Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/VRs7A9lN4QPacOkPZrKTvJIQLrQ.roa
File: VRs7A9lN4QPacOkPZrKTvJIQLrQ.roa (raw, json)
Hash identifier: hRd0Eb5R6HQgi+cBl5Ohxg/WgPGYcO41SQK9CblLw1Q=
Subject key identifier: 55:1B:3B:03:D9:4D:E1:03:DA:70:E9:0F:66:B2:93:BC:92:10:2E:B4
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C6F3534F15DA21203A3D45DE39EA
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/VRs7A9lN4QPacOkPZrKTvJIQLrQ.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199685
IP address blocks: 91.103.252.0/23 maxlen: 23
91.103.252.0/24 maxlen: 24
91.103.253.0/24 maxlen: 24
94.142.136.0/23 maxlen: 23
94.142.136.0/24 maxlen: 24
94.142.137.0/24 maxlen: 24
185.94.164.0/23 maxlen: 23
185.94.164.0/24 maxlen: 24
185.94.165.0/24 maxlen: 24
185.174.136.0/23 maxlen: 23
185.174.136.0/24 maxlen: 24
185.174.137.0/24 maxlen: 24
185.233.202.0/23 maxlen: 23
185.233.202.0/24 maxlen: 24
185.233.203.0/24 maxlen: 24
193.124.188.0/23 maxlen: 23
193.124.188.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
2a04:5201:7::/48 maxlen: 48
2a04:5201:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c6:f3:53:4f:15:da:21:20:3a:3d:45:de:39:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=551b3b03d94de103da70e90f66b293bc92102eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:34:b7:0f:e5:ac:a8:12:ee:65:89:cb:d1:a0:
8f:38:87:2a:93:41:3c:7b:39:9e:df:6c:aa:3b:f0:
e3:5e:23:96:1f:95:e1:25:da:ad:aa:81:67:10:59:
e5:5f:a1:f9:6f:de:1e:2b:d6:da:59:2f:ea:27:38:
47:b2:f8:2a:3e:d2:1e:60:ed:14:98:12:82:2a:ab:
ca:ed:3c:35:5a:a7:58:f8:cf:3e:2c:0d:4a:7b:a2:
24:1f:d9:e3:d8:1d:a4:cc:37:6b:1a:f7:53:4b:8b:
08:0f:a5:16:86:d7:13:f6:98:24:b3:81:f0:77:f0:
f1:65:64:6a:c6:ad:fd:f1:d4:11:60:be:32:3a:99:
ec:01:10:6e:3d:23:16:8f:04:be:6e:bf:0b:cf:39:
7c:7a:7f:4f:ae:73:2e:95:b9:ad:ef:e4:eb:a3:39:
d7:93:04:a4:f6:1c:37:7b:bb:5a:86:19:e5:ff:68:
6f:b6:f3:4a:29:19:54:40:3a:47:a2:76:6e:82:5d:
8c:f6:e7:79:63:fd:e5:aa:ee:26:ff:09:ec:67:7a:
35:08:9a:a2:46:d1:6b:9b:6f:78:b4:56:50:16:96:
47:4f:be:dd:1c:83:b5:2c:f7:bf:cd:44:3c:c6:31:
15:39:26:07:51:3f:26:a8:8c:3f:6a:da:7c:98:46:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1B:3B:03:D9:4D:E1:03:DA:70:E9:0F:66:B2:93:BC:92:10:2E:B4
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/VRs7A9lN4QPacOkPZrKTvJIQLrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.252.0/23
94.142.136.0/23
185.94.164.0/23
185.174.136.0/23
185.233.202.0/23
193.124.188.0/23
IPv6:
2a04:5201:7::/48
2a04:5201:9::/48
Signature Algorithm: sha256WithRSAEncryption
18:f2:48:e3:0f:88:2e:40:8b:c0:57:14:b3:c5:d8:6c:90:10:
0b:17:94:a7:4e:3d:f1:07:7f:b6:53:dc:8d:3e:9d:26:56:88:
b3:ae:00:62:43:eb:27:e7:48:f9:23:34:fe:7e:21:fc:d6:bb:
60:59:3c:ac:5c:79:bc:9d:9f:84:4a:84:ff:93:b4:ce:5f:7a:
59:43:52:79:5c:f8:a9:57:df:86:39:9f:a9:18:07:9c:b0:8d:
87:db:16:f5:ff:c4:a6:c4:05:5c:cc:5f:57:2d:af:56:ee:7e:
c5:37:4e:b6:a4:8b:b2:a2:82:97:e7:8c:e0:ed:ad:5e:ca:12:
42:ef:70:8d:b4:e6:84:b3:ef:b7:93:b5:09:dd:29:e7:e5:eb:
01:70:51:ca:d5:31:31:2f:58:c1:b2:9a:7a:06:06:5b:70:58:
af:1b:f6:ab:e0:59:f1:9b:f0:5d:51:00:1a:66:80:8c:fb:49:
42:db:c9:36:d6:c3:48:37:48:8e:de:b6:e1:74:d4:8a:f9:0f:
2b:51:67:89:04:7b:85:5b:70:7f:fb:2a:4d:87:62:1e:13:7d:
f4:79:d6:a7:c9:ea:ac:01:ae:df:2e:9e:f9:ee:33:ea:06:43:
12:c1:fa:39:62:57:23:46:93:57:74:4a:ce:f8:86:d1:9a:4b:
bc:34:37:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:54 2026 by rpki-client