Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ilyuW3sRp9jO7_peXAg9TR5y6oY.roa
File: ilyuW3sRp9jO7_peXAg9TR5y6oY.roa (raw, json)
Hash identifier: FUM99s579iaJ91690Kmbvz45xjwmzPnOfEclj5F4jPY=
Subject key identifier: 8A:5C:AE:5B:7B:11:A7:D8:CE:EF:FA:5E:5C:08:3D:4D:1E:72:EA:86
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368D3C6D595E0EDE49EEDEC08E1B11C
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ilyuW3sRp9jO7_peXAg9TR5y6oY.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207577
IP address blocks: 45.142.123.0/24 maxlen: 24
195.66.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d3:c6:d5:95:e0:ed:e4:9e:ed:ec:08:e1:b1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a5cae5b7b11a7d8ceeffa5e5c083d4d1e72ea86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:4b:21:91:4a:5b:bf:ec:ef:23:1b:1a:05:
b3:67:a9:be:f6:ce:58:04:b2:a7:53:ed:75:d5:d2:
41:e3:68:bc:16:52:89:e9:f9:4f:df:f6:b1:da:e3:
d9:95:f5:f7:a2:c0:c7:eb:5e:a5:17:96:24:88:00:
65:c7:94:0a:9d:6b:2d:07:fb:70:d4:89:7a:5b:5f:
a4:81:2c:e5:56:ba:97:2f:86:32:23:0f:ec:a5:4e:
0a:5b:35:6f:2a:fd:60:a7:d4:4f:2c:52:55:43:62:
db:1d:ec:fc:36:d7:ee:8c:7e:3b:75:1d:c5:6a:94:
6b:4e:88:e1:05:df:e7:bd:49:d9:19:c7:6b:17:2b:
ef:81:ed:85:cc:6a:ed:a2:5d:d3:5d:1e:65:9f:41:
a5:27:de:a0:11:af:05:97:5a:ef:db:e3:5a:ce:28:
4c:29:10:1c:7e:d7:b3:d0:f7:cd:ad:44:a9:23:56:
6f:c7:4d:14:3b:78:46:10:81:89:fd:6d:c7:5e:c5:
a9:8f:f7:1b:4a:b8:5b:13:88:51:99:80:ef:66:3f:
57:a9:3a:0c:b9:74:08:23:28:9e:af:a8:ca:3d:cc:
4d:7c:13:d0:53:16:1e:ea:2d:95:42:89:1c:e0:fc:
aa:34:4e:d6:7f:ee:e5:d0:8c:1e:dc:73:69:a6:c1:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5C:AE:5B:7B:11:A7:D8:CE:EF:FA:5E:5C:08:3D:4D:1E:72:EA:86
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ilyuW3sRp9jO7_peXAg9TR5y6oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.123.0/24
195.66.104.0/24
Signature Algorithm: sha256WithRSAEncryption
80:22:c5:0c:29:bc:43:0a:4e:64:87:aa:f7:7d:c6:4f:9b:65:
1c:76:8b:71:46:74:ea:ae:01:1b:eb:1f:0d:c9:cd:c0:91:98:
1d:a3:f5:b8:89:07:36:e2:6b:69:03:e8:71:d0:9a:e5:fd:1f:
0c:9d:1f:b0:91:ab:f7:04:12:28:76:22:20:76:40:e3:95:5d:
6a:23:2c:dc:9f:aa:00:cf:b5:6c:a2:02:3e:99:45:ab:87:8c:
97:17:69:0e:26:bf:d3:d0:94:bc:b5:38:03:a7:8c:bd:e6:29:
eb:3e:f5:87:a6:02:a7:63:ab:d9:21:c4:ba:5f:1f:a3:0e:9c:
b8:ce:49:e3:5d:4e:3c:7a:3d:f3:84:e2:41:d5:82:29:7e:37:
6d:1f:18:8d:3a:86:b4:c9:de:33:ba:4c:d1:14:61:ae:b9:ca:
c8:76:56:7e:db:50:56:a7:a4:4b:75:93:14:d1:9d:24:c2:82:
00:7e:54:34:c6:47:1d:5d:bf:41:d4:a7:5f:66:d9:18:fb:ff:
12:55:bc:7a:59:f7:c0:5d:9a:78:75:ae:e2:25:8e:bd:a5:93:
84:3d:7a:76:56:93:3e:0d:30:da:3c:2f:9c:00:45:a7:dd:d7:
4d:83:97:32:fe:ac:ff:f3:6c:06:04:47:d1:d3:5d:61:7d:ab:
b7:14:d0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:56 2026 by rpki-client