Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/DojF5_sH8a2-B-NHDJVsft0LClA.roa
File: DojF5_sH8a2-B-NHDJVsft0LClA.roa (raw, json)
Hash identifier: ejC39+K1tjvy9IemxGb622crUhph7Wkqq29//eHU9Jg=
Subject key identifier: 0E:88:C5:E7:FB:07:F1:AD:BE:07:E3:47:0C:95:6C:7E:DD:0B:0A:50
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368B81E183FC395BB2E7DDFDE8EE071
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/DojF5_sH8a2-B-NHDJVsft0LClA.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21030
IP address blocks: 194.67.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b8:1e:18:3f:c3:95:bb:2e:7d:df:de:8e:e0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e88c5e7fb07f1adbe07e3470c956c7edd0b0a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:52:9a:ea:80:5b:35:97:51:c2:d7:77:14:
ec:34:78:5f:70:b1:5f:27:fb:d8:71:7b:6e:b4:67:
11:6d:53:47:21:f5:10:a0:2a:1c:23:d0:c9:6f:ca:
bd:17:84:42:2d:bd:e5:b7:c6:21:6d:4c:06:d9:4b:
4c:46:1d:59:32:3b:34:2d:d3:df:0d:5a:23:ac:6c:
76:d1:5e:18:62:49:1f:ee:b0:0a:41:86:0d:48:84:
97:d5:5a:33:cd:fb:a4:f4:ca:24:67:be:d1:37:61:
e2:30:e4:3b:0c:b2:43:44:cd:60:f2:28:35:e7:f8:
b8:5b:d3:05:fd:e7:dd:62:ed:5d:58:6e:91:85:37:
b6:ed:ac:67:b6:88:de:29:51:a0:73:f0:42:58:6b:
ae:2d:c1:76:4d:a8:36:a9:c8:ee:20:eb:9d:12:5b:
5f:93:12:ec:1b:97:ca:75:4b:9a:df:97:54:c9:a0:
62:6a:65:56:02:8e:35:eb:40:e5:c7:e2:a2:d4:38:
c7:57:97:1d:1b:0e:3f:18:be:78:0d:e2:b0:e2:4b:
8a:70:c9:53:41:f6:b3:a6:7f:04:ff:bd:0d:0e:8b:
d3:16:b1:e5:54:75:d1:0e:8d:23:15:c1:72:19:34:
d2:d7:4d:08:e8:3a:8b:b5:a9:c3:1b:07:91:79:69:
6c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:88:C5:E7:FB:07:F1:AD:BE:07:E3:47:0C:95:6C:7E:DD:0B:0A:50
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/DojF5_sH8a2-B-NHDJVsft0LClA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.192.0/24
Signature Algorithm: sha256WithRSAEncryption
82:31:c5:a2:e7:50:82:c5:4e:75:82:e1:79:ed:1d:c4:97:42:
32:72:2f:c2:29:f1:3c:79:a5:ac:78:3d:94:9e:5f:b6:4e:20:
59:50:3a:ff:82:cc:c2:1c:40:09:b9:47:2f:9a:ac:0c:28:66:
77:78:50:f7:ae:f0:66:fd:cd:08:2b:db:cc:91:31:2f:44:b1:
fc:17:58:53:41:b3:7b:cb:20:a2:97:28:41:85:d2:d6:b8:ca:
06:a4:95:ce:62:7a:50:f1:41:44:32:67:4d:c7:8b:fb:5f:fd:
b9:d6:b4:28:0d:7f:aa:f4:19:98:be:c0:77:1a:16:21:91:72:
da:e1:c0:87:71:a2:11:45:64:4a:24:65:71:af:42:59:ec:b3:
f2:11:5b:13:8e:c0:6d:7f:9e:1b:08:66:08:f5:af:98:0b:8f:
33:1b:66:19:78:55:d3:26:7b:0f:48:0f:21:14:03:c9:d1:b6:
aa:f6:0f:42:f2:59:14:b9:c5:60:c4:a6:5c:ca:ea:1a:df:65:
f0:be:40:ac:07:e6:fc:33:f9:7b:98:8b:f9:b5:97:a6:65:a3:
8f:30:90:b0:00:7d:43:51:0a:6c:34:cf:a6:b0:c2:52:8c:10:
00:05:f5:ab:d4:a3:62:77:af:cc:d4:62:a2:23:00:20:43:1c:
60:4b:8a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:52:42 2026 by rpki-client