Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/74HRONdRam6Y1rGrxq0pwcCCRRc.roa
File: 74HRONdRam6Y1rGrxq0pwcCCRRc.roa (raw, json)
Hash identifier: 0jYNMOCgBebL7UbG921dOxrAhWO4T9RgUGdBgpjXxYk=
Subject key identifier: EF:81:D1:38:D7:51:6A:6E:98:D6:B1:AB:C6:AD:29:C1:C0:82:45:17
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368E4C0A8B3DE8262CDB1405E457C00
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/74HRONdRam6Y1rGrxq0pwcCCRRc.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215115
IP address blocks: 94.142.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e4:c0:a8:b3:de:82:62:cd:b1:40:5e:45:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef81d138d7516a6e98d6b1abc6ad29c1c0824517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:66:e4:2c:44:8f:e1:e1:de:54:c3:9d:1d:
22:1f:ff:9b:99:9a:1a:2a:12:4a:71:92:4e:35:37:
9b:1e:89:5b:88:33:3d:8b:db:14:87:f1:51:ba:fd:
7c:dc:f6:a9:35:15:f7:ad:e2:65:a4:af:7b:9c:ad:
96:d1:34:b9:f9:cd:be:bc:c8:d2:75:80:1b:2b:9b:
7a:cc:e4:08:53:01:09:4d:80:18:f3:06:2c:46:53:
75:bc:fa:1f:cf:73:82:d5:2a:ec:e7:c8:58:60:4e:
58:d7:54:31:63:6d:96:0a:3e:70:ff:6f:6e:4b:b5:
90:2c:86:89:69:2e:31:e8:62:d9:ca:07:05:37:18:
d3:c3:36:fd:4e:82:45:0a:b9:ac:89:97:97:7a:ca:
2e:5b:62:9b:bd:69:48:c3:e1:5a:80:66:77:93:ef:
24:4a:83:4f:e0:0e:74:56:2b:69:99:bc:b9:bf:ef:
23:e5:1c:ff:b7:5c:41:c8:d2:c6:42:97:15:2a:a2:
9a:79:07:27:ba:06:42:9d:63:18:dd:40:dc:4e:b2:
65:15:47:82:c3:50:01:cf:22:fb:6a:42:42:e2:8c:
3f:e2:a9:25:00:77:b8:88:7e:80:2f:0a:7e:ad:f3:
b1:34:69:39:0b:e4:d3:77:69:b0:39:e8:9a:43:3b:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:81:D1:38:D7:51:6A:6E:98:D6:B1:AB:C6:AD:29:C1:C0:82:45:17
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/74HRONdRam6Y1rGrxq0pwcCCRRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.143.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f8:53:ff:52:9c:f5:cf:c4:e3:37:76:1b:9f:92:02:29:51:
98:47:44:e1:98:66:b1:5f:92:9a:90:22:01:20:db:1b:fe:26:
aa:27:3c:b2:c4:37:ed:2d:ec:d5:bb:35:a9:81:7d:3c:04:86:
4f:a3:4d:59:d9:2a:d9:ea:90:98:23:f2:56:d3:8c:bb:bd:e4:
09:b6:e4:f0:0b:ec:de:42:6e:31:fb:06:19:d5:00:84:24:cf:
fc:32:ce:dd:04:00:f3:97:40:75:c9:c3:8f:54:54:e7:43:5f:
25:32:bf:cc:97:73:29:91:20:77:f3:ed:f6:41:4b:2c:66:d2:
6d:8f:30:e9:f3:62:57:4c:2d:19:be:3d:22:13:95:12:b6:30:
8d:7c:62:39:b3:34:ac:dd:0f:3f:ed:1a:64:a0:d3:cc:3b:5b:
9b:c4:b3:19:9c:37:65:46:a9:28:df:a8:8b:58:2c:f5:68:46:
45:58:a9:a3:3f:8c:47:21:b3:e0:61:08:37:80:15:58:29:2e:
a1:d4:45:1c:54:35:ad:46:2f:a7:a4:5a:8f:92:63:91:39:e5:
51:97:db:fc:46:10:76:d3:3c:2a:dc:0f:f2:36:3e:21:15:77:
69:30:36:d1:c1:63:20:97:e1:28:16:ba:62:0d:0c:aa:23:fb:
9e:4e:0e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:27 2026 by rpki-client