Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Fy7qRPArNNRUoeIcUK8PB-nvr2E.roa
File: Fy7qRPArNNRUoeIcUK8PB-nvr2E.roa (raw, json)
Hash identifier: +91yMr0UW+Wu1FO4pRGrG4ASjLSnTa5lUshXiBDpt+U=
Subject key identifier: 17:2E:EA:44:F0:2B:34:D4:54:A1:E2:1C:50:AF:0F:07:E9:EF:AF:61
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368D761C98E74890B1D8A8F574124C9
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Fy7qRPArNNRUoeIcUK8PB-nvr2E.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209592
IP address blocks: 176.118.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d7:61:c9:8e:74:89:0b:1d:8a:8f:57:41:24:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=172eea44f02b34d454a1e21c50af0f07e9efaf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:30:7e:36:34:b9:cc:cc:46:3b:bf:21:9d:
33:90:3b:41:2d:74:e5:10:4f:7c:be:5e:d8:42:8f:
75:86:60:52:a2:e0:b4:be:9e:c2:a6:7b:5b:ae:ad:
9d:0f:3f:1d:18:03:65:80:83:ad:04:32:0e:32:1d:
c7:a1:b3:1c:51:df:fd:bd:7b:50:5c:5a:23:ca:24:
ab:50:66:1b:65:dc:a3:f9:14:bc:58:37:61:35:a5:
91:38:e1:df:6b:29:2f:e2:75:2e:ed:cf:73:5e:95:
bc:ce:61:83:7f:54:fe:66:4c:fb:18:f2:97:86:ed:
44:45:a0:5c:93:81:94:a2:dc:5f:5f:bf:cb:3d:6b:
4f:17:26:9d:33:f9:17:ab:71:fe:43:8d:fb:36:29:
05:0b:02:31:3e:94:6a:9d:71:fe:8d:4e:37:e5:ed:
f4:64:3a:54:51:71:e5:8b:8e:af:02:b1:84:98:e5:
fe:8a:46:fe:fd:f6:ac:ec:ae:01:86:0d:78:91:c4:
82:51:af:3c:74:e2:a9:d1:d7:08:db:0a:f5:e7:72:
42:0b:a1:5d:48:24:ec:33:7c:0f:83:fc:7b:77:3c:
6d:7e:37:9b:d2:d7:a3:f2:e2:96:39:8d:78:a3:3c:
ea:88:52:7b:31:1c:63:df:f1:86:f3:f7:0c:f0:07:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2E:EA:44:F0:2B:34:D4:54:A1:E2:1C:50:AF:0F:07:E9:EF:AF:61
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Fy7qRPArNNRUoeIcUK8PB-nvr2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.197.0/24
Signature Algorithm: sha256WithRSAEncryption
66:39:27:6c:55:c4:7f:ff:b1:16:06:d7:4b:d2:1b:0c:ca:23:
55:6d:0e:19:d5:60:c0:51:09:b8:62:27:ef:67:39:7c:92:3f:
1b:b2:79:65:03:29:d7:0c:42:9a:de:7c:02:51:32:99:43:08:
08:7f:ba:fe:e0:d8:6e:53:d5:f8:80:6e:41:63:c6:42:7b:74:
e6:53:d5:b6:17:bb:8b:e6:3a:a8:e6:2b:0d:a2:e0:92:85:f5:
38:58:35:17:73:1a:b3:2b:e4:f3:7c:43:7f:fb:e0:85:5d:74:
43:38:88:6f:81:1f:f0:69:ee:c9:a0:1e:3e:07:95:69:1f:30:
e1:2a:c0:98:08:21:86:45:90:b3:c8:2b:82:62:38:b0:63:53:
28:8f:86:2e:39:91:a2:19:1a:e6:b5:21:37:2f:e2:8b:a3:25:
ca:ee:5e:99:df:6c:7e:51:64:ca:27:1c:58:a1:79:7b:7f:fe:
b5:72:e9:65:64:c8:ac:3e:34:db:a3:e8:fb:ae:85:bf:a5:4f:
6b:97:39:49:36:90:b1:9a:07:44:4d:ae:69:26:e7:f2:64:9f:
bf:ec:8b:f8:d8:d7:26:23:48:99:7a:08:3a:9a:3b:dc:31:05:
14:d5:bc:d6:10:03:ca:1a:29:b7:ba:fd:1e:c6:8c:b1:38:8c:
92:93:ec:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaNdhyY50iQsdio9XQSTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTI0YzI4YmEyMDJmYzA4NmYwYjViYWEzMDJlNTdhZTg5
ZmUzMGEwHhcNMjYwNzAyMTUxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzJlZWE0NGYwMmIzNGQ0NTRhMWUyMWM1MGFmMGYwN2U5ZWZhZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jkwfjY0uczMRju/IZ0zkDtBLXTl
EE98vl7YQo91hmBSouC0vp7Cpntbrq2dDz8dGANlgIOtBDIOMh3HobMcUd/9vXtQ
XFojyiSrUGYbZdyj+RS8WDdhNaWROOHfaykv4nUu7c9zXpW8zmGDf1T+Zkz7GPKX
hu1ERaBck4GUotxfX7/LPWtPFyadM/kXq3H+Q437NikFCwIxPpRqnXH+jU435e30
ZDpUUXHli46vArGEmOX+ikb+/fas7K4Bhg14kcSCUa88dOKp0dcI2wr153JCC6Fd
SCTsM3wPg/x7dzxtfjeb0tej8uKWOY14ozzqiFJ7MRxj3/GG8/cM8AdenwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBcu6kTwKzTUVKHiHFCvDwfp769hMB8GA1UdIwQY
MBaAFJmiTCi6IC/AhvC1uqMC5Xron+MKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvRnk3cVJQQXJOTlJVb2VJY1VLOFBCLW52cjJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHbFMA0G
CSqGSIb3DQEBCwUAA4IBAQBmOSdsVcR//7EWBtdL0hsMyiNVbQ4Z1WDAUQm4Yifv
Zzl8kj8bsnllAynXDEKa3nwCUTKZQwgIf7r+4NhuU9X4gG5BY8ZCe3TmU9W2F7uL
5jqo5isNouCShfU4WDUXcxqzK+TzfEN/++CFXXRDOIhvgR/wae7JoB4+B5VpHzDh
KsCYCCGGRZCzyCuCYjiwY1Moj4YuOZGiGRrmtSE3L+KLoyXK7l6Z32x+UWTKJxxY
oXl7f/61cullZMisPjTbo+j7roW/pU9rlzlJNpCxmgdETa5pJufyZJ+/7Iv42Ncm
I0iZegg6mjvcMQUU1bzWEAPKGim3uv0exoyxOIySk+yV
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:14 2026 by rpki-client