Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/RoCzqPOljp-wpFOcSfOQ3s5W2aQ.roa
File: RoCzqPOljp-wpFOcSfOQ3s5W2aQ.roa (raw, json)
Hash identifier: 16YISDa2LVT+kmOX8lx+H6+iJdRZOkm5kaNRaEk0uLo=
Subject key identifier: 46:80:B3:A8:F3:A5:8E:9F:B0:A4:53:9C:49:F3:90:DE:CE:56:D9:A4
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368DA01CD3B4419FE743FE30ABB4449
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/RoCzqPOljp-wpFOcSfOQ3s5W2aQ.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210702
IP address blocks: 5.180.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:da:01:cd:3b:44:19:fe:74:3f:e3:0a:bb:44:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4680b3a8f3a58e9fb0a4539c49f390dece56d9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:fe:c0:dc:1e:15:76:b7:67:48:0c:69:97:
9f:6b:c0:0b:53:60:9c:d3:bd:8e:ff:62:e0:8e:a6:
fe:a5:e3:62:57:11:78:78:db:eb:ef:45:4c:10:af:
b7:96:b7:bb:7d:ac:47:39:9a:57:51:6e:9f:50:52:
4a:82:f2:97:c9:c9:43:5e:9c:30:12:68:d5:f9:4a:
ff:3c:13:51:00:c0:29:7e:8b:ca:d2:9f:d2:9e:23:
f0:4a:3f:80:07:dc:e7:af:92:d5:d8:03:5c:25:bd:
f2:09:95:34:86:76:b2:84:55:73:d1:5e:44:06:99:
9e:92:b5:77:9c:61:6d:98:2a:2e:31:e7:66:e0:b2:
95:cf:90:5c:88:81:fe:c8:31:9e:0a:6a:eb:a8:56:
40:dc:33:03:f7:cb:e5:f1:a2:e0:45:3f:3d:5a:20:
ac:fe:56:41:54:16:54:cf:90:61:a8:43:d2:4b:50:
85:de:80:75:c9:e8:a2:7f:7c:3c:85:63:c5:e2:f2:
62:97:9f:e0:c3:67:12:b3:c4:43:3b:ab:35:8d:f7:
8d:88:df:d4:92:cb:33:33:ee:41:bb:07:68:f3:21:
1d:11:a4:6f:ef:af:84:de:42:ee:9f:23:98:92:9d:
70:7d:17:2d:f9:8f:b2:d3:6e:db:8a:78:91:d0:fe:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:80:B3:A8:F3:A5:8E:9F:B0:A4:53:9C:49:F3:90:DE:CE:56:D9:A4
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/RoCzqPOljp-wpFOcSfOQ3s5W2aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.139.0/24
Signature Algorithm: sha256WithRSAEncryption
53:cc:eb:4e:fc:21:c6:32:5f:5d:2b:30:13:4c:69:f9:9b:9a:
7e:cb:4b:3e:1a:85:3c:e8:4e:18:ba:33:e2:46:a8:a7:b7:db:
8c:93:7c:f4:8b:1e:59:bb:62:eb:1f:a0:38:3a:1c:a8:1a:3d:
f7:d0:7f:ec:83:61:30:3b:2e:93:03:02:99:1c:b0:46:21:af:
53:01:38:6b:77:c4:4d:1d:9e:7a:2d:18:9b:02:be:17:b9:a9:
78:d3:12:7c:5a:9b:d4:71:57:db:c3:80:cd:ea:1a:e7:4c:3e:
65:24:84:b3:b8:5b:8c:b1:48:bc:f6:96:57:4c:b5:de:2b:6f:
f1:b4:3e:d9:5b:8e:c0:1d:59:74:98:a2:9c:cb:38:6d:04:46:
5f:09:6c:2e:f0:2a:1d:94:b9:87:17:a4:2a:a4:d8:20:6a:b7:
95:bf:04:aa:79:fc:10:27:ce:95:13:21:ff:f1:ba:dc:99:1b:
00:c8:21:8e:ae:40:07:92:b5:50:66:a2:a7:88:84:03:d8:8e:
0d:81:48:23:d1:9a:3f:a9:cd:99:eb:d3:e4:d9:27:ba:aa:ac:
fc:e7:3d:84:e5:1d:06:1f:0c:46:e2:66:5f:cf:f9:05:fd:f8:
81:83:a9:49:58:67:39:db:b4:74:31:e5:07:44:3b:f1:d6:4f:
12:74:66:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:47 2026 by rpki-client