Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/OjEpnfapZMjB7riae3MRyIFsL5Y.roa
File: OjEpnfapZMjB7riae3MRyIFsL5Y.roa (raw, json)
Hash identifier: 4xZu7vea570YKVh4Jst4h0hd/p+eNyGNdQU98ohulKQ=
Subject key identifier: 3A:31:29:9D:F6:A9:64:C8:C1:EE:B8:9A:7B:73:11:C8:81:6C:2F:96
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368DE708A0D5502873E40D1DCDBC39A
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/OjEpnfapZMjB7riae3MRyIFsL5Y.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211641
IP address blocks: 185.109.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:de:70:8a:0d:55:02:87:3e:40:d1:dc:db:c3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a31299df6a964c8c1eeb89a7b7311c8816c2f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:1c:81:c7:ff:1e:ba:19:f7:b8:f5:3b:7c:
cc:90:b4:e2:73:8e:ec:94:18:d9:b4:9c:8f:ec:79:
3a:28:26:c6:57:04:46:e0:2d:6a:22:48:d1:40:01:
7f:f0:45:b0:0f:0f:c8:84:97:14:85:ba:e1:82:82:
37:ce:b7:25:a0:71:54:63:01:37:e0:25:86:af:a5:
f1:3a:07:26:d6:e1:08:f8:a9:cd:24:3a:5a:5e:f7:
21:aa:e9:30:41:3a:3c:b6:6e:57:ce:52:82:15:7d:
4e:5e:bc:4e:3d:8a:a2:18:fe:66:f7:8a:bd:0f:01:
72:fd:a4:77:b7:4c:d4:1f:70:55:58:75:94:28:60:
17:2b:39:fc:d3:09:17:0e:81:eb:7c:57:87:2b:66:
aa:86:c2:bf:af:2b:49:fa:69:80:5a:71:5d:40:16:
99:73:fd:90:81:e1:bf:80:b3:7d:ed:2c:fb:20:4f:
a7:3b:2d:59:04:0b:a2:99:58:05:7e:32:00:b4:81:
bf:66:5e:08:82:c0:73:17:cb:ec:a0:34:f5:0e:d4:
79:db:06:1f:53:7b:4c:54:27:ca:d1:49:e8:0d:b0:
7b:3e:b9:1d:f4:99:a5:f1:47:55:71:30:39:39:14:
bb:07:a4:97:62:3c:27:dd:17:7a:f7:ef:85:8c:32:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:31:29:9D:F6:A9:64:C8:C1:EE:B8:9A:7B:73:11:C8:81:6C:2F:96
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/OjEpnfapZMjB7riae3MRyIFsL5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ea:43:04:fc:c0:b0:a7:70:6e:1e:1f:85:30:65:1f:c0:9d:
b9:ef:a2:52:bc:1d:05:bb:a4:85:74:5b:d8:ae:9b:61:fc:db:
8d:71:64:f9:4d:f5:74:10:81:52:60:98:a0:56:4c:ac:12:fe:
44:9d:39:88:72:a0:7e:26:20:bb:7d:00:93:bd:79:e4:70:aa:
4d:89:af:75:8f:e1:22:b6:64:b2:42:d9:18:95:5a:84:85:6e:
df:36:c6:8f:fc:0e:0f:b3:73:6b:9f:fd:c2:d8:b8:3f:68:d3:
da:47:3f:43:35:64:59:0e:db:d4:e7:f8:36:12:b4:6e:7a:d1:
30:1f:81:2a:5a:ef:8a:95:39:bd:df:ba:98:b7:7f:69:9e:2a:
62:09:7f:9f:c9:7e:f2:7c:81:e7:c6:97:08:8a:db:77:d1:7b:
ff:9f:60:d5:e6:67:03:73:31:77:54:2e:2e:a3:50:7e:10:ec:
b2:2a:8b:db:4e:2e:99:1b:d1:50:2b:fd:55:78:94:98:ef:2a:
af:85:90:55:23:4d:9a:ee:b5:d6:58:07:a8:14:fe:7d:47:87:
d6:cc:2a:ae:27:85:cf:91:01:b8:a3:fe:e5:2d:ef:08:6e:d1:
bd:f6:f5:e1:c4:2f:84:61:11:de:1a:98:9b:fd:b9:41:e0:20:
63:bc:01:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:13 2026 by rpki-client