Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/joFDo41MP-1BcqHoHkwlFg8P1z8.roa
File: joFDo41MP-1BcqHoHkwlFg8P1z8.roa (raw, json)
Hash identifier: PbIKoZoQLXSokQUBQ7uoZI2UzhvW7fMo2LH6smtGEtw=
Subject key identifier: 8E:81:43:A3:8D:4C:3F:ED:41:72:A1:E8:1E:4C:25:16:0F:0F:D7:3F
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368E434C52B704AB51DB9DB49F4865B
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/joFDo41MP-1BcqHoHkwlFg8P1z8.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214927
IP address blocks: 82.115.223.0/24 maxlen: 24
185.106.92.0/24 maxlen: 24
193.124.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e4:34:c5:2b:70:4a:b5:1d:b9:db:49:f4:86:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e8143a38d4c3fed4172a1e81e4c25160f0fd73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:9a:fd:63:b9:4e:45:97:18:17:40:cd:5b:
09:1c:c7:1b:65:f9:ca:4e:32:1b:bf:86:c6:9f:6b:
67:11:d4:5e:66:42:b4:90:39:92:e2:98:7c:2b:02:
fa:15:ac:43:1a:df:d4:98:65:d7:2d:46:2b:9f:4e:
0e:04:7c:c1:42:01:f1:94:4a:92:3b:d3:b2:23:5d:
ae:e4:aa:99:59:41:43:70:b3:fb:7f:41:e2:ed:a5:
1a:27:4f:9c:fe:bc:78:72:ee:f4:9a:56:04:d2:44:
6c:77:8f:e1:23:a0:22:7f:f5:27:fd:7b:ed:72:f0:
b1:8b:bd:ef:41:30:9b:29:5b:2e:fe:a4:64:70:98:
b2:e1:fd:a4:cc:78:0e:e9:67:ee:9a:39:a0:a2:b3:
cc:05:f5:72:d4:b0:61:73:c6:16:83:f4:9f:1e:26:
9f:1c:e8:f9:33:3e:b9:c4:ce:d8:47:ae:3f:ea:97:
76:a4:21:4e:6d:74:42:e7:02:2e:1c:30:0d:f8:0e:
d5:bc:87:4d:df:5f:25:0b:17:de:49:8c:7b:59:ea:
d7:2c:c1:b8:53:5e:4b:9c:74:ac:3b:83:5a:a1:5a:
15:8a:57:b7:cf:0a:eb:7e:2c:29:59:b9:f2:c5:1c:
67:41:42:03:c1:4d:8f:e3:cd:3c:b6:92:4f:2d:83:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:81:43:A3:8D:4C:3F:ED:41:72:A1:E8:1E:4C:25:16:0F:0F:D7:3F
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/joFDo41MP-1BcqHoHkwlFg8P1z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.223.0/24
185.106.92.0/24
193.124.185.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0f:cd:dc:9b:2d:62:04:8c:02:17:d5:2e:dd:41:5b:6a:b4:
60:27:0c:01:9a:b3:44:51:b2:7e:82:63:f0:40:d7:51:51:16:
f2:f3:77:a4:7d:8a:a1:8d:f6:02:14:d4:91:d9:f3:b9:f8:72:
bf:6a:14:80:a0:e1:1e:e5:92:4f:a6:d8:2f:b0:67:ce:a6:4b:
2b:0b:4c:1f:6a:63:42:85:31:ed:08:d5:f0:a8:53:09:e4:88:
8e:c4:b7:40:4d:d8:2d:85:03:67:9b:14:84:b0:d2:ab:b3:43:
97:a1:60:81:56:fd:08:87:b7:7a:15:e5:91:3a:15:4f:17:0a:
61:36:2a:bd:07:c1:89:27:b5:81:d8:38:b0:7a:a3:31:72:e0:
b7:45:93:77:f9:85:9e:eb:f5:34:a8:e2:a9:d9:9d:d8:20:64:
9b:71:0a:46:d3:91:9f:cd:21:df:8f:52:74:a8:d7:98:9d:e5:
1e:2e:69:a2:3f:47:6e:ad:2a:23:05:38:23:f5:5d:6f:b5:63:
0a:5f:10:b9:a9:b5:ab:a4:03:ed:3e:3b:84:ab:6e:3d:87:ef:
a1:e3:32:b3:21:14:71:78:c1:1a:3b:e3:73:40:17:ba:d8:6b:
db:8d:99:3d:6b:8d:be:dc:78:65:32:a9:c7:42:8e:ac:22:ff:
6a:ae:fb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:11 2026 by rpki-client