Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/fjzNy6diFBNl1XmiB2-m-NFMeQs.roa
File: fjzNy6diFBNl1XmiB2-m-NFMeQs.roa (raw, json)
Hash identifier: Gorbjpgj1ncOhBrdnwTaDN6NbGACBbF82/Q4I+RUJl0=
Subject key identifier: 7E:3C:CD:CB:A7:62:14:13:65:D5:79:A2:07:6F:A6:F8:D1:4C:79:0B
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368CDC7BF8D70B72D5663C92279F1CE
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/fjzNy6diFBNl1XmiB2-m-NFMeQs.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203749
IP address blocks: 194.53.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cd:c7:bf:8d:70:b7:2d:56:63:c9:22:79:f1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e3ccdcba762141365d579a2076fa6f8d14c790b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:b6:36:6b:cb:d9:30:92:0a:ba:63:40:fb:
a2:90:05:2b:12:5f:53:9b:04:06:e2:c7:10:df:3c:
73:4a:f9:ce:3c:d2:51:a4:78:c7:bb:3e:9a:e9:ab:
6a:cb:16:7a:2c:97:90:2d:4f:fa:24:51:fd:e5:3c:
28:46:43:0a:9f:de:51:95:f4:26:0c:e1:92:bf:60:
28:4f:4a:30:3b:90:f1:1e:a6:f7:28:af:c2:85:f2:
df:cf:cb:96:20:a7:0d:b1:60:79:87:e3:f3:43:d4:
29:16:ec:b3:1e:40:12:6d:8a:f3:b4:7c:ec:b6:68:
af:e3:52:70:5a:b9:bc:66:bc:35:23:b1:07:bc:d8:
44:6a:cd:f5:d8:b8:1c:90:03:23:f8:2b:58:0d:68:
88:28:ec:c9:1f:46:9c:3c:9a:9f:2e:d4:7c:76:39:
7e:59:66:1b:59:34:b0:e8:5d:b1:c0:8b:4b:44:4b:
08:3d:cd:e1:22:ce:6a:61:89:2d:65:45:5a:85:91:
16:29:c8:cb:2d:62:88:23:1e:cb:f9:35:a6:27:c2:
75:8e:a5:c0:24:09:06:d0:18:77:13:d8:4a:6c:a5:
5b:51:b5:e8:10:69:fd:5e:3d:34:ed:68:d4:21:e2:
99:e1:55:95:49:13:10:27:9c:03:5d:5d:89:30:96:
7d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3C:CD:CB:A7:62:14:13:65:D5:79:A2:07:6F:A6:F8:D1:4C:79:0B
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/fjzNy6diFBNl1XmiB2-m-NFMeQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.52.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9b:cb:9a:b1:7a:99:f5:87:52:22:76:a4:ad:14:3d:d4:5e:
ce:72:00:b9:04:0d:08:9f:53:86:e9:91:ed:5b:60:66:d7:ee:
a0:9a:4c:e1:49:bc:ce:50:4f:99:f5:5f:04:9e:00:14:a3:90:
68:71:6b:e2:ea:55:3e:8c:e9:66:01:0f:5a:56:6e:ae:45:00:
5b:33:e3:3e:75:0b:52:db:69:d8:4b:34:6a:07:a5:57:bd:eb:
e8:20:7d:10:46:88:67:18:90:18:77:3e:a1:d7:7b:f4:b1:74:
f5:e9:a8:38:d5:bc:80:41:4a:a6:0b:49:ee:08:bb:28:86:97:
e0:62:77:06:63:3d:f9:d3:e7:06:e1:19:46:a5:de:58:ab:14:
50:09:91:34:0f:de:56:c1:61:37:b7:4b:35:27:be:3c:38:2e:
96:d2:2c:3f:bd:92:3c:1c:51:05:21:af:ae:6a:0b:56:24:ab:
36:5a:03:7b:d0:de:a8:1a:37:a8:40:bd:2c:ad:27:01:a6:88:
dd:3f:c0:23:3f:73:ab:6d:09:f8:65:0e:f8:f7:24:c2:e4:b7:
f4:44:79:c6:7c:e7:75:ea:37:6c:31:c7:9a:c6:eb:d5:5d:9d:
32:99:b1:e0:5b:55:f9:2b:01:75:b8:d2:e4:2e:f5:de:32:de:
dc:4e:db:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:40 2026 by rpki-client