Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/_rTdWmke58bLB-_UxNKgrdA3fsg.roa
File: _rTdWmke58bLB-_UxNKgrdA3fsg.roa (raw, json)
Hash identifier: 1HAZPDKV0K7ebYtEB8E1U1EaSsFsxEIkYmrZZgTeTv8=
Subject key identifier: FE:B4:DD:5A:69:1E:E7:C6:CB:07:EF:D4:C4:D2:A0:AD:D0:37:7E:C8
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368D5E8A5688688897DF242972D07B5
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/_rTdWmke58bLB-_UxNKgrdA3fsg.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209019
IP address blocks: 85.209.1.0/24 maxlen: 24
185.221.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d5:e8:a5:68:86:88:89:7d:f2:42:97:2d:07:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=feb4dd5a691ee7c6cb07efd4c4d2a0add0377ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:8a:a7:d4:a9:fe:2e:6f:fe:d2:7c:6f:7a:
70:cc:fd:ad:2d:3b:ad:9b:81:7f:38:b6:85:c1:a1:
8a:32:cd:23:c6:f7:22:53:53:af:52:a2:df:1d:b4:
9f:bb:1c:97:99:4e:4d:31:a6:2a:a4:eb:f6:18:bc:
6e:d3:6b:7e:97:d9:66:d0:2a:0e:83:c9:7c:e6:92:
f5:e8:7c:5d:58:5a:45:49:cc:41:6b:91:36:f0:b0:
10:5d:2f:e6:da:4d:bb:33:9b:1c:bc:87:84:33:8e:
de:53:24:32:ca:02:22:b8:7a:a0:fe:e3:2d:84:32:
35:21:f9:67:2a:90:40:9e:a4:18:9e:a9:0f:3f:1a:
86:2a:2d:fb:e4:07:50:bd:a5:02:a6:22:8e:5b:f6:
3b:98:73:0d:08:11:ce:3f:dd:73:5d:e4:8e:82:7f:
df:eb:82:5b:fa:32:78:67:fd:f5:ba:9d:dc:de:28:
e3:4a:cd:27:d4:70:f2:93:f0:ed:a2:0d:c3:03:5d:
ab:c0:0f:c0:05:7c:d9:b6:3f:a2:bd:dd:a8:71:f5:
6d:5a:63:49:ac:83:13:24:2a:9c:94:cc:8b:fa:ac:
a5:68:69:7a:44:ce:e7:ac:23:60:37:ce:6b:c1:e5:
36:07:e8:ff:20:56:c2:d0:55:b9:74:a6:ff:3b:35:
a4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B4:DD:5A:69:1E:E7:C6:CB:07:EF:D4:C4:D2:A0:AD:D0:37:7E:C8
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/_rTdWmke58bLB-_UxNKgrdA3fsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.1.0/24
185.221.161.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:10:c7:08:e4:6b:86:83:df:a0:ce:6d:5d:2b:5f:b7:a5:b6:
1d:6b:b7:83:76:00:08:a2:b1:e5:96:6d:ae:3a:3d:7d:4b:29:
2f:26:b4:bf:a3:48:f1:45:3f:32:f3:d2:5c:df:8e:6e:8e:27:
34:d2:a9:22:c9:5f:44:22:03:b0:f4:fc:46:e8:b8:f0:48:72:
dd:4e:d3:63:21:4d:5d:41:95:e7:ae:aa:46:23:bf:ca:6b:e3:
78:0c:7a:47:79:b2:bb:1f:2f:1b:35:f5:2a:3b:ac:99:b0:6a:
71:f7:00:a3:16:a5:9a:25:e3:d2:a8:0d:0f:94:e8:73:84:4e:
96:88:e1:9f:96:27:ea:4f:0a:93:03:9f:d5:05:34:ec:3e:89:
d4:31:9d:99:a2:f1:65:3c:57:bd:2c:fa:3c:5d:ec:92:f3:ef:
be:85:63:0b:b7:23:ae:ee:11:d2:86:53:0f:d7:52:77:fb:70:
b5:69:30:52:6d:d3:7e:9e:ce:ef:61:5b:c4:33:b0:c4:d0:4e:
60:43:74:bd:44:5f:0c:55:cd:8e:f0:d7:b9:84:6a:ba:03:90:
be:83:48:2e:50:ce:31:76:ec:ca:5f:5d:1f:08:58:46:c8:b8:
b0:85:14:cd:c8:84:bf:3e:fa:54:79:6f:e2:67:46:4a:37:6d:
09:b6:18:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:29 2026 by rpki-client