Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/KoiJEg0o7EHng85JWRTEgq8VB9M.roa
File: KoiJEg0o7EHng85JWRTEgq8VB9M.roa (raw, json)
Hash identifier: 5ShUeWZrfoc7yoLUh6EkSJlgWk8F5QTaPck6NAm6JkA=
Subject key identifier: 2A:88:89:12:0D:28:EC:41:E7:83:CE:49:59:14:C4:82:AF:15:07:D3
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368DD3273157FDEECB0821A987C0DAA
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/KoiJEg0o7EHng85JWRTEgq8VB9M.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211072
IP address blocks: 194.67.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dd:32:73:15:7f:de:ec:b0:82:1a:98:7c:0d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a8889120d28ec41e783ce495914c482af1507d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:eb:19:ef:02:83:6b:99:8a:45:75:17:99:
1f:c0:c6:6c:ac:3a:4e:3b:fd:e8:9b:29:5f:c3:bf:
83:e0:03:83:ca:3f:28:18:4f:73:b8:59:2a:fa:91:
5c:5b:a9:30:c6:90:de:ca:88:0a:f1:b2:f2:60:44:
6e:b0:41:05:94:07:9f:48:93:6f:3f:63:a6:87:64:
e3:1a:05:b0:75:c6:34:93:16:bf:e7:b8:37:12:57:
51:4b:9a:5a:69:14:10:4e:bc:a6:29:34:65:cd:90:
7a:62:ad:f8:57:df:79:29:51:fd:50:59:a6:a7:3d:
11:24:18:25:9b:b7:82:1a:ce:7d:20:e5:90:c6:66:
87:dc:11:89:f7:ca:52:18:6d:4c:ce:45:93:7c:f9:
be:64:24:b4:6b:67:68:d1:31:53:9a:cd:2f:12:b4:
28:e6:db:4f:78:9e:40:c9:09:26:f8:af:27:9c:a3:
f0:b7:7d:eb:a7:d9:8b:48:8e:96:99:74:3a:22:62:
35:bf:13:2b:8a:7c:17:de:ce:2f:3f:30:7c:7c:11:
7e:c5:68:21:77:4f:c0:03:03:34:4c:d9:ef:89:ab:
d5:4e:82:55:f6:e4:09:0e:f5:0b:47:79:48:be:c6:
fe:bb:4f:9b:80:49:97:2e:e0:94:19:da:5b:a8:d0:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:88:89:12:0D:28:EC:41:E7:83:CE:49:59:14:C4:82:AF:15:07:D3
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/KoiJEg0o7EHng85JWRTEgq8VB9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.193.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2a:f5:e9:0a:c7:c1:ea:ce:86:08:21:7a:f1:1c:f2:70:48:
5e:f5:7c:6b:42:ad:06:76:83:5a:ec:ab:d6:a0:5a:cd:de:8f:
a5:43:08:7c:68:00:20:f2:9c:5e:12:0f:a7:ec:0a:1b:e7:c9:
06:db:1f:e1:9f:1f:1a:ff:bf:5b:ef:f7:2f:90:bb:2b:e3:ad:
11:75:b3:58:dc:51:3e:56:1f:24:81:85:39:dc:be:4f:4a:bc:
96:52:78:b8:3e:03:6a:36:15:47:29:f8:94:07:18:f0:6e:f5:
f5:aa:e3:34:69:13:ff:ce:f6:5a:01:50:bd:5c:da:37:f0:cd:
e6:84:02:73:12:93:36:3e:bd:77:b3:17:99:01:c1:b4:72:64:
03:b3:45:25:db:f9:69:82:92:83:6c:1b:06:9f:af:22:50:f7:
fb:01:4f:df:08:4d:84:35:dc:69:26:3e:ac:cd:fa:59:a3:60:
27:ea:a3:fb:5d:b0:4c:f6:9b:77:3f:05:37:7f:75:fd:40:ea:
bd:7c:6b:8c:90:51:d2:97:9b:66:e9:72:a0:99:a4:29:42:8d:
24:d4:dd:c8:c9:0f:a8:29:38:9b:30:99:5e:82:f9:ab:e5:fe:
6e:7a:dc:9b:64:6d:50:13:58:2a:76:2f:0c:fc:83:c3:b0:18:
11:74:0f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:52:42 2026 by rpki-client