Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/P2QM9N5R8xZ4MEjwn4PL1Ob0HyA.roa
File: P2QM9N5R8xZ4MEjwn4PL1Ob0HyA.roa (raw, json)
Hash identifier: 5nUPSIZ+CmA4SwMGtlGJiSRg2fdrNF4nqwfLMJP4F04=
Subject key identifier: 3F:64:0C:F4:DE:51:F3:16:78:30:48:F0:9F:83:CB:D4:E6:F4:1F:20
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368D128D58DB9A8F3C76E91C37AF1D4
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/P2QM9N5R8xZ4MEjwn4PL1Ob0HyA.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205125
IP address blocks: 45.95.201.0/24 maxlen: 24
2a03:e2c0::/32 maxlen: 32
2a0b:7780::/29 maxlen: 29
2a0d:3880::/29 maxlen: 29
2a0d:8340::/32 maxlen: 32
2a0d:8343::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d1:28:d5:8d:b9:a8:f3:c7:6e:91:c3:7a:f1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f640cf4de51f316783048f09f83cbd4e6f41f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:00:d0:3a:53:f1:db:1f:db:43:35:ca:03:
4e:e7:ae:96:2d:a8:b7:3f:ce:55:2b:17:89:eb:3e:
c5:d2:63:f5:b8:59:d2:85:61:15:07:5c:0f:e8:a5:
91:48:d8:82:f9:b0:47:4d:7d:67:f5:43:57:ed:93:
37:f6:b7:1a:8a:0c:07:d1:1a:af:c1:16:df:fb:df:
2b:a4:a0:3e:e7:51:01:55:0f:df:b1:66:95:99:07:
05:af:5e:82:c0:40:09:92:17:6f:76:ad:c7:49:b6:
a4:31:99:70:6e:31:3b:87:29:c2:47:05:d4:18:26:
b2:a8:87:c5:be:e0:22:a7:4f:76:f3:2e:06:59:71:
7c:d1:6c:23:cb:34:d5:93:06:95:b5:03:34:cc:89:
b3:77:10:7a:9c:59:d9:ba:5d:f9:12:ad:41:56:c7:
f1:86:4c:d0:15:b1:a1:9f:0e:02:45:78:12:25:b1:
9f:d0:90:7c:bf:9b:8c:46:d2:dc:4b:27:d1:09:c7:
87:e4:ac:df:d9:e0:ca:b2:c9:b0:fd:89:5a:16:ec:
85:8a:47:95:8a:bc:30:96:45:61:e5:9e:1e:70:bb:
19:d4:d4:4e:3d:b8:03:d8:81:99:25:c0:ea:2f:7c:
8f:65:bd:5e:b5:d2:7f:77:8e:7a:0f:c6:7c:9a:e9:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:64:0C:F4:DE:51:F3:16:78:30:48:F0:9F:83:CB:D4:E6:F4:1F:20
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/P2QM9N5R8xZ4MEjwn4PL1Ob0HyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.201.0/24
IPv6:
2a03:e2c0::/32
2a0b:7780::/29
2a0d:3880::/29
2a0d:8340::/32
2a0d:8343::/32
Signature Algorithm: sha256WithRSAEncryption
a2:f2:a8:7f:45:45:c0:f1:83:eb:95:29:9d:3a:e1:85:5d:8f:
72:19:06:81:e0:56:91:ad:b1:3b:47:2c:94:87:bf:68:54:00:
b5:16:e0:7f:e2:82:4d:57:3e:8b:41:e3:50:a9:df:6f:a4:97:
6e:ea:38:16:c9:e6:cd:da:52:bb:aa:e1:67:25:b4:98:47:3d:
bb:1f:6b:69:88:6e:02:e9:0e:31:1f:c4:9d:11:84:4d:d3:14:
db:46:33:07:73:32:a0:5e:27:34:b8:89:85:e5:ca:7b:e3:fb:
1c:45:74:c3:06:d3:5a:4c:69:b0:03:91:bc:5e:dd:e7:18:45:
7d:19:27:ec:8f:bf:5f:12:48:52:ee:d9:df:fb:9a:82:2c:3d:
5f:fe:47:c8:51:3b:82:85:a8:42:b0:fa:a7:8e:64:bb:a6:13:
71:b8:1f:dc:ea:77:84:e1:73:e0:3d:f6:91:79:81:33:13:49:
9b:99:c1:8d:9a:d1:0b:05:f8:54:fc:f0:97:5b:77:62:45:e7:
a9:11:a6:d1:fd:b6:61:11:cf:22:c3:88:5d:3c:e4:b6:22:2c:
d7:5d:84:7b:f5:f4:bf:fa:84:d5:63:73:b4:a6:64:49:f8:57:
d6:5e:11:83:ff:24:22:25:97:f7:8f:2f:6d:af:1e:b6:07:55:
2c:be:06:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:47 2026 by rpki-client