Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Aod5I9gvddJ3oru4ZiaVkjbdn-M.roa
File: Aod5I9gvddJ3oru4ZiaVkjbdn-M.roa (raw, json)
Hash identifier: 47L45/hbceyHPbd7UxcDibNgi6i9aEATugYtgQvKKS4=
Subject key identifier: 02:87:79:23:D8:2F:75:D2:77:A2:BB:B8:66:26:95:92:36:DD:9F:E3
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C7D1A61DEDDC02334134083399D3
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Aod5I9gvddJ3oru4ZiaVkjbdn-M.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199961
IP address blocks: 45.132.254.0/24 maxlen: 24
194.67.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c7:d1:a6:1d:ed:dc:02:33:41:34:08:33:99:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02877923d82f75d277a2bbb86626959236dd9fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:ae:9f:4a:f2:ff:d0:ba:11:25:44:a7:93:
15:34:8f:6f:bf:c2:4c:bc:c1:e0:4b:1b:fe:b0:cd:
1a:55:ef:d0:7a:d1:f4:27:c0:f1:53:68:08:fd:76:
77:f5:cf:dd:0b:f0:9d:50:85:e8:63:7d:ec:f2:7a:
ab:c5:28:33:80:22:8f:9c:92:56:4b:86:ee:d4:f4:
24:9e:24:5d:44:40:22:b7:84:5d:48:db:7d:bc:8f:
ba:a7:51:a6:5a:3f:9c:57:e3:5a:3a:f1:2c:39:e3:
d8:e8:28:de:49:19:a1:c6:99:8b:e2:4b:8b:06:ad:
56:73:55:77:e7:22:fb:73:d2:49:a5:06:52:f2:b2:
63:d5:f2:aa:22:be:d2:0b:8d:76:af:0f:42:ac:f2:
3a:28:6a:4c:7a:01:ad:4c:c4:e6:c2:68:c9:dd:19:
8c:39:91:bd:2e:05:db:2b:ac:38:32:f5:42:6a:f2:
76:7b:1c:df:4e:fd:e7:f3:98:f7:81:03:53:c5:35:
33:fb:8b:c6:36:da:61:66:11:7a:f2:c0:4e:56:b4:
a2:7f:34:99:39:34:eb:6c:6b:91:8d:45:02:a6:f7:
be:6e:ec:59:bc:ca:9c:8d:5a:83:06:f9:6b:25:51:
36:8f:ca:fb:4b:58:ab:9d:24:2b:19:f7:15:2a:9f:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:87:79:23:D8:2F:75:D2:77:A2:BB:B8:66:26:95:92:36:DD:9F:E3
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Aod5I9gvddJ3oru4ZiaVkjbdn-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.254.0/24
194.67.194.0/24
Signature Algorithm: sha256WithRSAEncryption
93:19:50:e9:6f:09:3b:36:36:5b:33:3f:ca:82:7e:24:dd:15:
df:1b:f6:ee:03:22:f0:f2:61:d7:e1:1a:e9:5b:92:95:4f:15:
77:2e:7b:12:67:df:a0:65:ee:88:d0:d8:c9:6c:14:15:d9:76:
09:ca:58:56:22:8c:8a:01:2f:0f:72:b3:3a:cd:1a:5f:98:f4:
f7:21:15:5f:6b:87:9d:46:6c:09:03:37:45:95:a4:19:3d:f2:
36:89:1f:a4:58:5f:34:8b:e5:21:f9:e9:49:ce:f4:6c:59:0a:
10:a6:98:d2:1a:e5:8a:2f:b1:d3:61:8b:82:77:27:ca:19:97:
a3:fb:6e:68:db:0f:8b:f5:b8:27:ef:25:b1:ce:fb:48:90:cf:
f4:e7:12:48:0e:02:42:54:b3:6e:f3:6c:14:c4:a5:80:d0:52:
17:24:e7:04:e1:0e:aa:3e:32:36:0c:39:51:b4:62:f4:47:df:
83:dc:51:64:37:ed:76:73:2f:cf:a3:57:5d:df:09:fe:6e:9d:
b6:8e:49:6f:4c:bd:88:87:6f:7e:32:78:a3:9b:6e:fc:00:47:
b3:88:27:c0:94:27:e6:63:b3:38:01:01:bc:7f:5c:2d:48:99:
4a:6e:75:a5:91:4d:0d:85:68:c2:ce:f1:06:08:d0:7e:22:9f:
37:aa:7d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:39 2026 by rpki-client