Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/B0xfAnhLMKYdYhhvZAOxoYluUOY.roa
File: B0xfAnhLMKYdYhhvZAOxoYluUOY.roa (raw, json)
Hash identifier: OgFhyKcx8MKSj2XeGmJrzuIVvJ+Ep/ygqw/oRym/P5Q=
Subject key identifier: 07:4C:5F:02:78:4B:30:A6:1D:62:18:6F:64:03:B1:A1:89:6E:50:E6
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368D4C7511B70D9789660372662F550
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/B0xfAnhLMKYdYhhvZAOxoYluUOY.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208392
IP address blocks: 45.132.253.0/24 maxlen: 24
82.115.222.0/24 maxlen: 24
185.17.1.0/24 maxlen: 24
185.112.80.0/24 maxlen: 24
185.112.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d4:c7:51:1b:70:d9:78:96:60:37:26:62:f5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=074c5f02784b30a61d62186f6403b1a1896e50e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:a1:c4:f0:e5:9e:da:fa:6c:91:4d:fd:16:
94:b6:d9:1a:6a:b2:9c:9c:b7:39:9c:35:2f:c1:66:
29:4e:b2:6e:68:91:7b:4e:f3:79:a1:1b:36:14:28:
37:eb:03:5b:cd:2b:cf:a9:59:ac:de:b1:d9:59:b6:
ea:b6:8d:2c:7a:a8:a6:42:f2:13:23:1c:b2:74:b5:
bd:bf:18:d5:20:5c:5a:c4:13:b0:23:8d:9f:5c:26:
44:94:d6:a7:8c:af:7e:27:f3:02:cd:03:0f:8f:5b:
e2:df:22:87:90:c0:ed:58:f6:c0:ca:e2:fd:c7:32:
d9:90:5f:db:bb:a1:c4:40:5a:eb:c3:e1:ca:fa:71:
9b:9a:1e:cf:b2:b9:0c:37:cf:b8:7f:8b:49:e9:a3:
2e:62:68:56:2c:cf:50:40:97:28:33:9d:a4:98:76:
b0:a3:3b:f6:19:c1:1d:5a:19:0f:bb:81:18:33:67:
6c:cb:20:cb:15:c4:e0:5e:2d:ae:d7:b6:7d:a0:24:
24:9d:13:c4:3e:2f:63:7e:38:02:bb:c9:30:9c:1d:
ca:9f:2f:4f:37:af:a9:f2:d5:bc:89:e6:76:59:69:
03:23:75:19:da:f4:20:58:0d:54:e1:11:f5:28:4c:
3c:07:a7:97:59:ea:98:14:88:13:cb:ea:1e:60:18:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4C:5F:02:78:4B:30:A6:1D:62:18:6F:64:03:B1:A1:89:6E:50:E6
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/B0xfAnhLMKYdYhhvZAOxoYluUOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.253.0/24
82.115.222.0/24
185.17.1.0/24
185.112.80.0/24
185.112.100.0/24
Signature Algorithm: sha256WithRSAEncryption
17:67:70:1e:24:b3:e2:3c:44:ae:c0:06:ca:01:6f:44:6b:d0:
4a:5d:61:0d:b9:e3:6d:f5:4a:79:fe:13:a4:16:ff:73:76:c5:
19:9b:82:6b:3d:55:7c:59:e6:ab:11:db:ea:cb:55:b0:f0:d3:
59:9f:69:cb:44:51:8a:31:12:18:b3:95:1c:f8:9f:00:bf:2e:
cd:7a:60:f0:c5:8f:c5:a5:3f:7b:24:72:83:db:15:5a:b7:21:
29:56:6d:70:49:c7:22:1d:2e:05:c3:fd:a7:dd:88:87:d1:f2:
8c:3f:ec:d1:43:1f:1d:eb:a8:00:36:40:97:e3:98:a7:33:09:
b9:0f:ae:d0:b8:65:7f:28:5a:9b:22:4f:43:61:57:7b:a6:a9:
97:4c:37:26:b2:90:e8:c9:74:f0:d6:43:8e:59:f6:c0:8e:99:
75:cc:7e:99:87:88:f2:85:df:db:84:fe:72:16:4b:3a:e4:7b:
aa:67:d7:f7:56:dd:52:df:b3:16:83:92:de:68:78:4c:0b:6f:
2c:64:84:d6:3e:63:ae:50:6d:02:fb:ee:b9:d3:e7:09:61:06:
1e:ae:cb:f0:a9:dc:05:ce:b2:4b:f9:c0:c5:2a:5f:98:d7:84:
1e:89:44:01:84:ea:30:a4:b9:11:73:f1:ca:06:9a:9d:6d:03:
4f:99:71:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:27 2026 by rpki-client