Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/WhbRiqgB1E6CRZoDeIZjrAghzE8.roa
File: WhbRiqgB1E6CRZoDeIZjrAghzE8.roa (raw, json)
Hash identifier: /N05VuHpy0FhkzxxiRkhd2nTz7Xui+CrcxjMilV6hFI=
Subject key identifier: 5A:16:D1:8A:A8:01:D4:4E:82:45:9A:03:78:86:63:AC:08:21:CC:4F
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368DFF08D2BD231A35E1940C307B991
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/WhbRiqgB1E6CRZoDeIZjrAghzE8.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212936
IP address blocks: 82.115.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:df:f0:8d:2b:d2:31:a3:5e:19:40:c3:07:b9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a16d18aa801d44e82459a03788663ac0821cc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8d:79:19:3a:5d:f2:a8:e3:32:50:e1:44:06:
3c:fd:e3:4d:09:09:49:30:2b:2d:19:a0:13:01:f4:
45:10:1e:ba:66:e6:c0:b1:90:b3:7c:a5:f9:00:f9:
b9:8d:17:7e:13:25:bf:a0:5d:81:b9:26:c1:16:10:
1e:1d:2b:cd:1f:7a:fb:07:70:c8:54:12:16:2e:7b:
d6:e8:8e:e5:bf:6b:26:5e:01:ed:98:df:86:b9:61:
fb:a9:a7:93:ca:39:b3:db:cf:4d:3f:20:c6:65:05:
24:bc:f3:35:ac:48:38:51:e1:ce:95:9b:9c:56:35:
f5:59:a7:64:de:9a:82:47:b0:05:68:0b:3b:b4:0d:
f0:a4:b5:6e:8b:fb:5a:b2:87:37:24:22:f7:31:3e:
5b:fa:6c:b6:fa:e1:73:be:2d:dc:79:61:8e:42:b6:
01:0e:96:59:83:43:fd:a2:ad:8f:5a:38:e0:fa:20:
07:08:59:bc:68:88:1b:02:3c:85:2a:d2:61:ce:90:
63:95:64:78:8b:bd:a4:21:7d:86:30:56:13:c1:a2:
01:c3:98:0c:7e:33:99:45:6d:f6:b1:a9:35:ca:aa:
17:3a:39:53:cf:24:e9:e6:71:04:4c:57:27:4c:66:
99:58:b9:fd:d7:8b:8c:35:78:77:ac:d3:b3:a6:86:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:16:D1:8A:A8:01:D4:4E:82:45:9A:03:78:86:63:AC:08:21:CC:4F
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/WhbRiqgB1E6CRZoDeIZjrAghzE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a3:1b:d5:af:c2:09:22:c5:b4:61:2e:6c:59:ea:d8:a2:85:
6c:33:8e:36:77:7f:e1:7d:fb:35:22:c7:95:e9:fe:1c:f5:ff:
52:0e:9d:0a:d4:68:73:13:17:31:c6:29:fd:b8:02:23:86:e9:
8f:84:a8:2a:63:0c:ab:09:c8:91:00:ce:db:62:2f:27:12:80:
ac:13:a7:34:6a:5d:a9:ee:d1:b2:85:f2:a1:af:66:25:69:1c:
ec:35:a0:96:86:f3:ee:fd:9e:ee:2b:6b:78:f8:09:40:68:1a:
31:e9:0e:b3:df:aa:c6:01:11:e7:a5:aa:b9:64:95:d4:18:a8:
98:6f:88:41:40:84:2a:e2:18:dd:25:e3:c2:2e:47:6f:26:20:
d9:87:69:79:a1:c0:f4:fd:aa:ca:43:d1:c9:a1:83:db:b6:df:
cd:bb:a2:cc:56:ed:4d:4c:fa:27:c9:fe:1e:e7:6c:50:80:4b:
0f:f6:44:45:f5:b4:ac:f1:e4:ca:b3:63:86:75:6f:55:fb:b8:
76:1d:17:7c:e9:52:c2:75:38:f2:24:1b:85:30:84:f7:73:1f:
2b:89:d4:f5:43:39:28:70:32:62:e0:3c:d6:88:57:b3:f5:e7:
c7:b1:4a:b9:35:89:d9:7b:01:6c:5a:e9:19:2a:fe:30:85:07:
74:f4:36:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:31 2026 by rpki-client