Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/LvO8yuLG6v5SOYPC-z6G0x_bnDQ.roa
File: LvO8yuLG6v5SOYPC-z6G0x_bnDQ.roa (raw, json)
Hash identifier: gttryalVmUZPwWJvw9CvzTUfOFuZXEyP7bNywD1wsNs=
Subject key identifier: 2E:F3:BC:CA:E2:C6:EA:FE:52:39:83:C2:FB:3E:86:D3:1F:DB:9C:34
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368BF47C3FC84D26949042F52A15062
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/LvO8yuLG6v5SOYPC-z6G0x_bnDQ.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51921
IP address blocks: 185.58.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bf:47:c3:fc:84:d2:69:49:04:2f:52:a1:50:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ef3bccae2c6eafe523983c2fb3e86d31fdb9c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:5f:bd:1e:30:d9:17:2b:58:46:a7:85:d3:
e3:d3:25:50:26:d3:3c:3b:3c:45:87:62:f3:08:03:
57:76:88:7d:24:be:21:63:8e:a6:a5:aa:f0:51:62:
03:74:7d:05:1c:e4:a9:3e:48:52:01:7c:b8:28:14:
c5:82:76:82:15:2c:63:99:ce:3d:53:49:d2:f9:3f:
06:3d:1a:6e:62:83:4b:19:67:a8:01:1f:60:84:ea:
a8:a3:b7:a6:a9:66:c5:07:99:a1:ba:ce:08:d6:7d:
bd:70:85:ec:1f:cc:19:55:d4:16:73:ac:33:fd:d4:
f0:f1:da:b2:f1:d2:70:75:72:27:d7:0e:6b:a8:07:
08:37:96:5a:f1:8f:d1:13:c3:16:ec:bc:88:27:bf:
b5:d0:68:8c:bc:56:6e:ec:2e:c2:f5:41:bf:67:fe:
08:08:dd:78:50:99:ae:17:e5:39:7e:03:6f:d1:9c:
59:66:3b:27:fd:a9:44:a3:d6:a5:f2:29:be:36:0f:
f2:c6:0c:65:49:8d:20:2b:e9:ff:51:83:90:c2:b9:
7d:87:3f:82:72:5f:ce:8e:c6:88:e5:06:b8:d9:0e:
8f:f1:7b:75:08:a2:c3:06:dd:e8:9d:15:24:da:26:
bc:d9:d8:6c:62:d6:93:f2:28:57:5e:de:14:d1:5f:
99:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F3:BC:CA:E2:C6:EA:FE:52:39:83:C2:FB:3E:86:D3:1F:DB:9C:34
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/LvO8yuLG6v5SOYPC-z6G0x_bnDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:60:94:61:88:f1:fa:05:27:12:40:5c:8e:b7:4f:0b:72:f1:
71:0b:e0:9e:0b:61:b4:22:5a:ad:22:7e:7a:a2:b4:6f:8a:2f:
92:db:2b:a4:8e:8d:f9:74:9c:9f:92:c1:48:85:7a:a3:77:4e:
88:45:ae:c5:3c:ff:e6:52:e3:b0:e0:c7:b8:e6:84:d9:21:11:
8d:70:86:59:02:c1:6d:7f:03:39:7c:8f:9c:09:98:f7:3f:d8:
29:69:ed:ba:1e:11:d6:c9:8f:f3:8b:f3:5f:6e:14:28:cf:9f:
a4:d9:d5:36:a8:31:fa:8c:77:7f:df:d6:3d:03:f5:31:f4:eb:
e9:51:52:d1:cb:1d:2b:ce:79:f5:12:1f:83:81:7b:5f:1b:af:
6e:94:2e:9f:00:d4:a2:d6:ae:8a:66:c1:b2:10:77:af:2f:ac:
90:07:13:46:e0:cd:00:a2:44:36:ce:6e:a9:85:3a:ea:1b:8c:
37:8e:9c:0e:18:2d:c9:46:02:17:03:04:f7:8f:91:cc:40:37:
f7:ef:3f:df:39:31:ef:c3:e8:a5:e1:b5:e1:f1:0f:2b:89:c0:
bf:9b:77:46:0d:a0:56:b9:fe:96:5b:5b:18:c5:55:14:54:80:
d3:7b:e6:5d:c0:62:68:54:da:59:fe:15:81:8a:14:4b:ab:bc:
52:bc:72:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:24 2026 by rpki-client