Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/e0PwJW6rwzbzZ3dP_GAUuG8FLss.roa
File: e0PwJW6rwzbzZ3dP_GAUuG8FLss.roa (raw, json)
Hash identifier: Mt95hkOVJgvc6jlgf6ZazEblzSEZzNInIYnY94RexSQ=
Subject key identifier: 7B:43:F0:25:6E:AB:C3:36:F3:67:77:4F:FC:60:14:B8:6F:05:2E:CB
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C017D8118D9BF175264540E98E3D
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/e0PwJW6rwzbzZ3dP_GAUuG8FLss.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56630
IP address blocks: 185.40.5.0/24 maxlen: 24
185.117.117.0/24 maxlen: 24
185.232.168.0/24 maxlen: 24
194.53.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c0:17:d8:11:8d:9b:f1:75:26:45:40:e9:8e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b43f0256eabc336f367774ffc6014b86f052ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:6a:4b:b0:11:ff:bf:11:49:17:b3:48:bf:
1b:97:34:f5:9d:93:00:0f:22:d7:4f:df:60:39:eb:
3b:da:15:6a:4c:6b:4a:10:5d:11:42:18:8f:07:b4:
22:b4:9d:d7:2e:a7:e8:48:08:ab:49:b4:72:13:79:
c0:3d:89:75:0a:5a:3b:2d:a4:fb:aa:32:b9:e4:76:
17:77:8a:a3:ee:78:a7:80:72:0f:78:06:e5:e0:23:
21:dd:77:95:62:24:65:52:7a:bf:37:a0:02:ea:f5:
83:08:06:f4:90:cd:31:4e:52:52:22:c2:6f:75:fe:
d8:47:82:ae:ca:67:e9:55:50:35:b3:45:19:0c:0c:
08:68:5f:1f:ab:08:ed:6e:e6:37:65:8b:90:76:31:
cd:a8:c1:29:47:fb:75:ad:7b:a6:cd:e7:0c:7e:86:
af:0a:e6:84:29:7f:82:80:71:16:ae:d9:1b:15:2c:
c5:ac:a2:96:4a:78:f5:13:d4:9b:bf:10:eb:99:fa:
21:c4:c2:49:5f:31:c6:01:73:3d:87:ad:00:8b:08:
c8:35:11:e4:6f:8f:84:d0:12:22:b7:2c:3d:fa:cd:
fc:62:e4:b4:eb:9f:a8:e5:cc:74:ef:db:6c:cf:fb:
6d:7d:b3:26:da:91:e8:1d:a4:29:ef:ba:99:7f:69:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:43:F0:25:6E:AB:C3:36:F3:67:77:4F:FC:60:14:B8:6F:05:2E:CB
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/e0PwJW6rwzbzZ3dP_GAUuG8FLss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.5.0/24
185.117.117.0/24
185.232.168.0/24
194.53.55.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0b:63:c4:5d:44:db:64:0f:8f:c8:55:35:22:d9:32:ba:55:
df:41:ac:c9:f9:39:c2:95:fa:8a:fc:8c:da:c9:f5:6e:63:4a:
40:5e:ab:20:79:c4:f9:ac:8c:9a:89:a4:02:54:fb:91:e0:29:
d3:b3:b2:ac:06:e0:af:c8:c0:36:0e:0e:af:ff:66:d3:8f:da:
7c:49:b2:52:a4:23:34:9d:71:40:c9:ee:ca:9d:79:19:70:46:
51:60:7c:66:89:0d:9d:d4:83:d5:15:3d:d7:93:94:bf:2d:c4:
71:be:c6:63:aa:0a:62:7d:b7:6c:cb:86:9e:e9:bb:8c:34:39:
1c:8a:a0:c5:4e:4b:22:9f:d8:be:b1:da:d9:b6:74:3f:38:cb:
01:e3:35:5b:90:c5:d9:17:e7:80:da:23:7f:07:ec:ee:38:3f:
ba:6f:13:5b:13:c7:79:69:31:87:a2:6d:70:66:3a:2d:a8:b3:
19:2d:7f:e7:ff:7c:49:7f:06:f7:e6:9a:ce:fc:bd:ef:e9:85:
cf:a1:f8:36:ea:2d:11:dc:90:7d:38:99:8a:60:54:c6:52:d4:
d0:57:82:d0:89:19:83:5c:da:7e:dc:c0:46:b6:7e:9f:24:57:
eb:ae:10:6e:f0:cd:97:f9:63:e4:c3:41:a5:8b:94:db:49:73:
e3:b8:12:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:00 2026 by rpki-client