Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/6UyMeGiWeXfaJpMyfAzG43xaI6Q.roa
File: 6UyMeGiWeXfaJpMyfAzG43xaI6Q.roa (raw, json)
Hash identifier: 9i7x9p88vn93C9xx/HqJyc9mc8RdYyZNj2huPKMkG3c=
Subject key identifier: E9:4C:8C:78:68:96:79:77:DA:26:93:32:7C:0C:C6:E3:7C:5A:23:A4
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368BE186BC8CE3A15CB63A6F7DA77F6
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/6UyMeGiWeXfaJpMyfAzG43xaI6Q.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51200
IP address blocks: 185.102.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:be:18:6b:c8:ce:3a:15:cb:63:a6:f7:da:77:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e94c8c7868967977da2693327c0cc6e37c5a23a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:02:89:19:31:18:84:80:1c:d0:af:4c:bb:
ec:e4:e9:95:da:5f:52:09:32:a6:c9:ca:65:be:ef:
5a:13:d9:e7:eb:c9:6c:64:e3:de:6d:43:19:48:35:
7c:ff:dc:5c:e3:99:48:c3:a7:81:32:ec:09:da:ad:
ee:39:a5:05:6f:f6:8b:a9:72:3a:5a:ac:2f:d1:f7:
86:e4:0f:9d:36:56:a5:fa:a7:35:be:05:0b:a4:a7:
65:0d:0d:1e:b3:b4:30:20:88:2f:e3:c2:3b:3b:48:
83:52:da:6e:79:17:74:a8:36:35:3d:40:e7:5e:bf:
b8:20:e8:44:c5:64:b6:16:1d:4c:94:dc:29:36:a7:
0f:97:40:22:cd:19:8d:fb:80:c0:30:4c:8a:62:9d:
a7:60:04:4a:dd:73:71:34:c3:bd:f3:e5:0c:f3:71:
d1:f8:5b:de:3d:02:35:c9:fe:8c:4f:ba:c5:4e:54:
97:dc:53:70:db:38:d0:ba:b7:9a:96:3d:6d:5e:53:
f2:d7:4f:ca:13:00:80:d6:02:86:b3:c9:0f:c6:29:
81:06:7a:7b:21:ad:d4:03:9b:40:e3:da:40:57:7d:
04:d1:85:9d:96:75:14:d4:3e:65:21:43:d8:e9:ae:
a0:3a:fe:32:22:46:07:81:98:29:b1:7f:89:83:ea:
62:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4C:8C:78:68:96:79:77:DA:26:93:32:7C:0C:C6:E3:7C:5A:23:A4
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/6UyMeGiWeXfaJpMyfAzG43xaI6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.138.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:bb:2b:36:b1:79:78:50:c7:e9:f6:51:4b:8c:36:ad:9a:c4:
d9:55:97:a3:ca:38:5a:77:36:3e:8d:bd:99:0b:5b:09:a0:52:
1a:77:24:9f:89:9a:52:1e:87:9e:dd:c8:69:f3:87:2f:a3:92:
e7:d5:63:56:01:37:02:52:94:54:f1:93:e6:f7:29:bf:ff:4e:
27:30:b1:a2:db:00:11:53:ad:32:7e:51:19:09:4b:74:8b:39:
a7:fb:b8:5d:0e:aa:ca:2e:ca:4b:12:17:ae:94:87:e7:a9:e7:
41:07:70:1c:b4:40:1d:eb:59:be:59:8c:78:ce:1c:d0:64:cf:
ff:f9:53:3c:2d:ac:50:0a:22:83:d4:61:32:f7:f5:25:97:8e:
1b:a1:4f:5e:cd:f6:38:bf:1e:f8:b1:9b:4d:5b:a7:79:ef:d8:
ef:74:5a:d7:98:d0:27:52:55:f5:60:76:6e:13:e3:9c:80:01:
25:df:bd:29:59:b0:ab:54:9f:37:61:36:ce:80:4b:38:43:75:
95:1e:9b:0d:f0:1e:53:cd:be:d4:1f:22:8b:07:ea:60:88:a6:
ed:6a:e2:56:4d:d7:4b:e5:6d:b9:83:e7:a8:18:c6:0a:5c:a4:
18:fb:ae:ec:67:85:75:7d:78:db:bc:10:25:47:7e:c6:e5:7e:
a3:e9:9e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:11 2026 by rpki-client