Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/H_t-EaAEYdj9-CJ2KsfY30PxzfA.roa
File: H_t-EaAEYdj9-CJ2KsfY30PxzfA.roa (raw, json)
Hash identifier: clz+uVbchxHErBbD0qwNn1Mqjv2F7seHFVf41iO1IOQ=
Subject key identifier: 1F:FB:7E:11:A0:04:61:D8:FD:F8:22:76:2A:C7:D8:DF:43:F1:CD:F0
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368E5BEC6D80890124853C2521E60C8
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/H_t-EaAEYdj9-CJ2KsfY30PxzfA.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215730
IP address blocks: 185.125.50.0/24 maxlen: 24
2a0e:d600::/32 maxlen: 32
2a0e:d604:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e5:be:c6:d8:08:90:12:48:53:c2:52:1e:60:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ffb7e11a00461d8fdf822762ac7d8df43f1cdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cf:30:3b:1e:27:89:82:49:d7:a3:34:2f:96:
3c:ea:fa:81:a1:c4:3e:26:2a:f7:af:a4:3e:85:8c:
ac:eb:80:45:49:3d:0f:be:be:4f:c9:4a:cb:4f:1b:
29:9a:25:01:43:fc:d1:b0:39:1d:61:f4:e2:0b:91:
79:2d:90:3e:20:5b:52:49:0f:c3:96:17:65:63:70:
a3:ee:60:56:d5:73:72:9e:28:18:19:17:20:1d:0a:
84:57:0a:64:61:31:e0:ed:81:ab:02:0c:ee:b5:df:
00:e9:36:4f:38:14:b5:46:5d:dc:db:be:95:dc:63:
3c:0a:4d:66:58:2a:ea:38:7e:61:32:61:95:d0:ec:
d3:4b:07:f1:a1:1f:e2:49:85:f7:b8:ff:0f:d7:ba:
e9:83:c2:3f:e1:19:37:29:52:1d:de:06:ab:18:6e:
66:ac:b1:37:e2:04:ed:22:3c:8a:45:4a:7d:54:11:
b8:2d:26:77:34:53:eb:52:28:39:5b:1f:b7:9c:37:
6c:f3:01:73:a5:d8:ab:f1:a6:55:6a:11:55:fd:ad:
3d:2d:09:18:d2:b2:d7:ea:2f:70:4e:c9:43:36:cc:
d8:3f:4c:0b:ae:79:d5:a5:cd:2c:3b:64:69:88:bb:
a0:a5:49:95:e4:24:5a:21:7a:e7:8d:a5:84:b4:8a:
fa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FB:7E:11:A0:04:61:D8:FD:F8:22:76:2A:C7:D8:DF:43:F1:CD:F0
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/H_t-EaAEYdj9-CJ2KsfY30PxzfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.50.0/24
IPv6:
2a0e:d600::/32
2a0e:d604:1::/48
Signature Algorithm: sha256WithRSAEncryption
09:d8:43:eb:bf:f3:19:d8:e7:20:62:b2:65:14:b6:97:e8:6c:
32:a6:bd:ad:68:9b:ad:73:00:f2:92:8d:9e:83:d7:99:c6:77:
08:eb:8a:8d:0b:f0:28:42:66:f1:d0:2e:f0:ca:d6:35:42:74:
9e:d6:ff:2a:61:68:68:ca:9f:62:01:ab:7c:da:66:c1:68:2f:
72:e3:e5:b1:7e:95:28:60:3f:ef:a2:0a:6a:28:e5:ef:2e:1e:
32:98:3d:1d:2b:f1:1c:be:ff:77:c0:2f:cb:d3:44:96:36:74:
c0:cc:27:e8:a2:42:a0:4d:c4:46:08:66:ec:f7:00:aa:2a:dd:
9f:e6:51:0a:3a:be:83:a7:53:c5:2d:db:19:ed:14:aa:04:69:
13:5d:43:36:80:fa:f3:47:14:c8:19:cf:8d:62:26:ad:a0:3e:
94:cd:f9:3e:3b:15:f5:b5:34:17:bd:df:8e:52:ba:15:1d:e0:
6a:f7:35:79:20:07:18:c1:6b:d4:4e:04:8a:f2:39:fe:7c:91:
37:4d:9a:f7:7e:05:83:e9:e3:b4:9c:f8:1d:57:7e:95:e9:6e:
06:e5:db:62:20:52:7b:31:2c:9a:0b:9b:c1:82:81:79:9a:e5:
cf:4b:ad:a2:bf:f3:1c:52:a0:05:8e:b4:9a:8d:4d:e1:88:8c:
b9:e8:a1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:58 2026 by rpki-client