Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/IK5d1AkVuY-lkJnpdskhr6Njj9w.roa
File: IK5d1AkVuY-lkJnpdskhr6Njj9w.roa (raw, json)
Hash identifier: ldKLfJWTa/0Df013f1F3qfVKtQX8pwysLhF2Q6/I+7A=
Subject key identifier: 20:AE:5D:D4:09:15:B9:8F:A5:90:99:E9:76:C9:21:AF:A3:63:8F:DC
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368B713DDB35ED3F199416099690015
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/IK5d1AkVuY-lkJnpdskhr6Njj9w.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15440
IP address blocks: 91.103.255.0/24 maxlen: 24
176.118.198.0/24 maxlen: 24
185.40.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b7:13:dd:b3:5e:d3:f1:99:41:60:99:69:00:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20ae5dd40915b98fa59099e976c921afa3638fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:6a:85:a6:7f:0a:e9:60:4a:cc:02:7c:a7:
30:fd:18:91:f9:56:72:90:19:79:cb:7d:07:2a:c9:
7a:38:86:35:17:4f:d2:33:97:e0:f5:cc:c2:fd:c8:
7c:7f:7a:c6:a7:3c:86:43:16:f9:43:12:92:56:fb:
a9:cc:b7:ab:b4:8a:54:2b:0a:6b:56:73:55:88:87:
b5:14:5d:69:cc:f5:1d:e7:21:40:3c:3c:e5:8a:5c:
38:36:0f:fe:67:03:96:a6:c5:f2:59:40:47:7d:f4:
b9:4d:ca:94:ac:a1:3f:45:5e:46:68:da:2d:27:ee:
d3:48:27:a2:bd:05:28:2e:cd:3b:eb:57:90:d3:a2:
e5:22:e6:36:06:48:4e:45:f0:27:d2:75:64:b1:e3:
16:f3:d0:0e:b7:73:dc:a0:2a:24:5d:6b:b1:d7:f5:
ee:59:e9:2c:2f:45:4e:5c:37:07:ff:85:aa:89:01:
1e:fb:9f:33:74:1c:e1:d4:68:d2:63:17:74:4f:11:
8b:75:91:eb:ce:d1:fc:d3:81:21:99:7e:9b:5e:a2:
09:6b:3b:e3:0d:56:92:83:2b:e1:f0:5e:bb:08:be:
40:32:d2:d7:3e:38:c6:40:12:3b:26:36:d9:3e:7f:
d4:81:31:02:68:b0:56:bf:fa:84:80:9d:55:f7:05:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AE:5D:D4:09:15:B9:8F:A5:90:99:E9:76:C9:21:AF:A3:63:8F:DC
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/IK5d1AkVuY-lkJnpdskhr6Njj9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.255.0/24
176.118.198.0/24
185.40.6.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ae:dc:cd:ea:93:39:b4:76:87:5e:6e:ad:43:92:13:2e:3b:
11:7b:2f:7e:a0:09:f7:a6:55:9b:5b:ba:65:02:10:cb:21:90:
88:73:ad:f5:07:59:5b:e9:b1:e2:e4:4c:69:de:51:76:d6:92:
41:39:15:1e:a7:6e:c3:66:f4:8c:39:83:2c:2d:bb:7d:02:e9:
5a:b1:b4:4d:d1:f7:74:ac:34:36:a8:df:56:db:c8:aa:ea:33:
47:3b:9c:14:54:01:82:74:96:53:b2:38:ce:33:ea:55:3a:03:
ec:6c:d7:ec:80:56:ae:4c:17:e1:af:a3:37:df:30:cf:36:a9:
a4:3f:f0:ac:44:b5:94:39:28:58:79:e3:59:c0:3c:4f:43:7f:
e8:fd:e7:9f:56:cf:2e:53:63:38:82:e0:8d:95:cd:4a:a9:da:
11:fb:64:35:f5:9a:de:ab:ad:5a:38:4b:d3:80:52:0e:04:af:
31:d8:b8:05:ed:8d:4a:24:93:ef:82:3c:d8:c1:de:20:d3:13:
fa:28:54:16:40:b1:e7:fb:1b:c6:81:f7:77:5e:82:ee:04:fc:
6c:ff:66:13:bd:64:1e:69:3b:d5:de:da:dc:e2:44:2b:47:8b:
cd:cb:9f:3a:b3:62:80:ec:2e:cb:d5:c3:c0:8f:ef:7a:f8:22:
1c:ba:93:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:58:03 2026 by rpki-client