Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/FIlKcp4qtjY4dYVDnowOvMfKsPI.roa
File: FIlKcp4qtjY4dYVDnowOvMfKsPI.roa (raw, json)
Hash identifier: gnLsLDKZQSDxxkTAi4/jj1Q+GOegzmy/a2JMDpD8v54=
Subject key identifier: 14:89:4A:72:9E:2A:B6:36:38:75:85:43:9E:8C:0E:BC:C7:CA:B0:F2
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C8EA84BC60EC33A12ADD787799FC
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/FIlKcp4qtjY4dYVDnowOvMfKsPI.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201231
IP address blocks: 91.103.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c8:ea:84:bc:60:ec:33:a1:2a:dd:78:77:99:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14894a729e2ab636387585439e8c0ebcc7cab0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:67:ce:7b:2e:5e:87:f0:9c:23:2b:d8:98:
fe:e7:c2:2a:10:12:2c:4b:02:1e:63:ba:20:43:d9:
39:e3:0b:22:f2:e3:8e:f9:02:4d:58:1e:be:f6:e9:
9e:e0:36:fc:ed:0e:26:7a:cf:17:8f:95:be:c6:28:
1f:46:32:e0:56:d7:44:79:74:e3:83:ae:99:25:09:
6f:39:6d:7b:59:4f:53:6a:b2:f8:18:43:ec:a7:8d:
db:71:3f:75:9c:d1:b4:dd:7e:5d:ec:9b:6c:10:f1:
92:d3:6d:b1:42:20:fd:97:b3:79:f2:57:ee:35:9f:
7f:c6:14:68:e9:1c:c8:e8:27:23:b2:47:c3:48:6f:
d4:15:b4:7d:f4:e6:e0:31:35:5a:d5:ec:e3:c3:32:
c8:7b:a9:74:17:38:06:b1:b9:fc:34:be:15:2d:51:
fb:e4:95:c5:1f:da:11:5d:c7:1e:38:7d:8f:ad:af:
61:92:8a:cc:da:10:54:64:ce:fe:20:e6:a2:0b:b2:
88:cc:8a:86:da:78:b0:36:06:33:e4:e4:0f:3a:76:
a8:98:56:a6:0c:1d:a0:d4:7b:e3:79:8f:47:55:fd:
df:c4:f4:f9:ee:e1:83:2d:3b:73:05:69:ee:bc:8d:
cf:7c:ba:68:8e:12:b0:5c:3b:a5:c3:45:63:b7:25:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:89:4A:72:9E:2A:B6:36:38:75:85:43:9E:8C:0E:BC:C7:CA:B0:F2
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/FIlKcp4qtjY4dYVDnowOvMfKsPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ca:a2:85:71:b7:4b:13:7d:8d:76:8f:87:aa:39:b2:3e:5f:
26:9c:8e:f7:98:9d:13:3a:bf:e3:e5:c0:b1:0c:f1:1a:b1:1a:
01:91:9e:23:ea:94:f2:38:18:f6:04:79:1e:39:b9:46:d0:7e:
85:5e:32:f1:bc:ad:a8:ff:db:e3:11:a7:e8:4e:fc:47:4d:e3:
7c:70:ee:15:e2:a1:5f:d3:ea:81:6d:2c:e7:c6:f9:4d:9c:53:
b6:c7:3a:c7:ff:6a:38:02:48:42:48:56:9f:61:e7:0d:34:ba:
7a:cf:6b:32:76:b2:e2:20:02:b2:00:55:81:4a:07:5c:36:a7:
b6:fc:dd:59:27:4b:b1:5b:18:f3:85:f0:f5:7b:7a:72:d4:22:
72:a9:79:e7:99:34:06:bf:9c:08:42:61:34:5f:e6:0f:12:d5:
89:17:64:2e:2d:e5:41:e9:af:95:2c:49:ba:c5:77:c1:d4:52:
c9:0d:e0:ed:a9:dc:e8:88:f0:f4:ce:18:84:04:b4:96:99:25:
9a:3c:a8:37:e8:02:6b:b7:2d:7f:21:81:de:57:ad:ec:09:57:
21:ce:3b:c8:8e:bf:5b:77:56:d8:5c:0d:b2:18:84:34:29:e2:
22:0a:6f:de:e9:76:d3:6f:d9:29:e3:90:6e:f3:0c:a0:0d:9b:
0b:8f:db:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:38 2026 by rpki-client