Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/gItre61WrBgqxHfNxsuagoq-bWc.roa
File: gItre61WrBgqxHfNxsuagoq-bWc.roa (raw, json)
Hash identifier: Xxxxj24GaRAvbyFMDj6ou8Oxe9z4SFM5ClU7r2eoCac=
Subject key identifier: 80:8B:6B:7B:AD:56:AC:18:2A:C4:77:CD:C6:CB:9A:82:8A:BE:6D:67
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368DDD728F80610BEEB4205320A418B
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/gItre61WrBgqxHfNxsuagoq-bWc.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211522
IP address blocks: 45.142.122.0/24 maxlen: 24
91.103.252.0/24 maxlen: 24
91.103.253.0/24 maxlen: 24
185.17.0.0/24 maxlen: 24
185.174.136.0/24 maxlen: 24
185.174.137.0/24 maxlen: 24
194.67.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dd:d7:28:f8:06:10:be:eb:42:05:32:0a:41:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=808b6b7bad56ac182ac477cdc6cb9a828abe6d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:b1:08:e1:54:83:30:ca:46:58:c8:80:8d:
bb:aa:2b:c5:d8:a2:5a:74:b4:12:fc:5e:a3:01:d0:
8e:2a:ed:ee:00:b7:a8:64:41:2d:f9:62:c0:26:82:
7d:ba:f2:61:19:9c:02:60:01:20:c1:db:6b:26:ca:
c8:fe:4a:61:5b:a7:b4:23:8e:54:03:87:d0:f8:54:
f8:7f:da:b2:55:86:ef:c6:ae:ce:b0:05:59:e8:4d:
82:fa:55:59:10:4a:14:0d:96:29:7b:e8:10:a0:97:
61:a1:90:5f:af:58:9f:50:96:c3:fd:ce:20:c8:6f:
21:e6:f8:c5:62:f3:4e:09:6e:74:53:61:f8:41:fd:
00:54:3e:a6:15:de:22:e3:7f:a7:e0:a4:eb:19:e1:
cc:40:d3:98:6c:9b:a6:3b:87:92:8f:67:2e:24:ac:
cd:65:9f:06:7e:b3:82:e7:39:20:25:43:34:db:15:
7b:51:80:cd:6f:13:f5:2d:b4:63:c2:49:93:f2:0a:
c5:06:24:a4:15:c0:f4:b9:ce:b6:0c:26:99:9b:90:
2c:70:eb:06:ea:e7:8d:e2:bd:3b:2d:a6:08:d2:3d:
b3:5c:37:4b:f6:0b:96:b6:d1:69:04:e1:19:02:16:
68:e7:c6:ce:95:34:e7:88:c3:e6:b1:70:af:d0:15:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8B:6B:7B:AD:56:AC:18:2A:C4:77:CD:C6:CB:9A:82:8A:BE:6D:67
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/gItre61WrBgqxHfNxsuagoq-bWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.122.0/24
91.103.252.0/23
185.17.0.0/24
185.174.136.0/23
194.67.201.0/24
Signature Algorithm: sha256WithRSAEncryption
63:fe:5a:c5:36:aa:48:7e:42:3b:c1:af:4d:4d:f4:b8:b3:63:
46:d8:44:28:80:33:f7:f7:f7:7c:fe:b7:0c:c8:fd:57:2e:a7:
13:7f:76:bc:da:7b:a6:38:bf:09:c0:e9:39:e2:bb:f6:ac:32:
2f:b9:6a:94:b6:8c:e4:06:38:66:13:e5:8e:92:4b:47:5d:45:
de:e3:5c:a9:d0:87:0b:07:be:be:c6:90:9e:1c:77:dd:f3:3e:
06:66:cb:da:e4:88:1b:b5:2a:f1:a0:78:ed:bc:e7:c9:81:c0:
7d:cd:2d:8f:40:a0:4a:16:6b:6a:c7:f0:7e:d9:d9:ff:04:57:
5e:57:dd:43:47:cb:bb:85:e8:84:6b:0f:e7:6a:97:dd:77:05:
e3:17:a6:50:89:38:e7:9c:67:fc:61:51:b0:38:94:e6:ee:39:
88:ef:67:5f:49:fb:23:27:b9:ea:f3:9f:93:b6:a3:9e:08:70:
73:19:3b:5c:51:40:21:ad:75:87:f5:11:72:3d:72:0b:8a:08:
6d:1c:55:a1:08:98:74:e2:a2:0e:1e:87:d1:cc:ed:29:5b:d8:
33:6f:28:6d:a4:48:18:70:eb:6e:e8:ed:4c:77:c2:be:9e:5a:
6c:da:c9:e7:af:41:1a:aa:1e:a6:cd:d7:f7:92:8a:20:76:0a:
f3:a8:87:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:32 2026 by rpki-client