Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/j-uQ9gz2XIJ6IkFmmD8f705ruGk.roa
File: j-uQ9gz2XIJ6IkFmmD8f705ruGk.roa (raw, json)
Hash identifier: P4AG9zb9euyI19CsT7eGEULP2BUkA3mYYWMxywtopS4=
Subject key identifier: 8F:EB:90:F6:0C:F6:5C:82:7A:22:41:66:98:3F:1F:EF:4E:6B:B8:69
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368E88771E1117869AF0CB2C05B198A
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/j-uQ9gz2XIJ6IkFmmD8f705ruGk.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 5.252.118.0/24 maxlen: 24
213.108.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e8:87:71:e1:11:78:69:af:0c:b2:c0:5b:19:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8feb90f60cf65c827a224166983f1fef4e6bb869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:19:d6:4e:c8:5b:db:0f:12:6e:f7:74:24:
bb:e9:d7:11:73:9d:be:1e:33:8c:94:d8:d6:0a:36:
3f:2a:60:fd:57:1f:6e:6b:b9:e3:5b:b3:48:09:06:
65:5e:de:f6:d7:17:3f:dc:e6:02:38:40:5a:7f:29:
e4:63:d9:6b:e3:19:b7:ad:d4:c9:3b:a4:1c:ce:94:
04:77:e0:53:fb:df:89:32:33:12:5e:b4:64:7c:9e:
d3:ff:72:fc:61:9e:49:7e:62:2c:a0:16:64:b1:4e:
a2:6d:4a:07:a5:ec:03:59:96:cb:9d:4b:1f:4a:73:
37:10:29:98:60:69:1e:a1:71:45:ce:ea:78:4f:72:
38:51:ff:27:a3:b0:7b:51:7f:5e:c8:7b:0a:3d:e2:
b4:5a:67:65:f2:1a:ba:85:d0:4b:ea:69:1c:06:45:
e2:71:8a:87:48:eb:a4:cc:7d:39:ff:be:1b:ce:7d:
a9:d0:c4:b2:35:2f:db:5f:75:dc:60:e2:8a:5d:9c:
f0:02:5b:24:0d:2a:bd:43:0f:0e:fe:cc:5f:cb:1c:
9f:20:c0:6b:71:14:f0:7a:9f:c2:48:2b:89:ba:e7:
13:9a:3d:ac:1c:33:41:76:20:49:2f:28:bb:bf:bb:
08:ef:3a:90:47:b6:68:46:51:6c:a5:2f:17:f1:7e:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EB:90:F6:0C:F6:5C:82:7A:22:41:66:98:3F:1F:EF:4E:6B:B8:69
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/j-uQ9gz2XIJ6IkFmmD8f705ruGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.118.0/24
213.108.198.0/24
Signature Algorithm: sha256WithRSAEncryption
69:76:6e:b5:6f:b5:7d:7d:4f:96:7a:30:7f:97:77:c0:5e:28:
00:e6:ef:50:ba:c7:f7:e4:94:cb:92:46:b7:98:1c:dc:4d:2d:
80:0f:74:24:b0:61:7d:d2:ed:49:45:ee:4f:7d:1b:4d:c4:dd:
1d:02:1d:f0:8b:ec:8a:ec:87:b5:bf:04:50:a9:15:cb:8e:7e:
ca:71:cb:d3:d3:60:8d:d8:3e:88:61:d3:0a:63:c4:39:da:ff:
9a:43:17:7d:1e:f4:56:07:db:34:98:73:4e:5e:9b:1a:8b:be:
9c:f6:b7:fc:8a:c9:36:bf:19:de:b5:90:57:dc:e9:b2:c6:36:
d6:d7:cf:0f:08:9a:2f:05:bc:0a:93:ca:72:79:6b:06:12:62:
eb:29:46:33:a6:4c:ce:3b:14:ff:65:f9:2f:0c:d8:5b:9e:93:
7c:79:0b:47:27:8f:89:22:5e:8c:f4:ab:9c:b8:f2:5a:38:60:
96:8c:ca:31:90:73:e1:43:40:b0:a1:81:61:8a:82:f8:84:04:
37:e2:61:80:6e:f4:b8:2a:4a:a6:72:bf:14:26:cb:67:86:94:
f4:c7:bc:9f:70:ee:0a:f7:c7:40:0a:95:92:10:13:9c:60:19:
d5:99:9a:a0:68:4c:02:87:52:53:7d:23:1d:17:be:71:46:cf:
fd:bf:d4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:27 2026 by rpki-client