Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/J2CaVPHcWugeLMH4c_VClg36GvE.roa
File: J2CaVPHcWugeLMH4c_VClg36GvE.roa (raw, json)
Hash identifier: XRx4Nu0j1sgKKNG7PK8tJXluTqwDYoc9AtEOMCUHkAA=
Subject key identifier: 27:60:9A:54:F1:DC:5A:E8:1E:2C:C1:F8:73:F5:42:96:0D:FA:1A:F1
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368BD8560808E89D539A7A9D8658B29
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/J2CaVPHcWugeLMH4c_VClg36GvE.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50340
IP address blocks: 45.8.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bd:85:60:80:8e:89:d5:39:a7:a9:d8:65:8b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27609a54f1dc5ae81e2cc1f873f542960dfa1af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:68:18:5a:9f:b6:b7:02:e8:49:1f:0a:07:
cf:3d:74:e5:7f:9b:41:12:74:21:ab:78:d6:7d:e7:
f9:fe:db:c8:c9:1e:39:97:db:12:fd:e6:3a:c2:2a:
f0:80:e4:cb:7d:11:a0:93:7d:cb:e2:78:c8:50:40:
55:c1:d0:e6:1f:7e:60:69:8f:d2:75:1b:52:cc:f8:
cc:16:14:76:0b:99:9a:31:49:62:c9:06:71:4c:1a:
6d:31:d6:51:1e:a8:4e:90:21:a7:b7:11:a0:ca:ce:
e0:c3:98:88:a5:5a:a8:65:6b:92:69:27:bf:d5:ee:
92:ab:45:0f:b6:3c:cf:f8:a7:4c:8d:c5:7b:d3:a0:
c2:72:ef:9e:fe:cc:eb:57:55:fc:80:0a:fc:aa:2a:
22:e3:2c:58:b2:43:44:e2:2e:3f:5f:1f:0d:71:f4:
ff:16:a4:dd:33:67:68:a1:ab:d3:0a:ac:4f:9b:d7:
eb:67:12:de:e9:e4:1d:85:46:1d:5a:17:14:ec:7f:
ef:8d:fb:89:eb:47:55:9e:26:0d:59:10:d0:84:4f:
11:ff:f0:ce:1c:fd:5f:f1:4b:4e:32:ec:90:9d:25:
0d:c5:23:d6:f6:c1:6d:c2:0b:94:6c:d2:4e:5a:d5:
f0:1c:99:06:d4:6a:46:29:5b:9d:08:96:c4:dd:be:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:60:9A:54:F1:DC:5A:E8:1E:2C:C1:F8:73:F5:42:96:0D:FA:1A:F1
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/J2CaVPHcWugeLMH4c_VClg36GvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.208.0/24
Signature Algorithm: sha256WithRSAEncryption
90:57:5d:bd:d4:5a:60:60:a4:c6:b7:d5:c8:f3:a7:2d:86:33:
6a:49:cc:71:10:06:c9:a0:c8:56:2f:16:41:1e:4b:53:3a:88:
7c:e7:7e:13:34:9f:45:16:98:74:13:60:be:3f:2f:37:97:f3:
3f:87:06:6d:e6:2d:7a:37:53:e5:aa:05:8d:a2:70:ba:68:33:
6f:13:2f:01:b2:f0:85:46:c8:d7:c0:21:02:34:71:0e:09:4b:
8c:cf:74:6b:14:f1:7f:8b:03:87:49:0e:81:4b:89:2b:fa:c6:
12:77:cb:94:04:3d:8f:38:df:b0:72:b4:2c:93:f3:ea:30:dd:
5d:6c:97:4d:dd:d2:db:2a:50:b2:06:02:f1:b6:fa:41:1d:fc:
cd:92:14:04:a3:07:6d:34:e8:b6:ad:31:73:43:43:2a:59:e8:
8f:38:55:fc:9c:3c:30:3d:6a:41:7a:03:23:a2:75:28:d0:64:
36:5c:1b:a7:d5:4a:f1:51:b6:cc:b8:2b:05:1b:da:3d:fe:0d:
b9:dd:64:3f:f2:20:da:79:c6:43:9a:d6:4f:fd:09:36:0c:a8:
e7:57:6e:ce:7c:0a:2d:cf:72:eb:3d:8d:11:72:b9:f6:14:d5:
ff:5e:a7:79:e3:33:a1:90:6c:6f:35:f5:25:d2:0c:2e:68:f5:
41:84:03:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:49 2026 by rpki-client