da:68:d1:dc:d0:74:6a:32:57:b8:96:38:7b:
73:95:d6:dc:6a:9c:c4:b9:99:21:da:a6:97:63:45:3d:02:f4:
42:f9:a1:86:0c:85:7a:ea:25:fd:64:7d:9a:27:6e:b9:ae:df:
92:21:1c:93:aa:77:90:6a:94:0f:8c:d2:9d:de:cd:47:fb:ac:
52:c1:c2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:47 2026 by rpki-client