Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/TUKz3qh4oXj3HTz9ZJsjnZOctrE.roa
File: TUKz3qh4oXj3HTz9ZJsjnZOctrE.roa (raw, json)
Hash identifier: m5G9aFOEZ0nHTC8MuA21ZbkawV1ymbE2B08VEZVS4Gw=
Subject key identifier: 4D:42:B3:DE:A8:78:A1:78:F7:1D:3C:FD:64:9B:23:9D:93:9C:B6:B1
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C94550590992B03B03628F5AC9B4
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/TUKz3qh4oXj3HTz9ZJsjnZOctrE.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201624
IP address blocks: 176.118.199.0/24 maxlen: 24
193.238.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c9:45:50:59:09:92:b0:3b:03:62:8f:5a:c9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d42b3dea878a178f71d3cfd649b239d939cb6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:2d:f7:73:70:09:a8:a8:55:f6:bf:bd:39:
69:26:ac:b3:25:49:16:3a:2f:ee:d1:77:bf:d9:71:
6e:b5:d5:f2:cc:44:e7:2c:6a:22:f4:f0:3a:46:06:
b9:d7:ad:fb:a9:b1:74:6c:a8:96:c4:19:97:9b:0a:
da:20:1f:62:b0:db:0c:01:85:c5:38:44:46:92:dd:
b1:ce:75:f5:6a:0a:69:e3:e8:c3:c6:e8:3b:51:e9:
9f:ed:0c:37:8b:e8:8c:a5:c1:41:1e:2b:2c:63:8a:
90:a4:95:4f:4f:32:7f:da:f6:5e:ab:e2:6b:99:3d:
2a:f4:68:30:96:53:bb:39:7d:76:f4:d7:e9:c2:c1:
c8:ee:1f:ad:b2:c0:1f:cd:63:71:04:dd:cc:b4:72:
a8:2a:3c:9b:55:d2:d5:b1:f0:23:09:c4:ea:71:82:
6b:53:3e:1c:2a:59:95:e7:4f:41:e0:cc:99:7d:3d:
52:8a:9a:47:de:b3:75:d2:f7:49:27:97:3c:19:e7:
dd:cc:ca:b7:26:5c:3f:27:c3:aa:2f:e5:59:dc:41:
ce:32:d7:0f:fa:f5:23:88:29:91:b5:4f:54:ef:dd:
e8:b4:de:c7:2e:40:f5:6b:62:04:10:62:a3:52:cc:
dd:3d:52:5a:bf:2b:9b:96:55:f7:39:d5:de:94:f0:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:42:B3:DE:A8:78:A1:78:F7:1D:3C:FD:64:9B:23:9D:93:9C:B6:B1
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/TUKz3qh4oXj3HTz9ZJsjnZOctrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.199.0/24
193.238.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3f:20:cf:d2:7a:b6:94:7f:20:8e:1b:0c:92:e8:a3:98:0c:
2b:33:00:f4:7a:f8:72:99:ed:ab:fc:23:d9:97:af:73:80:e2:
0a:dc:60:87:06:82:30:bf:9f:0b:b8:92:82:2e:f9:3e:54:bc:
12:7e:d6:e5:34:fe:a7:b2:d6:5e:e4:65:4a:52:b8:af:8b:27:
9f:92:cd:67:d0:f3:c5:86:ba:2c:b0:b8:ae:e6:96:cd:c8:bf:
ce:29:f3:1b:73:55:b8:ce:a0:41:80:5b:a0:b6:86:33:0b:c1:
6a:53:91:ac:ca:a8:3c:e4:b8:da:ee:50:ad:21:e8:26:69:ce:
bd:e2:f9:e6:a6:5d:16:3c:45:fb:cd:d5:a1:a5:5d:21:e4:d7:
36:50:70:0c:5e:6b:10:29:55:47:d3:1d:90:f6:1f:46:8e:b5:
79:e1:11:9c:86:05:8c:2e:b3:19:74:58:ec:ba:92:b4:ce:dc:
20:df:63:3e:e0:99:77:bc:8a:8c:e3:1f:91:69:4f:f8:7d:d2:
ff:15:61:f8:ba:13:09:d4:1a:2f:b3:58:53:98:c1:9d:4a:2a:
d9:e3:40:76:a1:e8:8f:33:47:a1:cd:52:ba:3e:61:49:6f:22:
60:0c:86:2d:0e:3d:19:07:ce:e0:3a:8a:60:5d:91:f6:59:86:
09:3e:7e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:53 2026 by rpki-client