Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/mtVCNFhH-kLPyD08lhcZZkeuYiA.roa
File: mtVCNFhH-kLPyD08lhcZZkeuYiA.roa (raw, json)
Hash identifier: 5Kw/dKqwXEKAA8+diMMAE+xr3MUHVZdjhjEP2ewQJhc=
Subject key identifier: 9A:D5:42:34:58:47:FA:42:CF:C8:3D:3C:96:17:19:66:47:AE:62:20
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368D712E5B4C9CF45623D501F8B943F
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/mtVCNFhH-kLPyD08lhcZZkeuYiA.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 45.8.211.0/24 maxlen: 24
45.142.120.0/24 maxlen: 24
194.53.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d7:12:e5:b4:c9:cf:45:62:3d:50:1f:8b:94:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ad542345847fa42cfc83d3c9617196647ae6220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:33:25:09:a1:f2:15:47:31:aa:8a:80:a3:68:
cc:79:46:d3:bd:70:24:86:4b:7e:37:1b:b4:ac:65:
30:98:ec:b7:c0:26:ed:35:2d:78:ca:43:fa:a5:38:
f0:f6:6b:b8:97:93:10:8a:7a:a7:78:12:93:7f:78:
00:37:66:a6:be:ce:55:ba:5e:e8:c1:eb:6e:bb:ce:
f8:81:42:66:61:a7:48:28:42:98:29:0c:0c:72:85:
06:30:b1:31:a8:34:21:12:3c:e9:32:30:0e:38:10:
18:0d:fd:85:15:07:f4:66:e0:80:a1:cd:e1:1b:4b:
2c:25:8b:2b:a9:ef:d9:55:18:c2:07:45:53:cc:54:
d5:62:de:b8:ab:b7:8b:ac:29:6b:4f:8e:b9:82:31:
dc:9e:ac:21:63:1f:c4:24:4e:84:24:20:bb:ff:3d:
6a:35:82:af:4e:72:da:19:64:e8:d7:b0:ab:4c:dd:
1f:ea:76:a8:18:61:e8:1b:d6:a8:d2:e4:56:96:bc:
b7:c0:af:35:b3:0b:b5:c1:b6:ec:f3:f4:d3:89:19:
5c:47:57:ba:24:79:43:5c:7f:d5:6e:7d:89:1e:96:
51:10:32:a6:b4:08:8b:5a:06:9a:5c:d5:f9:a1:34:
9a:5e:8e:30:b3:88:ee:8f:f3:7d:b9:37:3b:77:03:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D5:42:34:58:47:FA:42:CF:C8:3D:3C:96:17:19:66:47:AE:62:20
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/mtVCNFhH-kLPyD08lhcZZkeuYiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.211.0/24
45.142.120.0/24
194.53.53.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:32:82:12:88:a0:a5:a2:ef:ea:80:7c:e0:c9:4a:1a:96:e4:
50:86:f4:ab:fe:07:9e:e2:92:ed:63:ac:e9:18:8c:e3:59:8c:
b2:60:92:59:68:e4:55:04:5a:8b:2b:ed:4e:70:85:ce:1f:64:
fa:55:73:70:9f:17:56:8c:a7:23:58:02:20:22:7a:32:ba:7d:
f7:e6:80:b6:4f:0c:1a:08:ba:eb:e8:3a:d9:d5:95:e1:50:4b:
0c:0b:62:e1:87:dc:45:3d:f3:30:62:1c:a7:1d:05:e0:c2:a3:
0a:fc:a3:85:ba:8c:0c:ca:0c:d2:a4:e6:2f:5a:46:de:e3:74:
ba:b7:58:ed:38:af:8d:6e:ba:93:d6:8e:2a:a3:52:3f:22:a9:
80:ea:cd:92:a9:91:a4:04:d7:48:48:03:dd:7e:23:e8:55:ba:
44:6c:cb:86:ce:10:cc:e8:ab:3b:28:3e:45:a0:e3:d7:b9:10:
e7:de:95:ca:c9:e7:92:3b:f5:7b:60:05:dd:74:1b:1d:2b:88:
83:23:05:f1:89:3f:1a:a3:c9:ee:c2:e3:9f:85:16:c4:36:2e:
41:9d:71:a0:58:8e:18:eb:02:de:78:7b:e7:c4:29:ec:59:ff:
71:38:e6:e1:32:87:fc:c6:a6:da:8f:d8:9a:8f:85:1c:b7:b8:
4c:65:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:58 2026 by rpki-client