Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ETvb8Gq5nLUuKHAC_2tJ1fHZ8L0.roa
File: ETvb8Gq5nLUuKHAC_2tJ1fHZ8L0.roa (raw, json)
Hash identifier: j4KV5oSlXlPLLSHkNddPCNeaeBhDyS0YWI5dU3ngsLo=
Subject key identifier: 11:3B:DB:F0:6A:B9:9C:B5:2E:28:70:02:FF:6B:49:D5:F1:D9:F0:BD
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368D8372D70AF5D6EFBE90430926604
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ETvb8Gq5nLUuKHAC_2tJ1fHZ8L0.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209657
IP address blocks: 176.118.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d8:37:2d:70:af:5d:6e:fb:e9:04:30:92:66:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=113bdbf06ab99cb52e287002ff6b49d5f1d9f0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:63:7a:4e:3a:57:b8:9e:9b:f9:78:f1:0e:48:
c2:9e:c6:65:e3:92:48:92:68:2f:17:a0:18:c0:8d:
f8:3f:40:70:71:89:d0:d7:08:50:6e:a8:44:97:96:
45:a4:59:2d:8f:11:fb:1a:c0:18:1f:4b:f0:e6:cc:
b2:65:79:4e:c6:41:84:11:0a:48:b6:a1:03:f3:4d:
c4:2d:4d:68:aa:f3:af:00:f0:cf:d7:64:6d:37:22:
d8:88:8c:7c:f6:19:60:71:36:be:df:2d:57:d5:38:
c2:fa:64:b0:ff:01:85:47:e4:f8:5b:30:54:5e:15:
77:44:3e:1a:66:e8:ad:bc:8c:09:f7:bf:32:46:e0:
8c:29:b9:b7:c1:62:32:6b:bf:33:ec:be:50:6f:a4:
db:c4:5e:54:1a:53:db:d9:f4:68:84:cc:47:92:80:
3a:b0:85:75:43:6a:51:92:19:8f:57:cd:43:82:c4:
80:c5:c5:80:30:fe:34:0b:36:bc:ae:71:36:df:63:
eb:08:0a:09:68:44:6d:7d:64:4c:db:e5:61:6d:fe:
42:29:74:be:84:b0:fc:ed:5d:ad:8d:61:b9:cd:e8:
11:9c:96:6b:bc:8b:84:d3:62:4a:88:1b:99:4d:14:
71:46:e5:03:93:99:5b:9c:d6:ff:58:8b:52:0d:9b:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3B:DB:F0:6A:B9:9C:B5:2E:28:70:02:FF:6B:49:D5:F1:D9:F0:BD
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ETvb8Gq5nLUuKHAC_2tJ1fHZ8L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.196.0/24
Signature Algorithm: sha256WithRSAEncryption
87:28:9a:79:9e:43:3d:3d:34:ed:87:cd:6e:2b:1b:3a:cf:5e:
0d:06:56:27:a7:c1:13:50:c4:93:94:41:05:f5:55:5a:ae:19:
2b:95:26:fa:4a:61:ef:5a:51:9b:44:14:06:49:87:4c:42:8c:
93:e5:e7:78:ba:80:1d:9b:0d:56:16:ee:70:2f:cc:c8:0a:6e:
34:46:96:b9:53:7b:06:f5:9a:be:38:60:ea:1c:32:5b:b9:01:
72:4e:06:b9:24:05:12:95:13:b9:79:ac:4f:02:d7:b4:7b:df:
9f:d8:19:2f:bc:7e:f7:97:4f:4f:c3:e0:0d:a5:63:e8:01:1f:
6f:ea:03:da:6d:e2:5a:fe:28:ca:de:76:dd:a9:d5:91:da:d6:
df:fc:61:27:26:3e:74:59:0f:65:5d:72:8a:ed:8b:b9:4f:19:
20:a6:64:08:94:31:f4:4d:f0:5f:07:fc:d9:4a:76:e0:b4:d5:
90:c4:6a:28:0a:4a:99:8e:a9:97:22:80:6c:78:29:45:b9:49:
23:d8:dc:28:aa:de:aa:30:3a:e0:e0:d5:c8:30:35:ba:c9:b4:
5d:0b:95:69:95:73:33:b8:aa:60:cd:96:8d:4d:75:66:4d:4e:
18:68:5a:ca:2c:6b:61:e6:5b:06:6b:f3:29:51:84:81:4c:32:
24:cd:12:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:48 2026 by rpki-client