Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/9ISQvhw3dd7OnrUtd11U-O9Okjo.roa
File: 9ISQvhw3dd7OnrUtd11U-O9Okjo.roa (raw, json)
Hash identifier: KD9d5zkXRacZW6zUhGmdtwr/Kpft1uxaJOp0UdBB08w=
Subject key identifier: F4:84:90:BE:1C:37:75:DE:CE:9E:B5:2D:77:5D:54:F8:EF:4E:92:3A
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368B926EFEB99B397E07F0C4BA8120D
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/9ISQvhw3dd7OnrUtd11U-O9Okjo.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35196
IP address blocks: 185.105.117.240/32 maxlen: 32
193.124.176.10/32 maxlen: 32
193.124.176.104/32 maxlen: 32
193.124.176.142/32 maxlen: 32
195.47.250.0/24 maxlen: 24
2a09:5302::/32 maxlen: 32
2a09:5302:ffff::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9300:1000::/48 maxlen: 48
2a0a:9302:1::/48 maxlen: 48
2a0e:d603::/32 maxlen: 32
2a0f:7b82::/32 maxlen: 32
2a0f:7b83::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b9:26:ef:eb:99:b3:97:e0:7f:0c:4b:a8:12:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f48490be1c3775dece9eb52d775d54f8ef4e923a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:03:bc:94:39:a9:90:5b:e7:fd:f5:fa:73:
87:c0:a3:a3:88:f3:dd:69:89:fd:fe:79:e2:b9:a3:
e8:1f:14:17:e0:6b:7a:84:31:ba:b4:1a:5d:16:50:
fd:08:2d:69:01:fc:e7:ed:f6:cc:d7:38:54:0d:8c:
3b:5f:c1:aa:52:46:d3:a8:c5:fd:c9:98:94:b1:db:
4f:ba:17:7f:cb:27:46:2b:df:cc:7b:44:b6:7c:cb:
42:8c:d3:cc:d2:77:f2:40:69:b5:75:a6:f4:de:71:
98:f1:28:42:63:7b:5b:72:a9:7e:1b:0c:a8:ec:ce:
4d:cd:36:ae:43:92:12:bc:14:f7:26:a7:88:2a:c2:
79:45:97:e7:23:3e:a3:c9:57:5c:2c:56:a8:6d:a7:
f4:59:d4:e7:9f:79:d1:b7:20:6e:04:3b:c5:5e:af:
a4:a5:f3:af:5f:39:e5:2d:4d:bb:cd:b1:88:61:8d:
f3:22:01:44:19:2d:92:18:0d:aa:9c:5e:41:6a:bd:
d2:56:fb:01:df:11:dc:f6:a6:df:89:a8:bf:9a:79:
9f:87:38:cf:94:48:3e:cf:dc:af:ee:a5:80:a5:7f:
a6:e9:51:69:32:63:74:6d:19:98:6a:7c:2a:8d:6f:
d0:7e:5d:6b:6f:c6:b8:ed:2a:72:0d:9d:95:74:29:
9b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:84:90:BE:1C:37:75:DE:CE:9E:B5:2D:77:5D:54:F8:EF:4E:92:3A
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/9ISQvhw3dd7OnrUtd11U-O9Okjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.117.240/32
193.124.176.10/32
193.124.176.104/32
193.124.176.142/32
195.47.250.0/24
IPv6:
2a09:5302::/32
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9300:1000::/48
2a0a:9302:1::/48
2a0e:d603::/32
2a0f:7b82::/31
Signature Algorithm: sha256WithRSAEncryption
69:50:a7:1f:a8:2a:ce:fc:31:9f:79:af:97:cb:a2:3a:0f:d7:
33:4a:a2:c4:d3:9a:62:c0:12:36:97:f9:b2:26:23:0d:ec:aa:
cc:6d:7b:e9:96:47:10:da:cd:39:6c:8b:60:17:6b:ef:08:7a:
8d:cf:b9:82:7e:ac:ca:65:cf:8e:0d:24:47:e2:7c:58:7a:8f:
e1:47:2c:44:79:75:f5:09:2f:39:8b:d6:99:a6:db:c8:ae:f1:
0b:53:be:91:6c:c1:59:1c:ed:bf:95:1a:8b:b4:cd:69:b0:22:
15:f4:6d:1b:74:57:03:e8:77:f8:df:1a:cc:ab:38:73:f3:7b:
23:a9:80:ac:81:38:8d:d9:6c:60:48:08:11:62:27:1b:fe:ad:
f3:51:a7:01:6c:b5:01:31:89:57:83:f3:a1:34:82:7b:05:39:
b2:32:b1:3f:a4:f0:ad:19:ee:25:90:eb:f3:5c:e8:3a:16:60:
17:42:ae:e9:c5:d3:5c:18:c0:cb:dd:b1:f6:1d:3a:ff:18:5d:
2b:43:0f:2d:59:f5:c7:e9:a4:dc:f9:63:4b:65:90:cf:49:21:
84:0e:d9:9f:ce:be:f5:6c:36:02:7b:97:58:af:de:ba:bd:9f:
b9:4c:7d:5c:fc:6c:44:dd:53:70:4a:55:58:a2:5a:74:df:7f:
05:db:38:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:24 2026 by rpki-client