Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/OJ2r_WrY0xKq14Ah9eF7bT_kPoI.roa
File: OJ2r_WrY0xKq14Ah9eF7bT_kPoI.roa (raw, json)
Hash identifier: O5Zkcw6U2+u+rAyI8iiJjs8XBhdQG79ba/E9zrFSGME=
Subject key identifier: 38:9D:AB:FD:6A:D8:D3:12:AA:D7:80:21:F5:E1:7B:6D:3F:E4:3E:82
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368E82B1B505527D0A1D991466B2A83
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/OJ2r_WrY0xKq14Ah9eF7bT_kPoI.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 194.67.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e8:2b:1b:50:55:27:d0:a1:d9:91:46:6b:2a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=389dabfd6ad8d312aad78021f5e17b6d3fe43e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7e:21:08:5b:6c:a5:cc:79:1c:bc:38:c6:7a:
e4:1a:f9:e5:b5:92:a2:0f:49:67:db:9e:fe:c5:ee:
d7:d0:9c:1e:af:6d:72:fc:26:bc:2c:3b:d2:1f:3c:
64:eb:e6:fc:c5:5d:e7:a2:74:7b:e3:0b:73:08:b2:
fe:da:07:26:f0:d8:c1:d2:ba:94:06:7e:39:76:4c:
06:56:9a:bf:91:a6:cd:11:3e:90:75:19:34:9b:7f:
11:d5:f2:27:c2:de:a8:26:76:ef:53:e4:b6:47:aa:
f3:17:c7:92:73:35:87:01:e2:7c:f7:c0:13:d3:cf:
08:49:f5:42:65:90:3a:25:3d:76:f5:b4:70:f0:ee:
40:26:9f:82:b5:d0:14:8d:2f:99:a0:43:d2:55:f5:
3f:a9:01:8b:7b:d8:6f:8c:e9:a4:c3:d9:3b:98:ea:
7e:33:8f:13:59:16:3e:63:cf:05:b1:b6:9a:f6:54:
3b:b5:df:11:99:30:40:30:d7:e3:b9:d6:41:4a:f1:
b5:f1:11:7e:f2:c5:51:57:5c:50:f3:8b:99:f7:0e:
e8:d5:42:09:cf:ca:ea:54:80:b9:d3:a6:07:20:03:
fa:2a:4c:1f:d4:ec:9a:ce:25:e2:9a:6b:d3:0b:05:
e9:60:d2:53:b5:a3:b6:cb:b4:23:50:37:46:ba:8b:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9D:AB:FD:6A:D8:D3:12:AA:D7:80:21:F5:E1:7B:6D:3F:E4:3E:82
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/OJ2r_WrY0xKq14Ah9eF7bT_kPoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.192.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:cc:e6:b7:f5:da:1e:d0:cb:47:dc:cf:a6:97:db:b1:aa:c6:
bf:54:5c:93:98:70:c8:cc:13:6c:10:ec:ec:06:95:53:5f:80:
0a:d2:98:53:7c:1f:20:ac:d1:83:24:7b:85:4a:9a:2c:1f:ec:
75:c2:3b:9b:2b:d3:5c:0b:ab:ba:50:39:f7:b5:89:aa:29:69:
e2:b8:90:a2:5b:42:fc:23:3d:dc:6b:c7:4c:9c:70:93:86:9c:
ca:c8:10:80:f4:3a:d7:ea:ff:8c:82:10:f1:89:68:6f:85:a0:
f3:33:42:b2:c8:c5:2c:1d:b3:c7:75:9d:59:73:c5:7c:98:c2:
f9:52:84:3b:b7:c5:b6:fc:3b:6f:75:77:16:dd:c6:14:7a:db:
d8:c6:eb:45:ac:e3:21:a5:89:21:5e:97:5b:b0:77:af:d2:9b:
7a:25:89:7e:d2:db:ea:a0:42:a1:fc:45:60:bf:12:c3:cb:4d:
d9:bd:45:97:7e:1f:b0:33:30:f2:07:b0:48:9a:84:69:cd:a4:
30:ef:d0:96:53:a9:f6:99:b1:fe:28:69:d4:12:bd:68:aa:ff:
bc:a0:ee:ea:90:cd:15:5a:c7:e0:d2:0a:dc:4c:b9:45:e3:6a:
d2:cc:c5:06:69:2f:af:18:8f:bf:de:21:1d:b6:ec:31:db:52:
7c:5b:71:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:16 2026 by rpki-client