Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/gfOSBW7pKj0j5AhYRGAyM7Bm4sA.roa
File: gfOSBW7pKj0j5AhYRGAyM7Bm4sA.roa (raw, json)
Hash identifier: vYK+SPp8r91Ika9wPX59JIn/GM3ybSnCiVLPVkY/bkk=
Subject key identifier: 81:F3:92:05:6E:E9:2A:3D:23:E4:08:58:44:60:32:33:B0:66:E2:C0
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368BAA4BF303CFC81987878CE8FDCB3
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/gfOSBW7pKj0j5AhYRGAyM7Bm4sA.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43077
IP address blocks: 45.142.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ba:a4:bf:30:3c:fc:81:98:78:78:ce:8f:dc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81f392056ee92a3d23e4085844603233b066e2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:1d:fa:93:94:6c:2e:ee:41:24:c0:68:d3:
b2:a0:23:d1:7c:24:1e:f9:4a:cc:95:e6:64:08:f1:
47:92:1f:81:1a:17:ab:2a:ee:d2:43:9a:9e:00:95:
e7:5e:ff:49:87:4e:3b:81:c6:4e:5c:85:51:7a:05:
18:d7:b0:bc:e7:78:28:be:ec:58:bb:3f:c0:34:df:
eb:13:00:03:bd:b3:4b:b6:e3:90:29:9c:0f:2d:26:
d3:44:99:a8:2a:cf:10:fc:ef:ed:da:60:2f:9c:73:
21:a3:16:f8:ed:85:ff:20:cc:f7:10:bb:78:ed:c4:
6a:8e:f2:3c:a2:bb:b3:2f:d7:e6:c9:91:88:b7:b7:
5c:24:e6:b6:7a:02:28:6b:c0:c6:c4:fe:f7:5d:95:
5d:2f:1f:57:36:4d:67:d8:f4:7a:11:61:f1:79:42:
a9:56:ee:ac:7b:83:04:37:94:b9:b6:7e:ae:f1:8b:
79:1c:58:7e:48:2b:10:4a:4c:cd:8d:f9:ef:e3:2f:
78:a3:9f:2a:97:0b:1c:8c:2e:4d:8b:9d:29:ef:b1:
5d:c0:01:7e:39:d9:68:38:5d:83:87:95:d2:30:8d:
bf:af:0b:bc:e2:6d:0a:56:46:f1:86:07:10:8f:4f:
65:46:a8:67:44:be:6f:3f:6e:a1:99:42:f8:75:d5:
be:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F3:92:05:6E:E9:2A:3D:23:E4:08:58:44:60:32:33:B0:66:E2:C0
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/gfOSBW7pKj0j5AhYRGAyM7Bm4sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:36:e9:9d:67:bb:f7:1a:4f:69:2c:91:f1:1f:dd:52:5f:ed:
94:f9:6a:2f:03:79:fd:65:22:18:8d:6f:c6:fa:43:55:23:53:
d5:b2:92:c5:3d:c5:24:10:aa:bb:bf:15:ab:1a:fa:40:db:c2:
89:a9:a1:f4:fc:b9:36:cd:b1:b5:88:73:38:61:52:55:51:4b:
ef:70:0b:b2:3d:d8:8c:c5:0e:28:40:89:6e:c2:74:e5:f8:78:
c0:68:b9:41:d7:69:8b:13:fa:5c:cf:41:22:d4:ad:11:37:24:
9d:7f:27:6c:ec:8e:17:b3:9a:2c:4e:32:55:44:50:65:c0:7a:
c6:a3:9f:a3:e9:65:ac:5b:be:a3:c4:b1:88:69:42:83:31:83:
54:d2:85:65:b4:16:e1:84:1f:4e:93:03:8d:d6:d0:0f:10:ba:
09:80:d4:f8:79:65:c8:f0:e9:83:ca:7a:21:14:d4:ce:77:2a:
82:32:ea:fd:fa:62:65:b5:2b:6e:22:01:86:7f:a4:30:97:72:
2f:18:0a:6d:7e:95:be:42:a0:fd:77:78:8e:81:7e:2a:a9:60:
98:54:5b:07:06:3a:b4:3e:5f:f0:1f:fa:97:c6:a6:6e:10:97:
5a:1f:9a:dd:16:4d:26:98:94:54:56:fe:a9:f7:c3:55:ea:48:
08:e0:e1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:29 2026 by rpki-client