Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/I2gTu2jHm1y32ktEro3QlYLga6Y.roa
File: I2gTu2jHm1y32ktEro3QlYLga6Y.roa (raw, json)
Hash identifier: uupQGllKX9Gjfw0yP5tYgWvfQJcG9t5JyHLiyW6nf2A=
Subject key identifier: 23:68:13:BB:68:C7:9B:5C:B7:DA:4B:44:AE:8D:D0:95:82:E0:6B:A6
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368B635B020DD99F610B5499070D2E0
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/I2gTu2jHm1y32ktEro3QlYLga6Y.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14576
IP address blocks: 193.0.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b6:35:b0:20:dd:99:f6:10:b5:49:90:70:d2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=236813bb68c79b5cb7da4b44ae8dd09582e06ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:0b:b1:e0:5a:7d:0a:b3:c6:82:b8:70:b6:
4e:ee:b6:cb:cd:04:31:32:75:3c:34:14:e0:70:60:
6d:28:ef:2f:c6:a8:b0:0c:9b:0c:1c:c5:6e:7f:a6:
20:54:02:0d:c0:54:47:81:03:4e:0f:49:19:50:32:
a4:25:3d:d6:1e:f7:fd:3e:a0:1a:a9:9d:95:ac:46:
29:7f:21:99:4d:37:5a:fb:8d:5f:da:f9:3d:ed:ad:
57:3c:76:ab:b9:31:35:b0:1e:89:b1:79:4e:78:52:
5e:ec:78:97:49:8f:40:a9:53:46:22:ac:12:68:f7:
27:57:2c:91:6b:3d:72:06:45:9e:33:a8:8a:51:83:
9d:d9:de:47:2e:43:bc:cf:1f:0a:db:85:2a:85:f2:
ae:08:8e:bb:1f:6d:e3:cd:56:fb:70:6c:7a:e4:60:
4a:5b:38:80:18:f7:c3:3c:a0:97:57:59:2b:14:6f:
aa:57:d1:7c:eb:43:36:0f:97:e1:c6:33:bd:cc:a2:
7b:ec:dc:d9:9f:bd:13:56:91:97:f5:7a:bc:a6:a7:
ce:57:e6:b8:de:a3:0f:8b:93:c6:49:01:67:63:ce:
0e:4f:ed:80:2c:99:bd:02:38:28:9f:06:30:c7:f2:
2b:ab:c9:e1:76:52:77:af:1e:dc:39:df:35:c5:80:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:68:13:BB:68:C7:9B:5C:B7:DA:4B:44:AE:8D:D0:95:82:E0:6B:A6
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/I2gTu2jHm1y32ktEro3QlYLga6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.201.0/24
Signature Algorithm: sha256WithRSAEncryption
56:6e:fb:f9:8b:96:6a:d0:17:01:e0:98:cd:01:c7:71:eb:67:
7f:13:aa:e7:c9:aa:d4:db:87:eb:06:06:ed:5c:ac:02:84:d4:
88:bd:eb:12:16:48:e0:1d:af:3c:36:ab:77:c9:d6:df:45:9e:
40:94:58:55:d2:1d:c6:fc:e7:21:19:bc:f8:cd:84:c7:bd:92:
ac:06:72:28:11:60:4e:8e:52:a8:d7:be:3b:2a:94:ce:6d:9e:
25:63:40:27:91:91:d6:ac:5c:f6:4a:f8:ad:35:e1:32:50:0d:
30:1f:ad:b0:7c:43:7d:1c:29:f0:2c:37:81:c9:eb:e9:d1:8d:
ce:ac:83:55:cb:47:9b:8d:ce:38:1e:7d:06:92:0f:9f:9f:e2:
9a:27:16:cb:70:23:76:15:8b:36:da:68:0d:a4:a7:dd:31:6d:
ef:2c:a2:92:7b:05:8b:b6:cf:f0:00:ed:08:64:9a:78:15:5d:
68:bc:e8:1d:5b:84:8a:a3:31:1b:db:e8:fe:79:50:b3:37:a5:
c5:90:53:3d:44:ab:b8:d3:ce:8d:20:84:02:bf:4b:78:f3:15:
6a:f4:88:df:5e:62:b2:2e:3e:93:0f:6f:ef:2f:f5:d6:1e:63:
93:ba:13:b8:37:05:d7:5e:96:e4:1c:96:4e:bb:22:3d:0e:2f:
9a:13:a5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:27 2026 by rpki-client