Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/IQxUkvA0UUXYC2bXZrdkx_7lJWk.roa
File: IQxUkvA0UUXYC2bXZrdkx_7lJWk.roa (raw, json)
Hash identifier: 5A1SDV9RZVH+cVmtdvHrQjqmbvnD/JsFbZE3QrohkTE=
Subject key identifier: 21:0C:54:92:F0:34:51:45:D8:0B:66:D7:66:B7:64:C7:FE:E5:25:69
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C3F40758D5B8ED3867C1A92E0361
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/IQxUkvA0UUXYC2bXZrdkx_7lJWk.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62251
IP address blocks: 2a0d:8341::/32 maxlen: 32
2a0d:8342::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c3:f4:07:58:d5:b8:ed:38:67:c1:a9:2e:03:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=210c5492f0345145d80b66d766b764c7fee52569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bc:0d:80:53:5d:22:ce:7f:6f:0b:d7:60:9a:
e5:9d:3e:5b:d4:a9:4e:1f:05:99:0a:54:0b:49:d2:
6c:38:f5:f2:78:44:7b:af:dd:1c:0c:f8:c2:cd:07:
fd:78:d2:cb:c4:67:a5:9e:a7:e0:24:98:7d:33:e1:
d7:44:8e:86:df:e6:02:35:54:84:ec:40:71:a9:4f:
df:bb:be:47:97:7f:66:50:62:f2:a8:ea:21:f1:99:
6f:cd:65:c7:88:5c:bc:69:e4:e3:ac:81:6c:d5:ef:
e9:86:73:cf:6a:2d:f1:15:d1:d9:80:48:f4:50:fb:
48:6d:5f:97:1c:57:86:0d:54:07:a6:20:4e:a3:5d:
2f:09:c3:9a:c7:ba:ad:26:e2:76:42:09:9a:ab:ed:
91:f9:31:77:1d:ec:d3:11:d1:ae:51:88:a3:42:d7:
f7:6e:e0:b0:3d:50:f5:c0:b2:ba:66:bf:da:dd:92:
d0:c3:ed:6b:57:e9:64:96:fe:f0:cd:50:93:97:1b:
33:31:16:1c:df:f7:96:c4:db:bd:e5:21:71:23:fa:
ca:19:2b:70:28:d6:03:0c:8e:ea:ab:f7:f9:82:36:
d7:63:6a:6f:4f:e5:64:84:7e:3f:a6:51:b8:37:da:
f0:22:30:34:78:53:62:8a:50:9a:1b:a9:41:e0:00:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0C:54:92:F0:34:51:45:D8:0B:66:D7:66:B7:64:C7:FE:E5:25:69
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/IQxUkvA0UUXYC2bXZrdkx_7lJWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8341::-2a0d:8342:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
50:6b:f7:d0:17:77:71:39:3d:ac:3c:31:ce:e1:24:af:be:fd:
4f:c3:58:f1:69:42:aa:2b:cc:17:e5:05:88:7b:29:2e:54:79:
9e:5a:e4:46:37:4e:b2:67:26:21:20:dd:3e:ba:18:af:32:a4:
9b:3f:56:77:f8:b0:67:2b:17:e2:35:2f:62:15:09:fc:af:cd:
7c:ba:bf:a6:53:cc:ed:4d:9a:7e:73:3d:71:79:bd:73:be:b9:
b5:a2:34:0b:9b:37:20:dc:b0:6a:bb:c8:b7:f6:7c:43:a6:2e:
3f:0f:a2:3a:4f:21:13:77:1f:5b:ba:25:b0:59:f4:dd:3f:32:
5a:47:fe:dc:09:7f:17:0f:af:f6:80:0c:7a:05:89:e5:c7:be:
d0:c0:24:0c:d9:e5:db:6e:68:de:07:c0:6d:fd:a1:73:d3:e9:
aa:e7:f5:6c:ae:11:b2:05:1c:4d:c8:06:55:b6:b7:24:18:84:
cb:cc:a7:e3:5e:0e:b6:29:7c:42:82:8e:68:e2:13:db:9c:dc:
df:a1:9f:eb:fa:cf:d4:28:79:be:fa:4a:77:f0:3e:c3:19:20:
9e:26:45:59:65:37:de:40:6f:12:35:87:24:f4:e3:b3:3a:61:
9e:3e:96:ad:4f:03:db:76:3a:78:1a:ae:91:8e:cc:3b:db:49:
25:86:62:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:14 2026 by rpki-client