Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Tc4FnhsNQ-W0GCklaj9fOTbsZ6o.roa
File: Tc4FnhsNQ-W0GCklaj9fOTbsZ6o.roa (raw, json)
Hash identifier: DQzBvi4zTTwoFVOtEh3eGdduIYzRHXHc72Wwg7WVR0g=
Subject key identifier: 4D:CE:05:9E:1B:0D:43:E5:B4:18:29:25:6A:3F:5F:39:36:EC:67:AA
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368D537E7DFAA290B6DE149D13A948D
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Tc4FnhsNQ-W0GCklaj9fOTbsZ6o.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208413
IP address blocks: 45.138.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d5:37:e7:df:aa:29:0b:6d:e1:49:d1:3a:94:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dce059e1b0d43e5b41829256a3f5f3936ec67aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3c:98:8c:69:9d:a5:52:95:ed:a1:84:66:ba:
41:48:d5:49:61:70:0e:45:37:81:49:35:96:7f:b7:
f6:a3:2c:8e:87:44:02:84:aa:01:2c:ae:79:08:fa:
8d:69:c2:29:99:20:8b:d6:b9:28:f5:16:2b:3e:6f:
10:b8:0e:3e:0c:95:01:5a:50:c4:4d:be:1f:df:b6:
a1:f2:92:6c:80:7e:29:a4:a9:c4:65:b1:37:5f:f0:
98:b6:44:ed:e2:7d:8c:07:05:66:27:30:af:11:1c:
de:7a:86:b2:d7:ca:dc:82:ae:82:97:a5:79:0c:84:
61:c3:41:7e:3a:4c:d8:33:1a:9b:a3:1e:9b:e3:60:
ce:c1:a6:48:dd:37:87:90:91:23:1a:58:df:29:89:
ee:23:8b:18:c2:ca:45:62:0d:a8:70:66:56:39:c3:
33:07:c7:d7:fc:1d:93:fa:7a:b4:64:62:af:cd:c9:
9e:d4:8c:60:c5:ff:58:c3:ef:61:c5:03:85:65:64:
84:a0:c8:4a:7a:f3:6c:11:18:6a:d5:4e:8d:1b:6d:
27:5c:12:62:f9:3f:de:53:f9:1b:4c:33:53:f3:62:
03:4a:af:32:70:71:6a:15:42:b6:e9:a5:81:0d:bb:
01:e1:96:85:14:f3:84:52:9c:8f:82:8f:32:df:73:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CE:05:9E:1B:0D:43:E5:B4:18:29:25:6A:3F:5F:39:36:EC:67:AA
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Tc4FnhsNQ-W0GCklaj9fOTbsZ6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.75.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d8:a5:06:fb:2b:70:f8:e9:06:4c:c9:0a:50:be:13:53:01:
c3:f6:4e:8c:50:32:52:14:31:7d:f4:e7:99:c9:bb:e6:13:5a:
05:5f:8f:3c:2b:73:5b:a0:ee:d9:d7:50:8e:b9:ea:21:4b:ad:
8f:17:6b:06:85:88:30:7c:1f:96:c8:bc:1d:56:53:be:af:b6:
93:34:5c:5f:d1:e6:a8:4c:6b:f3:99:dd:ab:84:a2:d6:a6:11:
94:eb:7f:03:5d:44:83:60:a3:79:c5:96:53:21:05:8f:15:94:
0a:af:d1:29:88:81:1b:c0:f9:65:e9:63:99:90:3c:c2:e0:22:
98:41:51:29:78:70:2d:39:63:79:c8:d2:da:e9:f6:73:23:46:
31:6e:46:a2:28:56:84:d8:1f:ec:50:f2:98:4e:00:b4:3d:01:
05:83:07:a3:a4:92:ec:d8:19:5d:34:4c:b4:ff:22:6d:f8:8d:
00:b8:25:57:b8:0d:f3:0e:71:d7:0b:09:13:59:c9:0c:2b:84:
a1:7a:b1:67:46:db:e8:ca:1f:f3:4f:bf:5e:4d:8b:2e:ab:bb:
49:3a:b6:b3:39:19:ed:02:3e:ce:11:69:da:c2:ad:6a:6f:4e:
8a:ef:0a:ff:62:e0:ba:6c:0b:65:51:61:ff:e3:60:f7:f1:5f:
6c:25:9d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:55 2026 by rpki-client