Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/7kPXDZGIJtJb4ZvHNNNp7VfwuBE.roa
File: 7kPXDZGIJtJb4ZvHNNNp7VfwuBE.roa (raw, json)
Hash identifier: /wfL7/FCTF76afqmaDr35XBd87Votp3LNO+nYJQay6U=
Subject key identifier: EE:43:D7:0D:91:88:26:D2:5B:E1:9B:C7:34:D3:69:ED:57:F0:B8:11
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368D97DF347D0A968585F88D66C32BC
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/7kPXDZGIJtJb4ZvHNNNp7VfwuBE.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 45.142.122.0/24 maxlen: 24
91.103.252.0/23 maxlen: 23
185.174.136.0/24 maxlen: 24
185.174.137.0/24 maxlen: 24
194.67.201.0/24 maxlen: 24
2a0e:d606::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d9:7d:f3:47:d0:a9:68:58:5f:88:d6:6c:32:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee43d70d918826d25be19bc734d369ed57f0b811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:35:9d:66:e1:fb:23:23:f2:f9:14:be:87:
e9:72:38:b2:51:c0:34:12:cf:80:dd:0b:f9:5a:8d:
03:8d:ff:73:61:de:72:8a:92:b6:4a:27:ea:a4:ac:
9b:2f:70:74:fd:75:0d:18:2b:eb:40:93:97:9f:f9:
65:7f:bf:7e:bf:27:4a:17:95:b9:a5:c1:46:37:ed:
93:a8:3f:8e:25:5d:80:43:81:a5:d6:11:f7:55:b7:
e1:0d:d3:96:31:6e:d2:2a:5c:82:4e:c3:9e:7a:13:
ac:31:d7:80:cc:7a:d2:86:59:7c:b8:4e:a4:26:81:
ac:70:0e:6d:a9:9b:74:20:0a:07:be:f8:4d:02:1b:
96:b4:47:f1:31:fa:f3:40:7b:08:4d:04:94:d3:fd:
9c:ef:80:be:80:9c:28:7e:ac:ff:27:63:a0:b2:b3:
b6:2f:03:85:28:12:88:8c:5f:65:b3:79:9b:ac:a8:
10:78:3a:30:51:13:d2:47:c6:c8:bd:ae:26:66:a8:
ab:17:01:2b:a2:06:0a:96:54:7a:aa:e9:00:7a:33:
ba:ef:3e:09:b3:75:68:92:d0:68:36:f7:c4:f4:fd:
c5:ec:c4:8b:6e:94:b6:4e:4b:06:af:69:01:0b:1b:
85:93:ee:bd:20:5d:78:cc:80:ea:7c:05:29:53:10:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:43:D7:0D:91:88:26:D2:5B:E1:9B:C7:34:D3:69:ED:57:F0:B8:11
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/7kPXDZGIJtJb4ZvHNNNp7VfwuBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.122.0/24
91.103.252.0/23
185.174.136.0/23
194.67.201.0/24
IPv6:
2a0e:d606::/48
Signature Algorithm: sha256WithRSAEncryption
4e:73:a0:b4:a9:02:71:87:8a:a1:0f:79:8a:ea:bc:1b:52:2f:
9f:4f:cb:fb:28:36:a1:9d:dc:f0:64:5d:87:7b:df:68:93:4d:
cc:43:ee:a8:54:7d:fe:bf:1d:2e:0e:cd:92:6d:9d:50:c3:1c:
d9:d2:53:27:10:25:79:cf:c6:1e:06:28:ae:05:7e:7e:28:b1:
cd:da:07:e7:3d:94:c1:45:85:23:d0:91:ba:ef:96:97:e3:f8:
54:63:19:a5:e1:ff:aa:6e:96:6d:1c:67:e1:f6:d7:1f:bd:3e:
61:29:48:0c:30:11:f8:a0:c3:fc:af:e7:c7:9d:fc:35:26:d3:
75:a2:76:b3:9a:63:10:ef:8e:7b:d4:aa:ac:fb:6e:8d:2f:d2:
a6:06:1e:3b:4c:52:b5:fc:a9:e4:9e:55:0e:6b:df:82:ab:7e:
fb:48:41:06:6e:5c:df:23:a1:57:37:81:5b:3c:4e:4f:ee:e4:
cf:51:93:64:08:cb:67:e3:a5:bd:55:4e:df:88:fc:47:07:a1:
56:54:d7:da:98:8f:69:24:0f:e8:8a:68:cf:14:11:e1:b1:f8:
9e:03:5d:da:09:7c:66:9d:03:cf:30:16:60:7f:b5:6f:41:3a:
93:f7:89:5b:f9:96:42:5b:c3:a1:a4:db:e3:76:9e:97:23:e8:
e2:ec:69:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:48 2026 by rpki-client