Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Ms5Kgih3vyuEUkdrY7IG2UL4624.roa
File: Ms5Kgih3vyuEUkdrY7IG2UL4624.roa (raw, json)
Hash identifier: cD1qWajc7loCAyUXFdigzCH4VRpB8X0/hfPKRoJ78WU=
Subject key identifier: 32:CE:4A:82:28:77:BF:2B:84:52:47:6B:63:B2:06:D9:42:F8:EB:6E
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C7421538EC8AFB04C0314A3184E8
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Ms5Kgih3vyuEUkdrY7IG2UL4624.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199726
IP address blocks: 45.95.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c7:42:15:38:ec:8a:fb:04:c0:31:4a:31:84:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32ce4a822877bf2b8452476b63b206d942f8eb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:19:02:2b:c6:d4:b5:94:ca:fc:db:d4:b8:
79:be:9b:43:27:11:93:4d:05:4b:da:8a:ae:0d:48:
95:33:ed:ca:06:0e:74:40:b4:81:1d:2c:6b:a8:e6:
2e:65:a5:61:02:15:31:26:c7:43:72:3b:7b:fe:c2:
b3:91:1b:81:07:59:c4:14:c1:62:90:ba:00:5e:64:
53:1a:dd:3f:a3:72:a4:9a:b6:b6:f5:63:26:5f:eb:
34:c0:c5:4a:60:b6:e6:fc:71:d3:ce:94:d8:43:0b:
87:58:c3:e5:2e:e0:eb:4d:12:48:40:6a:8f:11:14:
6f:e0:db:53:1d:fd:8d:04:b7:7f:27:3f:a8:a1:52:
88:5a:09:e4:f1:23:96:8d:1a:20:66:77:9b:3f:a3:
b0:82:f1:b2:d7:9c:b5:3b:ac:62:81:76:44:49:0c:
b5:7d:3f:96:b7:19:57:04:7d:5c:43:dc:27:16:2f:
29:41:b8:89:be:ba:02:8e:bf:22:ff:38:6b:91:10:
1c:db:3a:73:42:dd:e3:18:0e:fe:d0:0a:f4:2c:75:
af:03:71:1d:97:73:b3:ea:e0:49:7b:0d:16:04:3d:
02:b5:52:27:de:ed:1a:2d:ca:b6:11:30:1f:4b:69:
69:32:f0:97:eb:63:4a:0f:32:93:65:b4:5c:2b:72:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CE:4A:82:28:77:BF:2B:84:52:47:6B:63:B2:06:D9:42:F8:EB:6E
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Ms5Kgih3vyuEUkdrY7IG2UL4624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.200.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:00:d1:c6:5f:55:85:c5:fe:c8:8f:af:f6:d8:13:22:c1:86:
b1:84:48:24:b3:ed:02:a2:aa:a1:d2:85:02:fe:18:71:94:98:
7d:96:5d:5a:16:d6:21:79:73:96:5e:ce:e8:6d:de:ec:d6:0f:
bc:48:19:b9:a5:58:a8:35:31:2d:38:33:d5:90:84:82:15:05:
29:85:b1:a2:e0:55:46:3a:54:5c:6d:0c:20:7c:d8:c0:cb:6e:
3c:75:d3:c0:f2:dc:6d:2a:94:b4:9e:19:fa:c1:11:b6:83:7e:
af:21:f3:ff:12:5b:3c:10:12:ba:66:93:19:81:37:66:bc:99:
3a:0f:fc:8c:0b:4a:bf:c3:3d:ef:29:3b:ce:11:83:42:31:33:
a1:bd:d5:cc:a9:b2:32:ff:5d:e7:bb:c6:c8:5c:7b:56:01:c5:
3d:3c:eb:ae:f3:31:70:fa:f4:cc:96:fb:73:0e:16:7b:71:13:
60:6b:cf:38:bc:31:74:c2:53:0f:00:54:59:68:72:a3:93:fc:
7f:5b:6f:f6:1b:fe:4e:74:d0:fd:f0:65:c9:85:6c:41:d6:34:
dd:79:64:35:67:07:3f:0e:42:e9:07:94:29:60:1a:35:cc:88:
10:b6:47:56:9b:15:63:57:12:e2:cb:67:7e:52:14:68:b0:07:
28:67:06:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:29 2026 by rpki-client