Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/J7YCOwIpDmGTFGXmlgcHJAJ5VAI.roa
File: J7YCOwIpDmGTFGXmlgcHJAJ5VAI.roa (raw, json)
Hash identifier: 7sf1v2vMNQ5s2jnrpQ7UULsTSSI/WTh1PgkDR6niRNo=
Subject key identifier: 27:B6:02:3B:02:29:0E:61:93:14:65:E6:96:07:07:24:02:79:54:02
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C5CFC209E79EFD8B90A27985870B
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/J7YCOwIpDmGTFGXmlgcHJAJ5VAI.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197275
IP address blocks: 85.209.1.0/24 maxlen: 24
185.221.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c5:cf:c2:09:e7:9e:fd:8b:90:a2:79:85:87:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27b6023b02290e61931465e69607072402795402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4f:47:b6:c8:5d:ac:89:fd:09:c3:67:f8:39:
a0:86:62:eb:0a:fe:09:50:a2:fe:f2:b5:85:88:a9:
fc:7f:25:41:f5:1d:ee:52:a1:46:6e:a4:4f:fb:e5:
39:c0:b3:ec:1f:79:29:a4:b4:1c:c1:88:bf:ac:49:
66:9d:fa:49:0d:0a:b4:86:47:6f:ed:2d:b5:fb:50:
7a:dc:e6:32:14:89:9f:34:8e:0c:55:ed:23:78:d3:
31:a9:4f:55:84:f8:d3:f7:8a:00:fa:35:13:97:0d:
da:ac:e7:9d:af:95:50:a3:06:9a:d0:cb:cb:e9:cd:
5c:c7:6e:6a:26:61:d3:de:ed:b1:83:c9:bd:7b:99:
00:7d:e1:2f:08:7c:b2:ab:35:25:75:5f:a4:ef:ad:
13:60:0a:e3:da:37:2b:c0:b7:3f:47:36:50:da:13:
91:14:ee:af:29:9d:74:2c:2b:83:ca:45:f4:62:0d:
8f:ee:e4:98:7a:03:8e:6f:a0:a6:55:fd:1e:8b:89:
81:15:f1:44:4f:df:2e:fb:94:da:b5:ee:87:41:1c:
45:5e:a4:28:08:da:97:cd:cc:3c:f3:e0:8e:04:a0:
ac:38:02:87:e9:c0:c9:1d:51:3d:40:f5:31:f6:a0:
1e:c5:63:f8:ee:b8:e5:0e:1e:1d:ea:44:f9:b1:08:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B6:02:3B:02:29:0E:61:93:14:65:E6:96:07:07:24:02:79:54:02
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/J7YCOwIpDmGTFGXmlgcHJAJ5VAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.1.0/24
185.221.161.0/24
Signature Algorithm: sha256WithRSAEncryption
32:44:b4:1d:16:d1:2f:8d:92:d6:eb:5f:61:45:37:dd:cd:a2:
84:56:8b:06:83:7a:6d:96:ca:e1:18:9e:69:ba:84:7b:11:dd:
6a:f9:f8:03:4a:b3:07:4e:19:23:65:46:c4:e0:5c:ba:6d:1d:
47:11:bb:99:e9:5f:dd:21:81:b5:3d:46:3a:ca:c3:1e:47:3c:
55:6c:42:b6:34:42:ed:9c:99:a6:45:3e:72:84:1e:19:db:e2:
52:5e:f4:0a:a6:0e:cc:30:53:a7:34:d2:82:12:7b:10:db:2b:
6e:6b:10:bb:90:4c:dc:06:bf:a1:b1:ba:40:2a:fd:6a:73:87:
03:a1:cd:05:af:e3:07:f4:4a:17:d5:fd:da:90:b8:e0:35:a5:
e1:c9:24:3a:33:62:38:d2:94:ea:79:2a:6e:35:29:99:02:d1:
9e:20:c5:b4:3a:83:ac:96:79:c7:33:d2:64:09:57:fb:a8:32:
9a:2d:74:26:bd:21:4c:a6:26:6e:84:c7:9b:30:4b:15:19:83:
47:2b:cd:0d:7d:6b:90:b4:02:5f:d7:af:9c:bc:24:3d:be:7a:
d7:56:da:36:80:3b:9f:56:cb:45:b5:eb:81:88:fe:74:f0:4f:
80:ab:64:11:c2:38:ed:9b:5e:54:57:6a:bf:04:1d:83:b9:37:
49:ec:52:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:43 2026 by rpki-client